Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File: GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier: cwSjdJ5W8RqKtcLyhG+ytZbcUY80VVdrMZsUwRUFgic=
Subject key identifier: D5:D6:37:CE:B6:9D:91:9F:4D:1F:CE:CF:91:14:53:29:52:8D:E3:DD
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 019881D481C035FABEDDC4BE4AFC8E7FCD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number: 129F
Signing time: Thu 07 Aug 2025 00:00:44 +0000
Manifest this update: Thu 07 Aug 2025 00:00:44 +0000
Manifest next update: Fri 08 Aug 2025 00:00:44 +0000
Files and hashes: 1: 1TdnBIQpLOCBWH2mt28aivouF4I.roa (hash: OXerkvpTMgtDn41YlP30T5MtsanNBIBwFIzBvbUKvGE=)
2: 4wV3tNw8L-G2g-REyKg7rTv19xc.roa (hash: mlDNB6DLTguCsOh+3JJiKoaNz1XvyyZU+vhtwaeg1hU=)
3: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: tZ2UjI3gJzEIrOYOU+1kcFSE8A31a2rOLuWaNgbd804=)
4: K4x7WnCPM92IfHKWVCrULIlUaVA.roa (hash: KVnqPoeOrxHfk6WulHu6MwITd97JNsKLMzaXFdfZRTU=)
5: L0erWF8zE1RnGBSaNfbAKYl2kd8.roa (hash: /zy+SS2a9gbTjEnXkpsItTqQEn8dlA3GKuajYSpZLoU=)
6: bGl-O1VWsJiqIgDexKk7dKheHQQ.roa (hash: 6KFHpVYSoKMAphsv2/6O6zAXDRyPyfaziYVLYjZHZ0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:81:c0:35:fa:be:dd:c4:be:4a:fc:8e:7f:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Aug 7 00:00:44 2025 GMT
Not After : Aug 8 00:00:44 2025 GMT
Subject: CN=d5d637ceb69d919f4d1fcecf91145329528de3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:94:8f:de:da:4a:84:26:06:0f:0f:42:36:
eb:e8:c8:6d:08:d6:a5:7e:b8:5e:bf:7f:a5:5a:40:
f0:c2:59:8d:e1:3a:ac:9d:12:a1:b6:87:be:aa:71:
ce:a9:29:d0:30:f1:85:23:d4:da:05:be:b2:3e:a4:
0c:24:10:55:54:bc:e2:b2:ba:6a:41:0a:43:8b:41:
62:23:fa:65:16:9e:5f:5e:07:c2:7e:90:f1:1f:3f:
ef:f6:fa:7c:20:b1:e5:0a:58:3a:f2:e6:1a:c9:1f:
25:8a:7b:df:c8:be:a8:d1:ca:22:5d:dd:e3:e6:21:
16:52:51:1e:9a:cd:0c:1f:73:8b:e4:9c:71:54:da:
00:a7:cb:9e:f0:a8:5d:cf:93:bf:6d:42:a6:0a:1f:
86:7d:e4:63:05:3f:c9:4e:27:8e:25:a5:5b:13:1a:
2f:4e:00:de:2c:f2:15:f4:7d:4d:5c:69:5f:ae:49:
e2:fb:72:84:93:9f:cb:f7:a2:3f:e0:d0:b6:a1:24:
b3:4a:f7:76:a2:07:1a:46:b0:80:70:41:50:58:ef:
24:4d:59:ca:cf:d4:2e:58:7b:2e:2c:25:33:b3:07:
44:e4:ad:80:28:98:85:b6:88:86:23:76:07:ff:46:
07:ab:c4:3e:9c:58:d5:25:ae:c9:ed:37:22:4e:c6:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:37:CE:B6:9D:91:9F:4D:1F:CE:CF:91:14:53:29:52:8D:E3:DD
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e8:3b:c4:80:a2:c2:1f:b2:75:67:df:38:49:e8:c8:a8:68:
33:d2:09:25:84:dc:92:e9:87:33:e7:0e:b3:cb:86:bc:df:da:
4b:6a:62:8a:d4:9f:35:71:c6:25:d7:30:40:d2:12:fa:70:32:
5a:8a:d7:02:53:49:66:72:23:be:40:4d:95:6f:f5:e2:20:9f:
4d:bd:27:ea:ea:53:b3:43:00:02:4f:48:4d:b4:00:73:e5:cb:
e2:48:93:57:a2:98:05:2d:7e:33:09:15:4e:88:5a:72:f8:3c:
1c:ed:f0:a6:97:c8:6f:26:f9:78:0f:4d:14:30:18:42:54:aa:
0f:cc:d6:2c:d8:e1:ac:36:fc:a8:34:78:76:29:bf:44:92:53:
4b:3f:5a:49:bd:aa:cf:61:66:d1:7f:8a:04:cd:5c:06:9f:73:
97:df:de:7d:8c:77:89:f2:e0:77:d3:02:97:d9:16:46:18:5d:
48:ad:b8:a0:71:e4:a7:23:9d:4a:69:eb:cb:e6:f7:24:5d:73:
22:5f:e5:a4:da:a2:fe:5e:85:3e:eb:3f:d6:2d:19:98:fc:27:
99:ae:24:98:ac:ff:16:3f:67:b7:98:4b:c9:1a:95:a9:e1:8c:
f4:d3:4b:ea:a3:d9:c8:93:c0:d1:f0:9d:7f:a9:bf:4a:19:f2:
c5:cd:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:48 2025 by rpki-client