Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: Wwrq44dZJvS+FAhpjrs0E0UMCMzms0y9VUu9jqj/F38=
Subject key identifier: 6E:D8:37:2C:3F:A1:AD:D8:58:92:95:D4:51:7C:D5:8E:52:66:16:92
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 01988DA213BFF13F60028605530CB7EBD4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 07:01:05 +0000
Manifest this update: Sat 09 Aug 2025 07:01:05 +0000
Manifest next update: Sun 10 Aug 2025 07:01:05 +0000
Files and hashes: 1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: O2XneER40Aru8PjKeKgdOykCZrW6vgpHHChLyVqkIg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:13:bf:f1:3f:60:02:86:05:53:0c:b7:eb:d4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Aug 9 07:01:05 2025 GMT
Not After : Aug 10 07:01:05 2025 GMT
Subject: CN=6ed8372c3fa1add8589295d4517cd58e52661692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:a1:95:52:c7:a2:86:b7:52:8d:50:cb:8d:
29:26:45:53:bc:e0:c5:f6:ab:f9:46:be:20:0a:fc:
b9:b0:01:d6:c5:51:8a:e8:bc:67:7b:66:d8:30:d6:
64:7d:df:0e:d5:20:50:ff:8e:49:da:b8:37:d7:5d:
bf:15:d4:24:85:a4:63:8b:2d:11:d8:ba:5c:9a:bc:
22:02:a1:6b:6b:9f:70:ce:e2:c6:82:86:8f:16:f9:
17:35:6b:8b:d8:be:69:82:d5:83:55:05:aa:3b:d0:
c9:80:07:0f:bb:ed:3e:53:eb:e9:fd:c0:96:2c:0c:
35:5f:0e:7a:3d:e1:68:d8:a4:fc:6d:ff:4d:a9:88:
ce:f4:15:2f:cc:3e:bc:b5:be:d9:e1:e8:e8:2f:e4:
16:01:4c:5b:5f:bf:21:6e:d3:7f:94:a4:b5:e3:02:
ce:fe:aa:a6:fb:44:5e:1c:e5:37:63:99:09:98:1c:
35:6d:dc:dc:e2:bb:f0:fb:d3:f3:26:a3:28:24:eb:
65:76:03:30:6c:c2:30:88:1e:cb:ad:67:83:ec:20:
b0:fc:76:00:67:ee:83:a9:6c:82:c3:97:f3:34:53:
89:10:53:70:39:2e:b4:2c:c6:17:c3:f6:0f:92:31:
8b:e3:4d:88:c3:01:1c:8a:6c:8a:bb:54:82:5f:36:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:37:2C:3F:A1:AD:D8:58:92:95:D4:51:7C:D5:8E:52:66:16:92
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:21:7f:43:c7:ab:60:a5:a0:dc:06:d4:c1:ab:b3:6a:77:4b:
5d:5d:50:3f:30:e7:23:ce:23:21:3b:ca:06:b3:8e:af:02:47:
24:70:6e:3c:e0:16:86:29:85:ea:56:71:91:2f:1f:71:c2:00:
d8:27:43:0a:fb:be:27:ad:36:80:d9:67:92:60:e7:fb:c7:d3:
10:ec:c7:40:a7:f1:b2:bf:99:cb:d0:96:c2:eb:90:7c:90:0d:
e8:a7:40:3c:c9:30:3b:fa:79:34:21:a6:51:a7:d6:a7:2a:9e:
4f:dd:a1:8a:64:f5:f9:12:b4:e2:f1:bf:ea:ae:7d:35:b4:43:
15:d5:69:cb:b2:11:02:7b:49:97:0c:9d:04:fd:84:de:33:31:
68:87:06:85:92:2a:28:ed:51:18:8f:de:0a:9a:33:47:e3:8b:
b3:36:ef:43:75:de:99:79:27:de:f9:7e:21:5f:38:e3:d7:a9:
a5:45:40:b0:e0:b5:84:1b:e3:20:f9:a4:c6:80:59:26:40:bf:
e0:f3:0f:f5:50:75:0d:7f:a1:b4:17:2c:12:24:71:55:1e:ac:
8f:44:7f:13:a2:ef:d5:0e:29:6e:ab:6c:1f:92:85:bd:44:36:
66:06:a6:2c:6f:8c:06:26:db:8d:24:7b:62:af:81:73:90:d1:
8b:1c:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:37 2025 by rpki-client