
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: a9wR1XvvFtYEqdZniq6us5fshOMyVlQpBmccXnT1Jlo=
Subject key identifier: 0F:BF:3F:4F:47:68:25:F0:4B:C0:D0:83:92:2E:A1:36:CB:95:13:F7
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 01987DF7C851F3F9957080B3F14A1FEAEFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 0967
Signing time: Wed 06 Aug 2025 06:00:47 +0000
Manifest this update: Wed 06 Aug 2025 06:00:47 +0000
Manifest next update: Thu 07 Aug 2025 06:00:47 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: f/jjW33FVYImAgqJDG3i7WY85S3pdKxcbcPyJYGadzA=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:c8:51:f3:f9:95:70:80:b3:f1:4a:1f:ea:ef:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Aug 6 06:00:47 2025 GMT
Not After : Aug 7 06:00:47 2025 GMT
Subject: CN=0fbf3f4f476825f04bc0d083922ea136cb9513f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:dd:48:50:53:c6:e4:53:81:9a:c3:02:fb:
e2:9c:e6:65:05:b0:b4:2d:6e:6f:12:47:6b:15:7f:
87:fc:ba:6e:fa:f3:14:44:da:d8:8c:ed:2f:e0:bd:
b2:2e:00:d5:76:03:5b:1c:37:fc:0c:5d:1d:c6:c1:
50:c7:25:01:4b:d7:34:a8:3a:fa:f5:d4:63:cc:21:
88:b8:35:09:26:8b:11:67:c5:6e:24:ab:e4:73:05:
ba:b5:7a:1b:60:a4:9e:39:f2:1a:b5:e5:ad:82:e9:
36:05:2a:1c:93:7d:a7:c0:23:ae:e5:25:50:fe:ea:
20:23:df:63:02:6b:46:7c:3d:2a:a0:f7:37:39:07:
ba:72:26:28:25:08:7b:5c:30:31:9f:8b:06:83:de:
d6:b5:02:24:e6:57:90:65:3f:eb:5d:7f:b0:b9:6c:
0b:3d:be:d6:8b:ed:0a:8f:b8:49:ef:f4:0e:91:b0:
a1:dd:b0:60:1d:48:0c:5d:b0:99:b5:b2:9e:e4:e1:
63:56:c6:7c:a9:b4:2f:38:8c:a9:71:06:40:01:50:
7b:e3:d2:c7:c7:3c:cf:90:33:64:fa:98:f2:8d:6e:
58:83:8c:ff:37:b7:fb:bd:1b:e1:3c:4d:22:b4:a7:
d8:23:bb:34:e0:ac:1a:f1:87:f6:92:d1:3f:51:f4:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BF:3F:4F:47:68:25:F0:4B:C0:D0:83:92:2E:A1:36:CB:95:13:F7
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1e:7d:48:b8:07:ce:ac:d0:6f:3f:2f:5a:3a:99:55:d4:21:
4b:2f:20:c2:39:c3:24:4f:e3:d6:64:2c:e0:72:e9:a8:95:9a:
30:47:e9:11:45:a4:89:e8:47:81:9d:1f:bf:e3:70:31:b4:70:
e4:d7:06:46:ab:5a:1e:51:b9:d8:df:1e:f6:66:fa:aa:9f:71:
54:c3:94:f5:a2:82:60:95:d5:cc:41:41:e6:f2:57:0f:14:c2:
a3:c6:86:a6:09:95:92:12:22:b1:cc:32:be:ef:3a:05:ed:e4:
1d:5f:0c:de:f6:e6:66:dd:3c:25:45:7c:90:24:00:e5:67:85:
fa:bf:5e:c0:9c:be:97:cc:38:e8:af:b5:97:df:1d:a5:95:4b:
58:5e:03:59:1a:ad:d6:e2:c7:d7:18:85:ab:ec:6c:a2:04:4f:
a0:83:75:fd:4d:a3:08:9b:40:f0:45:68:b4:16:42:c4:03:34:
e7:f9:73:c1:85:8e:e5:f4:c7:80:cd:02:16:78:72:66:02:ef:
00:e4:fa:03:20:e9:7c:6e:14:6c:5a:58:1e:2c:03:74:8d:a7:
07:6a:34:61:d1:24:38:b8:24:04:2b:fc:70:d0:dc:c5:15:b2:
79:87:56:d4:18:b3:a0:48:0a:39:a5:fa:24:9f:b1:49:28:6d:
73:38:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:06 2025 by rpki-client