Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: hLl0GqnI5I+JpmXGCpKl3lM4LdyNw6wcPRTBNjPIhuE=
Subject key identifier: 27:59:6C:98:A9:BF:06:5F:F1:7B:03:AD:73:79:89:C8:DE:AA:2F:BC
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 019882E7BE8AEC8CCE3B30EB40C20DF2B915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 0BB6
Signing time: Thu 07 Aug 2025 05:01:22 +0000
Manifest this update: Thu 07 Aug 2025 05:01:22 +0000
Manifest next update: Fri 08 Aug 2025 05:01:22 +0000
Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: MIXybdKX76XFqZpWD+zqU24ELTQHbyWiq8fx6uudjOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:be:8a:ec:8c:ce:3b:30:eb:40:c2:0d:f2:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: Aug 7 05:01:22 2025 GMT
Not After : Aug 8 05:01:22 2025 GMT
Subject: CN=27596c98a9bf065ff17b03ad737989c8deaa2fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:dd:12:76:a0:a0:e8:d5:d5:76:82:fa:05:
0b:a6:f2:4c:58:15:29:3c:21:91:56:f4:07:00:58:
80:ae:7d:a4:5e:81:33:fb:89:3b:82:74:c4:49:4f:
29:cf:70:95:93:85:be:df:c8:2f:30:24:b8:28:29:
96:69:28:f4:7c:64:63:09:a6:6e:28:5c:bb:ad:bd:
92:bf:2b:0b:a9:c5:a2:0c:d2:30:b3:5a:45:5a:6d:
eb:a0:76:df:4b:a0:0d:e8:ed:d5:3e:a0:12:8f:dc:
54:b5:82:26:ed:12:8e:62:bc:9f:1d:14:6e:85:65:
bc:28:48:fe:59:0a:95:11:95:30:6c:26:a3:b0:53:
67:1a:58:9d:a8:a7:f8:d9:dd:cf:6d:b2:32:81:4d:
0a:0a:d9:93:9f:a2:74:da:08:c5:93:a2:86:12:86:
87:a7:88:56:56:61:03:0d:9b:67:64:9b:9d:f0:2c:
a8:61:d0:59:c0:c3:61:fa:91:26:f1:25:a1:c5:ff:
a7:06:56:80:1b:83:c3:a9:73:fd:35:0d:01:52:eb:
a2:aa:ab:cf:36:96:dc:ea:e8:3f:c5:ec:36:4f:41:
1f:5f:ca:ed:aa:79:d3:0f:8f:fc:de:d2:aa:2b:28:
ea:ca:36:b1:50:52:66:07:af:81:84:87:2b:7a:54:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:59:6C:98:A9:BF:06:5F:F1:7B:03:AD:73:79:89:C8:DE:AA:2F:BC
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:99:02:11:57:50:b3:7c:39:74:19:63:78:54:9f:b9:8c:25:
80:b2:6c:34:81:62:a7:07:7e:4a:6c:ba:99:9c:1c:5e:3c:4a:
ad:e7:97:2e:32:c3:5d:ee:de:95:21:c2:cf:d3:b9:23:58:f7:
c4:16:3f:3e:77:3c:2d:be:cb:27:76:7c:a6:8a:aa:72:a7:24:
a9:5d:3d:3f:a5:be:7b:0c:00:5e:be:4d:2f:42:3e:09:01:cc:
a2:89:56:07:12:79:af:eb:17:b4:73:b0:83:23:c5:15:26:a2:
f0:97:a4:e6:04:d1:2a:a3:cf:1e:5e:43:b6:3d:ff:33:b8:2b:
39:67:51:8b:3c:28:f4:c5:a0:51:98:29:9a:6f:cb:36:3b:67:
dd:0e:7a:05:f8:7f:cf:44:1c:c2:cf:ef:0a:78:fe:86:b6:0e:
27:38:4c:e1:dd:14:f6:7e:0d:32:24:7e:a3:48:69:08:3b:a9:
56:86:01:53:45:54:62:42:5c:6e:45:33:82:a9:37:28:48:4e:
e0:16:2a:29:63:88:57:9f:54:1e:26:3f:14:53:20:50:ca:ab:
bc:1f:68:47:92:66:ad:a5:8e:03:19:0a:f8:69:73:87:a9:29:
62:13:82:76:0b:00:f0:d3:54:0f:04:7a:ca:27:93:99:26:da:
dc:84:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:23:14 2025 by rpki-client