Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier: FzQWfDlgsIAjUWsi0FFxxnY+EU/Dz6KKSI/u0/ONYvQ=
Subject key identifier: 88:FC:16:B5:DD:34:E1:DC:2F:C3:12:79:F8:2A:45:67:F5:38:41:43
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 019879AD136A4EBDC48454F8AE90D84EBC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 10:00:42 +0000
Manifest this update: Tue 05 Aug 2025 10:00:42 +0000
Manifest next update: Wed 06 Aug 2025 10:00:42 +0000
Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: eD+beohmhkXWnLEOF1EkMp1cU77lbCDS74EM+uL3u2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:13:6a:4e:bd:c4:84:54:f8:ae:90:d8:4e:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Aug 5 10:00:42 2025 GMT
Not After : Aug 6 10:00:42 2025 GMT
Subject: CN=88fc16b5dd34e1dc2fc31279f82a4567f5384143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:ca:66:97:98:71:72:65:16:0b:c6:80:8b:
d8:0d:b6:35:d2:c2:29:3e:cd:7f:9c:df:b7:4a:b6:
6f:ae:bd:32:13:66:5d:58:51:41:05:3a:e1:ce:d2:
2a:b6:8b:6d:74:c4:47:12:49:6d:b4:46:a2:b0:2b:
22:79:9a:d0:a2:79:81:91:30:da:b3:19:d2:f5:d7:
f8:83:6c:f8:4c:d5:14:17:ba:f6:f9:20:1f:c3:86:
d0:70:bd:5a:7d:95:c3:a3:76:35:26:e2:18:a6:86:
63:5b:86:70:8b:c0:03:70:29:44:1d:3c:08:1c:f7:
77:a3:e2:aa:6a:6e:35:55:25:89:99:ac:b8:71:3a:
48:2e:f0:f5:60:8d:a0:5c:c1:de:e1:8a:28:76:b4:
d6:2f:1b:16:1c:04:59:5e:02:74:19:78:91:8e:df:
21:a4:4a:f8:b3:d3:d9:0b:7f:98:d2:e9:f9:c9:5c:
07:df:79:26:da:e3:07:cc:6f:23:ef:4e:72:03:75:
ad:bc:b0:97:31:44:d0:c2:07:bd:ac:96:e4:dd:04:
3b:b6:49:d3:21:70:16:84:ce:0f:ed:66:50:e6:18:
c8:a8:af:20:3f:9a:00:ae:4e:3f:ab:27:01:d5:67:
68:76:0a:39:a1:7a:6f:0f:c2:67:c2:ac:8c:e6:3c:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:16:B5:DD:34:E1:DC:2F:C3:12:79:F8:2A:45:67:F5:38:41:43
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:50:a8:f4:ab:c9:11:8d:16:fa:e4:58:3e:47:de:e6:86:
53:b9:5b:20:ce:3b:f4:4f:59:76:46:5b:c6:20:15:76:b0:63:
ce:e8:36:85:a4:d3:17:4f:d5:98:6c:c7:7c:94:31:22:6b:52:
28:44:16:f9:5b:25:bb:09:a1:0e:ee:20:f7:d9:eb:eb:04:b1:
aa:76:38:59:aa:ef:ca:d2:79:1b:c6:50:a7:b2:a8:e8:97:43:
c1:27:1e:08:2f:7d:bd:05:2e:53:4d:f4:e4:3e:64:ee:49:e8:
84:b5:af:84:14:01:3d:4e:35:c8:e9:fd:ac:3a:93:63:e7:44:
77:dc:78:25:86:23:e5:6a:58:b0:b8:45:4d:b5:e8:60:71:52:
5b:56:a4:f7:1f:16:49:51:8a:48:92:20:0f:a0:d5:f2:16:cc:
4c:a7:98:97:ae:5b:7d:39:83:4e:7f:56:8e:86:60:64:5b:81:
47:02:33:71:52:21:c0:e8:3c:11:52:08:31:4d:99:fd:e9:e0:
03:3a:17:07:6f:03:e4:72:2a:7b:f9:ab:6e:ff:d7:98:2a:be:
b5:17:2b:f1:10:46:01:9c:58:3d:8b:78:a7:ad:1c:15:2a:5c:
f0:60:36:c6:54:f1:73:91:d5:57:b7:56:77:11:d3:55:15:6c:
48:92:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:11 2025 by rpki-client