Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: GJpM6XFOp6etp2Lbzl/5PRa2uoh5l/TrcixdKu8fq0M=
Subject key identifier: 9A:A8:67:87:00:B8:EA:3A:0F:04:68:77:CA:99:75:80:F1:A6:75:3E
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 0198A04EF6BAF36608C528C8E2C85716E241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 1648
Signing time: Tue 12 Aug 2025 22:03:06 +0000
Manifest this update: Tue 12 Aug 2025 22:03:06 +0000
Manifest next update: Wed 13 Aug 2025 22:03:06 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: xTxJyUD9XLHmb6aOnOorC6heTnrTU0WiVf8rxvIBa5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:f6:ba:f3:66:08:c5:28:c8:e2:c8:57:16:e2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Aug 12 22:03:06 2025 GMT
Not After : Aug 13 22:03:06 2025 GMT
Subject: CN=9aa8678700b8ea3a0f046877ca997580f1a6753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:42:09:7d:2a:ba:cf:bc:43:f9:49:dc:b3:
b8:e1:34:ab:5e:c8:bf:9e:4e:0c:c0:5f:95:3f:9f:
85:e2:98:5e:e0:64:7f:df:fb:a3:93:8f:48:4d:26:
9e:3a:59:df:d2:d1:e9:75:2e:a5:f5:74:4c:2f:cb:
f6:94:dd:b0:e4:3b:00:8e:03:96:d4:fe:8e:64:d3:
f4:5f:5f:fe:87:52:ad:fa:87:a2:28:6e:3d:ae:7d:
dd:bf:47:6a:e8:a3:0c:d0:d9:80:51:3c:36:a0:d4:
b7:e8:3a:9b:ad:81:83:bb:95:2d:24:5e:d9:2e:27:
2a:d6:9b:fb:7a:b6:a9:31:ae:53:87:68:8f:f1:10:
37:00:1a:c6:65:49:d8:e5:ba:34:e0:b9:ac:6b:0f:
46:17:81:ac:ae:8c:c0:e1:1f:f6:2b:f8:39:8f:59:
56:6a:d4:2f:24:4a:60:57:5f:8e:30:fd:c3:47:e6:
c4:ce:38:02:a7:f2:c6:12:ba:1d:85:bc:c6:b9:18:
f7:60:8b:c7:fe:cb:31:43:ca:c5:f0:ad:c5:e5:8f:
61:ad:6b:c5:7e:7f:31:7d:a9:db:12:e6:24:30:12:
85:18:7e:be:0e:29:4b:cd:00:61:e8:7b:20:d0:af:
f6:54:e9:a1:5f:44:a8:ea:60:7b:69:22:ad:88:1e:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A8:67:87:00:B8:EA:3A:0F:04:68:77:CA:99:75:80:F1:A6:75:3E
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8f:1e:d8:e9:a4:05:aa:7d:0f:9d:70:20:19:e8:d7:67:4d:
25:ea:6a:04:d0:1a:dd:c5:44:10:fb:b0:aa:0e:95:1e:40:32:
cc:9e:61:9e:c2:33:c3:ce:c1:41:59:48:bc:6b:0c:e3:40:fa:
c9:8d:0c:99:c3:00:55:d6:28:4e:74:1b:67:af:21:c3:b0:d7:
96:c9:42:29:82:c8:c8:da:3c:a9:6e:ab:9d:63:98:2d:42:01:
a6:e0:23:2d:95:e0:81:89:91:53:2e:5e:39:cf:1c:26:ef:72:
36:76:07:ea:7d:6c:ce:98:70:83:cc:3a:5e:e2:5b:9e:73:f3:
9e:41:59:98:df:e5:be:d3:39:c4:b3:33:cb:e5:29:b3:7b:b7:
71:6e:1f:c4:d6:ef:b2:0f:ea:ea:fb:f1:9c:fe:1e:be:2d:cb:
77:8a:43:4b:7f:85:45:d8:f2:fa:22:86:c4:04:6f:fc:b1:21:
3e:b1:fe:90:06:27:99:9e:3a:2f:26:f4:0e:7c:b7:b3:cd:44:
bd:47:f0:ce:09:bd:9b:fb:3b:fd:09:01:74:3a:44:2b:93:29:
e9:32:8d:b7:5d:ac:14:5f:79:45:92:bb:a3:b6:32:25:9a:7f:
ef:00:93:8c:cb:3c:4e:8b:63:f6:f1:6d:4f:29:3c:24:4d:3a:
92:d4:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:40 2025 by rpki-client