Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: l5g3/aJAhpSJ7Au1B5VHXOgtYc4CBg5GvmD9EOzU1E0=
Subject key identifier: 28:12:E3:F0:69:1E:33:A9:8F:C4:8F:7C:6D:DF:CC:8A:8C:DB:B9:C3
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 01976F9A22195725109347033B3F5FF560A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 08DB
Signing time: Sat 14 Jun 2025 18:01:01 +0000
Manifest this update: Sat 14 Jun 2025 18:01:01 +0000
Manifest next update: Sun 15 Jun 2025 18:01:01 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: C3hAWvyJXGjovctxxq2jrhaDq2vqZJEUAl/P2QlzoZE=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:22:19:57:25:10:93:47:03:3b:3f:5f:f5:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Jun 14 18:01:01 2025 GMT
Not After : Jun 15 18:01:01 2025 GMT
Subject: CN=2812e3f0691e33a98fc48f7c6ddfcc8a8cdbb9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:35:8c:25:ed:1d:8d:3b:ff:05:06:a0:48:
55:fe:0b:e7:7c:7b:d2:cb:e3:d0:8e:03:04:d5:27:
51:5e:0e:71:1a:6d:9d:33:96:a4:7d:42:c1:a7:7c:
e7:6a:00:64:28:2f:57:f9:89:b2:be:8f:1f:1f:b7:
e8:3e:94:76:ff:45:f4:1a:15:18:3f:1c:01:09:f0:
d0:96:70:f1:22:d8:62:9e:8b:32:15:e5:a5:ca:9d:
13:af:b0:5c:36:38:70:be:61:5b:ad:17:ce:58:56:
b7:bd:4c:44:b9:63:cb:4d:ef:d0:84:c6:8b:13:fd:
f4:c9:4c:ae:df:5a:db:20:79:71:15:f2:29:34:d0:
53:4a:60:8e:0f:7d:96:95:9b:93:44:01:c7:00:75:
ef:49:33:80:e2:f9:b2:28:f6:a0:52:fa:c5:65:9b:
98:e1:e1:1a:3a:9f:e8:8e:fd:02:3c:4b:30:92:dc:
e0:8f:30:4f:ab:45:dd:d1:ec:0b:5e:98:5a:2d:80:
50:95:52:f0:97:09:3d:67:50:95:38:72:91:3c:08:
c0:97:7b:7e:7b:6d:c1:38:95:85:9e:56:d1:17:22:
17:8f:82:fa:fa:76:70:a1:65:f7:cb:50:a4:d2:1e:
e7:65:d9:93:17:af:9e:46:59:f3:ac:1f:4e:2d:55:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:E3:F0:69:1E:33:A9:8F:C4:8F:7C:6D:DF:CC:8A:8C:DB:B9:C3
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3c:1c:dd:62:ff:9f:31:e4:7d:21:16:e8:b2:89:92:12:0d:
2a:e1:07:c2:d5:83:2a:8e:11:7f:50:9c:e0:3b:bd:9a:18:d1:
3f:20:28:0b:48:17:b7:aa:e3:14:88:bc:f8:d9:96:e8:cf:8e:
21:05:6e:de:cc:37:55:6e:c8:20:a0:f8:f7:53:b6:44:b1:36:
17:1a:7a:98:66:69:a0:d9:53:04:38:05:4f:d2:e1:1e:eb:78:
e1:59:a8:b6:fa:4c:4e:9d:1b:ec:99:e1:7f:79:64:5c:6d:18:
c3:ef:99:98:3c:41:e2:9c:a2:49:17:47:be:c2:b4:91:e5:fd:
01:89:c6:69:13:49:eb:26:85:03:2c:45:b9:11:a2:fb:c1:ef:
fe:c1:92:85:91:cf:03:4d:d2:e2:dd:82:3c:44:e6:56:84:a9:
46:c2:a8:aa:e4:ff:b7:3f:37:df:5f:9d:13:31:b9:97:dc:a6:
15:ef:40:ef:77:ec:a1:01:ed:8a:75:7f:c6:f6:85:a0:5f:f1:
e7:5e:e7:26:61:6c:a1:59:4c:0a:b6:8d:e6:76:c2:80:76:c9:
5b:95:62:08:aa:30:2b:bc:91:98:39:44:e5:11:38:73:d3:e3:
e3:50:66:d0:27:bd:6a:6b:11:b9:f2:b0:e9:6a:92:dc:1d:32:
ed:69:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:49 2025 by rpki-client