Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: uGJS/mayG4CJh94kPuvTqo17DvxkiXfKRexpGH8QKpU=
Subject key identifier: 35:A1:74:84:51:44:9A:62:C0:FC:18:76:55:C8:5F:94:0E:15:56:7D
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 01988BB32ED1D936E020CC0979A800A2D7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 22:00:32 +0000
Manifest this update: Fri 08 Aug 2025 22:00:32 +0000
Manifest next update: Sat 09 Aug 2025 22:00:32 +0000
Files and hashes: 1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: vhfHYxqOCgd6tylSzD8F8DLyQk3TPe0IgqQ9WSfx/LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:2e:d1:d9:36:e0:20:cc:09:79:a8:00:a2:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Aug 8 22:00:32 2025 GMT
Not After : Aug 9 22:00:32 2025 GMT
Subject: CN=35a1748451449a62c0fc187655c85f940e15567d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:8f:1a:af:8c:58:cf:e7:4e:51:a2:93:5c:
ff:3e:8e:5b:5a:6a:4a:ed:8a:c2:09:36:39:09:74:
4b:82:ca:b8:cf:b4:2f:ce:1d:56:bd:e3:71:07:28:
93:5c:c4:3a:6b:b6:29:f7:e9:8a:0d:62:56:4e:f4:
4e:c5:d3:59:40:a0:68:db:43:0d:88:42:89:8c:d6:
60:1b:68:d1:5e:72:81:fc:f2:99:89:e2:ae:5f:0d:
90:cb:9b:80:55:57:93:b0:91:54:34:79:7c:c1:d1:
ac:99:e0:26:3d:a8:b0:19:54:9e:b2:a7:49:e5:c2:
c6:97:ff:83:6c:fb:c2:9f:58:0b:0c:ba:20:f1:dc:
68:e3:d7:bd:b7:c1:17:42:fe:11:01:80:05:be:35:
7a:15:95:72:64:25:64:61:6f:36:dd:60:4d:7c:f9:
10:c3:55:d2:6e:1b:ed:9a:21:e2:b2:0f:9a:cb:fe:
24:b0:95:94:8f:44:41:33:87:06:a4:1b:f0:a2:85:
bd:71:63:2a:c7:30:e8:42:98:bf:f5:48:72:03:ed:
af:25:2a:d8:4b:57:c8:a0:e1:5a:8c:b2:58:cd:14:
75:09:e3:2c:52:a7:a8:02:b4:46:b4:e7:f7:4d:fd:
cc:14:06:a0:1b:39:d6:aa:fd:b4:16:5a:a2:52:ba:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:74:84:51:44:9A:62:C0:FC:18:76:55:C8:5F:94:0E:15:56:7D
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:84:1c:c6:3a:34:ca:b5:2f:83:d3:e5:53:93:50:12:af:36:
8b:00:98:65:b2:7c:4c:bf:e8:62:29:99:ab:42:28:93:bc:73:
ea:38:9f:8c:8a:6c:3a:90:99:34:c0:38:e5:6d:9b:86:7f:53:
bf:39:e8:fc:10:60:ef:f6:b7:6a:a9:81:a8:0f:08:20:34:84:
66:e6:4c:b0:4b:c8:4b:d3:3f:cc:69:c3:e6:c9:4e:61:d2:d1:
d5:7b:34:98:c3:f7:60:f2:88:b0:9b:a8:ad:d4:2c:73:29:a2:
fa:cc:36:53:47:fd:5b:02:01:3f:07:1c:88:75:d7:40:a9:11:
f1:32:f5:16:70:0b:53:9a:92:ba:65:2f:09:9a:d0:9e:4b:24:
54:96:c6:85:ad:c6:fb:93:3b:6c:f0:bc:bc:41:ef:d9:4a:15:
bb:fc:95:28:ac:9e:bb:64:0d:43:93:1e:ec:d8:b9:75:92:2f:
34:16:31:9a:fa:60:0d:5b:a7:91:ea:9c:20:e7:5d:2f:d7:a3:
ef:54:8d:d1:2e:84:fc:2d:b4:2b:1f:62:e2:68:a5:1b:96:a3:
a0:e2:15:0a:5a:ed:11:84:71:d3:13:f9:88:c0:0f:fa:17:a9:
23:3a:97:56:55:51:a8:06:73:9e:83:8a:73:ec:56:58:5a:37:
7d:66:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:11 2025 by rpki-client