Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: LzVQQd7VrafOtGjNco90ouiYkbw/0Ohw0E17TUVRvqA=
Subject key identifier: D8:D4:CA:0F:E0:0E:EF:FE:61:92:F7:C1:38:FB:B0:8D:0B:42:53:1E
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 01989C70DE6B7BD96B6BE51A5368621F0518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 1503
Signing time: Tue 12 Aug 2025 04:01:39 +0000
Manifest this update: Tue 12 Aug 2025 04:01:39 +0000
Manifest next update: Wed 13 Aug 2025 04:01:39 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: w0RfJV/86LZU6XA7Cp338jenoHFu1XYfzgNlTatwHlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:70:de:6b:7b:d9:6b:6b:e5:1a:53:68:62:1f:05:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Aug 12 04:01:39 2025 GMT
Not After : Aug 13 04:01:39 2025 GMT
Subject: CN=d8d4ca0fe00eeffe6192f7c138fbb08d0b42531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:dc:31:6b:9f:07:2a:9b:72:2b:e2:41:7c:
4f:9a:81:48:fe:de:d0:6d:a4:be:aa:7c:2f:d8:72:
28:73:e0:86:4f:73:0d:e5:db:e0:5f:1e:15:de:ad:
10:25:13:8a:1f:46:22:07:9f:a9:b4:70:cf:f9:f5:
1d:d9:6b:89:03:c2:13:c3:ac:2f:24:f3:b0:42:65:
b8:ae:b7:32:2a:fa:31:90:ba:cd:91:1c:37:b3:d1:
e1:64:42:99:40:4e:bc:76:f8:26:42:8a:f6:a6:d8:
df:94:b9:2d:15:77:11:0a:25:ab:28:fd:66:66:79:
ed:c2:e7:8f:37:f5:7a:e4:30:b0:06:40:f7:55:ae:
ad:25:e5:82:f9:0e:ec:84:87:cb:97:3c:7b:56:bd:
67:10:0b:6a:fc:bb:bf:0b:eb:ab:f1:4f:dd:a4:76:
93:0e:8f:43:d4:0e:7f:12:7f:2a:50:40:e0:83:14:
24:46:16:db:12:3a:1c:4f:6d:2a:ea:9c:45:9d:fb:
4e:db:77:2a:42:30:ee:59:09:e2:01:30:40:25:d1:
5f:90:e4:32:a0:0b:a4:02:d7:d7:69:e6:c8:1f:6c:
74:e1:8b:ad:07:e6:c9:3f:0a:6c:1e:7e:3a:9a:e3:
cc:b7:d3:61:81:ea:61:1e:68:bb:29:28:75:5e:39:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:CA:0F:E0:0E:EF:FE:61:92:F7:C1:38:FB:B0:8D:0B:42:53:1E
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0d:e8:4f:1b:62:7b:ef:df:49:e4:d3:1b:e5:49:01:bc:31:
07:41:e3:8f:e5:15:49:24:f1:86:ab:c8:ed:d6:5a:b4:c4:c6:
a6:e8:f1:a6:ac:fa:ca:2c:00:f9:75:ad:7e:51:ff:6c:3b:1c:
cf:26:07:64:be:e0:aa:57:ab:55:e2:dc:e2:8b:fa:c1:4a:60:
81:dc:24:4d:32:08:ca:24:9b:35:e6:3f:85:59:6a:cf:74:55:
5a:a6:38:3d:36:c5:a5:0b:5f:74:5c:b3:8e:e2:40:5e:e5:f5:
f6:e2:a7:db:57:30:1c:90:4f:4b:59:b1:21:ed:3f:c1:d4:d7:
8f:f0:e4:37:68:1c:25:d7:ac:4d:58:83:12:cf:56:f6:ed:72:
73:9a:a8:ad:2b:61:98:a2:8a:7d:47:de:a1:13:de:38:34:b5:
13:d6:5d:59:3f:29:7c:3d:e3:cb:a8:db:56:da:d5:62:82:df:
74:01:bb:3c:cd:82:6e:9c:ac:eb:c8:a7:70:cf:90:9e:a6:f2:
a9:2c:d7:b0:67:0a:d2:23:07:ef:a4:3f:10:ef:4b:21:5b:bf:
90:62:6e:99:ae:4a:0e:e1:ef:32:ac:c9:cc:80:bc:3e:64:b1:
4b:a5:7b:08:66:38:56:e0:4b:c0:df:e1:3d:35:cb:2d:a6:b6:
7b:d6:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:35:33 2025 by rpki-client