
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: 9G5ZZwIiz8pG/RBTgtcHSfxf1FWGCUcsyt7Wyf8rv4Q=
Subject key identifier: 4B:B5:60:C2:2A:88:2C:9F:96:C9:15:68:7C:B1:7E:0C:4F:17:57:40
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 019882B07DD336F89D77C1754EB3C385E07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 04:01:01 +0000
Manifest this update: Thu 07 Aug 2025 04:01:01 +0000
Manifest next update: Fri 08 Aug 2025 04:01:01 +0000
Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: mUB4nKUn2H4yGkAwb5lZpN5HoMxxda4UBc37IbALfk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:7d:d3:36:f8:9d:77:c1:75:4e:b3:c3:85:e0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Aug 7 04:01:01 2025 GMT
Not After : Aug 8 04:01:01 2025 GMT
Subject: CN=4bb560c22a882c9f96c915687cb17e0c4f175740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:7b:3c:24:4e:cc:9c:61:56:1b:ac:aa:f7:
0a:7d:ec:78:90:b4:09:bc:04:4d:75:38:16:f5:28:
ac:d2:01:f7:f8:85:d9:0e:7f:7a:05:b7:7d:4e:a4:
1d:74:39:10:ce:dc:aa:09:0e:1e:42:4d:ee:94:04:
2d:7e:28:07:b5:55:87:fb:11:17:18:11:b2:51:90:
f7:aa:90:95:1e:7a:6f:5e:5a:15:ad:bd:5e:8e:f5:
63:c4:40:84:72:61:79:08:a4:68:7e:03:bb:fb:7d:
7a:d9:85:78:9b:46:59:46:87:2e:92:af:cb:61:c5:
2c:e8:4e:98:4d:a6:4f:de:82:84:62:08:b8:c9:02:
bf:bb:30:46:ba:26:6d:87:84:c9:c6:65:d4:6b:f2:
5d:2b:67:aa:6b:c5:bf:4a:e3:74:c1:54:2f:c3:4b:
fd:8b:5b:7b:db:e0:4b:7d:cd:1d:73:f9:c7:27:0e:
64:ce:c6:fc:60:3e:9f:62:08:ae:91:6d:cd:74:6f:
b0:9a:56:6a:15:92:ad:0c:35:65:4f:d1:c7:f3:3b:
87:2e:a7:7a:a5:07:a1:0c:c1:c1:3a:94:03:c5:01:
69:9e:36:fc:bb:58:20:de:0f:80:da:a1:d2:ae:9a:
75:ab:54:a6:82:2e:84:4b:07:51:45:ba:7c:10:1c:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:60:C2:2A:88:2C:9F:96:C9:15:68:7C:B1:7E:0C:4F:17:57:40
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:39:5f:95:df:a6:b9:ef:69:38:3b:2a:5e:d6:d6:32:cd:
83:73:cc:df:4e:9b:ce:eb:e1:94:13:ee:d9:df:6b:ba:f9:06:
7f:0c:a2:26:79:b3:03:dc:39:b9:cc:b2:51:2c:24:83:8d:85:
8a:40:d4:42:41:91:e4:09:af:ab:83:95:e2:eb:b1:9d:a2:ea:
fe:05:72:36:c4:92:d8:c3:17:c0:b3:1f:aa:c7:a7:59:44:1f:
57:8c:eb:3f:b8:35:54:67:0a:26:a7:8b:82:0a:d2:16:69:64:
6b:c6:6a:61:b0:07:9b:75:8a:3c:4e:f0:70:1b:99:f9:ee:33:
52:a9:fe:72:e9:6d:98:45:7e:11:fc:16:c3:e6:5d:7a:bc:6f:
06:d4:f0:a9:c9:bd:e8:d4:ba:ab:66:40:de:72:81:fe:12:00:
a7:03:fa:66:49:61:0e:8f:f9:1c:ae:50:c0:5e:27:d1:df:ef:
98:c4:4f:53:b9:2b:3a:68:09:07:16:74:97:2c:54:cb:7b:5d:
72:24:39:2b:4c:58:e1:23:07:03:32:b5:f4:7d:91:f1:b9:09:
0c:8d:cf:a9:48:e3:b5:5b:09:14:3f:41:08:92:e4:42:67:cc:
92:f4:03:e6:c5:90:3e:09:e9:40:03:d7:c2:f0:4e:14:d6:fd:
c9:03:99:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCsH3TNvidd8F1TrPDheB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOWVkNzA5ODExMWM2Nzg4OThhYzBmMGFlYzk3ZmRkM2Iz
YjZkMDIwHhcNMjUwODA3MDQwMTAxWhcNMjUwODA4MDQwMTAxWjAzMTEwLwYDVQQD
Eyg0YmI1NjBjMjJhODgyYzlmOTZjOTE1Njg3Y2IxN2UwYzRmMTc1NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplB7PCROzJxhVhusqvcKfex4kLQJ
vARNdTgW9Sis0gH3+IXZDn96Bbd9TqQddDkQztyqCQ4eQk3ulAQtfigHtVWH+xEX
GBGyUZD3qpCVHnpvXloVrb1ejvVjxECEcmF5CKRofgO7+3162YV4m0ZZRocukq/L
YcUs6E6YTaZP3oKEYgi4yQK/uzBGuiZth4TJxmXUa/JdK2eqa8W/SuN0wVQvw0v9
i1t72+BLfc0dc/nHJw5kzsb8YD6fYgiukW3NdG+wmlZqFZKtDDVlT9HH8zuHLqd6
pQehDMHBOpQDxQFpnjb8u1gg3g+A2qHSrpp1q1Smgi6ESwdRRbp8EBxMLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu1YMIqiCyflskVaHyxfgxPF1dAMB8GA1UdIwQY
MBaAFICe1wmBEcZ4iYrA8K7Jf907O20CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQt
MDEwY2Q5MDc5YWJmLzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQtMDEwY2Q5MDc5YWJm
LzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADro5X5Xf
prnvaTg7Kl7W1jLNg3PM306bzuvhlBPu2d9ruvkGfwyiJnmzA9w5ucyyUSwkg42F
ikDUQkGR5Amvq4OV4uuxnaLq/gVyNsSS2MMXwLMfqsenWUQfV4zrP7g1VGcKJqeL
ggrSFmlka8ZqYbAHm3WKPE7wcBuZ+e4zUqn+cultmEV+EfwWw+ZderxvBtTwqcm9
6NS6q2ZA3nKB/hIApwP6ZklhDo/5HK5QwF4n0d/vmMRPU7krOmgJBxZ0lyxUy3td
ciQ5K0xY4SMHAzK19H2R8bkJDI3PqUjjtVsJFD9BCJLkQmfMkvQD5sWQPgnpQAPX
wvBOFNb9yQOZVA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:14:28 2025 by rpki-client