Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: 4lqHPHLX/bO6VhW3lTEWeRY6LoMCVas9cXtlzgq4Snw=
Subject key identifier: 19:DB:E4:6A:C1:80:6E:E8:F4:68:9E:74:55:40:A9:A8:A2:31:DE:E0
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 0198733D3A82007C3042CE5095D3E2940314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 14DA
Signing time: Mon 04 Aug 2025 04:00:49 +0000
Manifest this update: Mon 04 Aug 2025 04:00:49 +0000
Manifest next update: Tue 05 Aug 2025 04:00:49 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: PKD8PGnPZ2Nbl5raczUtHQFVNg5Fzdp5tW5XzpLw+X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:3a:82:00:7c:30:42:ce:50:95:d3:e2:94:03:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Aug 4 04:00:49 2025 GMT
Not After : Aug 5 04:00:49 2025 GMT
Subject: CN=19dbe46ac1806ee8f4689e745540a9a8a231dee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:a4:13:77:23:19:13:bd:02:0c:af:01:5c:
68:c2:6c:2e:95:fc:40:07:4b:a3:ff:41:a2:23:27:
d8:6b:ef:89:35:ec:5e:ab:88:d3:84:91:85:ec:a3:
e5:03:3d:8f:78:d2:98:86:e6:7d:06:60:7a:77:29:
ab:bc:bf:fe:be:f2:f4:be:19:cb:6c:dd:27:26:a1:
0c:0e:71:46:68:22:2b:cc:d5:dd:71:85:dd:6f:50:
aa:d9:c2:b0:1e:36:ff:b5:d5:f0:b5:8f:ac:1d:54:
e2:a2:e2:24:15:7c:98:bb:d4:fe:0e:19:91:05:cf:
9d:0f:33:6c:0e:1c:ae:ef:98:58:b6:0b:d4:c0:f4:
09:c0:68:d9:b2:49:f3:a5:0a:b9:c4:88:95:03:f3:
d1:c5:12:9a:75:29:83:2c:73:51:14:be:a9:e1:d7:
52:4e:40:1c:44:7b:80:06:14:12:dd:a7:a3:cc:e2:
05:ff:08:0e:95:4d:57:ce:e8:4c:86:c2:53:ee:6c:
71:a7:3b:f3:ae:cc:ff:0e:51:60:10:b5:2d:42:eb:
20:99:a7:80:82:4d:57:23:5b:54:a7:62:dd:f2:06:
e1:29:3b:2b:ff:0b:45:16:8f:03:38:36:1f:a7:77:
af:94:fc:c5:af:3b:95:b6:67:c7:63:a2:fc:84:76:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DB:E4:6A:C1:80:6E:E8:F4:68:9E:74:55:40:A9:A8:A2:31:DE:E0
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d4:87:b7:a8:0a:d0:33:86:fd:b9:f1:a9:a9:cb:07:7b:97:
ea:3d:60:b9:f8:e5:9c:2c:c0:17:56:81:51:44:a5:f7:6e:bf:
2f:16:c4:09:50:d2:75:aa:e5:ba:c5:c3:1e:ea:7f:8c:b4:2b:
50:b7:00:00:25:0d:72:4c:37:ec:75:d8:94:6d:c3:54:21:3d:
80:84:79:90:76:b5:74:80:81:f1:c2:90:1d:0f:f1:a6:2d:12:
25:bd:1c:61:19:74:46:fd:30:31:86:dd:4b:85:7a:13:d4:cf:
f2:f9:15:69:f4:0c:ff:8d:0a:b0:b1:b7:b3:2d:80:2b:00:2e:
c5:d4:02:64:d9:e5:97:d8:59:25:86:19:eb:e4:ae:fd:3a:c2:
c9:77:12:2b:39:20:c4:19:e8:03:9c:d3:fc:59:8c:f2:e8:4d:
cd:49:90:69:4b:4a:60:cb:44:68:5b:ff:f6:8a:52:23:9b:5a:
e1:d1:61:ae:5e:37:d9:6d:db:78:31:09:0e:f7:3e:90:7f:63:
94:9d:fb:c1:1b:f5:66:55:3f:1e:07:af:fe:bd:38:cf:10:cb:
54:bc:6c:40:cc:72:71:8b:67:d7:0c:d2:81:05:2e:ad:12:23:
e8:78:3a:ab:7a:7a:d1:5e:f6:7b:2a:08:d8:ff:63:61:ee:ae:
67:ea:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:07 2025 by rpki-client