Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: Z/og1zGP3I6t5TEkGefckQhCQtVzys6Hdi6GL0PQP2o=
Subject key identifier: 79:ED:0F:30:F6:F7:C2:81:50:BA:79:41:97:FF:0B:5E:F4:6F:09:AC
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 01987373F099F5CE65E9B471770E61D64641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 05:00:34 +0000
Manifest this update: Mon 04 Aug 2025 05:00:34 +0000
Manifest next update: Tue 05 Aug 2025 05:00:34 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: 5OInchymXjf+4Uz0n7cJ9l21dCsHEqIMziiNtb7pWP0=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f0:99:f5:ce:65:e9:b4:71:77:0e:61:d6:46:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Aug 4 05:00:34 2025 GMT
Not After : Aug 5 05:00:34 2025 GMT
Subject: CN=79ed0f30f6f7c28150ba794197ff0b5ef46f09ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:64:59:e8:b0:25:3d:c1:7b:ed:b5:f0:0b:
37:51:b1:29:a8:5f:97:7e:08:6a:ae:68:c1:e5:db:
bb:ff:38:b0:53:96:7d:fe:2c:53:fb:8b:aa:11:08:
46:09:f1:4d:7f:1f:ec:5b:95:04:cf:bd:86:b6:79:
ce:54:0d:cb:7e:c4:d2:da:bb:8e:60:27:97:8e:f8:
db:38:fb:1a:0b:45:95:7a:6d:46:7c:7c:d4:e0:42:
99:48:5f:ef:8c:2c:e3:9e:92:3b:66:44:11:b4:6f:
36:a2:64:58:d6:31:80:70:72:42:cd:88:87:32:c2:
09:cb:8e:e3:c1:2d:54:d1:a9:ee:25:4a:f4:21:c0:
db:90:46:db:95:36:c2:c0:a9:d3:7a:cd:ac:c4:d3:
dd:5a:a6:ae:91:14:85:dc:a6:75:c2:39:4f:7f:30:
00:6b:3d:e8:99:25:00:a5:58:1e:5c:09:cd:e7:86:
82:c7:14:3d:ed:4c:51:34:76:5c:55:cb:db:8f:ed:
0b:35:6a:ee:14:56:06:19:1b:a4:ad:4e:c8:b8:d8:
f2:3c:bb:40:22:38:85:01:f6:50:25:04:f7:f0:db:
3e:22:c4:ae:3f:a6:93:15:f7:f2:00:8b:9e:d1:a6:
67:e9:78:a2:57:c6:8b:5c:67:5f:4c:1c:cb:18:b3:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:0F:30:F6:F7:C2:81:50:BA:79:41:97:FF:0B:5E:F4:6F:09:AC
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c1:da:fe:eb:66:74:05:68:f5:3a:de:e1:1b:3c:9c:30:34:
6d:35:84:12:0e:27:8f:86:93:af:c6:9e:a8:21:01:39:4a:bf:
f1:55:4d:9b:ac:3b:a7:8a:cf:a1:06:cb:f5:3f:30:24:e4:a7:
72:8a:89:0a:ba:3c:c8:e2:55:82:d3:5e:11:95:a9:82:02:20:
fa:77:b6:25:5e:dd:66:5f:31:79:d1:88:9c:47:df:2c:46:71:
66:0c:91:24:91:17:4b:ee:de:00:6c:3e:cf:c0:93:51:30:cd:
da:50:c7:c4:b1:4a:9f:31:ed:f9:42:83:d8:39:99:30:75:f5:
b4:5a:10:79:bf:72:ae:00:b7:de:c0:44:83:50:ee:1c:45:b2:
c9:80:b2:a2:ad:bd:6d:4f:a7:5f:d2:f6:ad:6f:01:7e:81:37:
14:79:58:fd:eb:17:18:98:32:0e:01:c7:1f:4a:54:b3:29:9d:
ff:26:63:d7:dd:a9:cb:1e:e6:47:19:40:d8:72:19:23:e7:68:
7e:42:14:9f:42:b9:39:12:52:e8:1f:f0:d4:71:46:51:26:5b:
bf:da:a7:16:8b:34:65:58:cb:60:e5:a6:ff:3d:c1:55:89:e8:
fd:c4:b9:b0:bb:dc:80:92:b8:c5:fb:11:fe:b1:8f:19:80:43:
4f:ee:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:11 2025 by rpki-client