Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: NX1TFlw7KaojMsOqi3C2AyPJf5ngDppAeFzOB3taO4w=
Subject key identifier: D2:A0:DE:B5:B7:DC:78:8A:44:29:98:1B:31:19:74:8F:7B:3A:66:9F
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0198816761843260301CB74DACF10B800B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:01:32 +0000
Manifest this update: Wed 06 Aug 2025 22:01:32 +0000
Manifest next update: Thu 07 Aug 2025 22:01:32 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: rxw1baYhu2giYWvqw2BOucDmPK3HH8evQFur9eqFsCQ=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:61:84:32:60:30:1c:b7:4d:ac:f1:0b:80:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Aug 6 22:01:32 2025 GMT
Not After : Aug 7 22:01:32 2025 GMT
Subject: CN=d2a0deb5b7dc788a4429981b3119748f7b3a669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:b0:d6:3f:16:d0:a9:cb:9f:f9:12:00:88:
a3:fe:f8:32:7b:db:8a:47:56:21:85:2c:b7:e9:c7:
3a:c4:c8:2c:9a:5e:9c:a2:e9:6d:2d:89:bc:7b:45:
5e:53:cc:5d:3f:20:66:b1:62:8d:e4:c7:3d:b2:55:
d5:35:b5:12:c7:72:58:3b:b8:b4:12:a4:ed:58:dc:
82:b5:41:c6:3a:80:be:1b:88:7b:26:eb:93:52:d3:
bf:b6:3d:87:85:27:f6:d3:25:09:aa:49:64:f2:6f:
57:91:87:f2:b7:1f:b5:bc:f2:01:7e:dc:d4:d6:c7:
06:02:e6:ec:69:02:71:8c:66:ea:07:f6:5a:db:dd:
47:3c:66:2a:da:bd:09:7d:3f:62:68:53:94:3e:28:
93:2a:fa:12:8d:b3:70:4d:61:12:90:76:15:ec:48:
75:f0:ac:a9:e0:be:9e:4e:dc:70:2a:e3:b2:97:da:
c6:f9:2c:08:29:12:b7:a2:e9:51:f8:a7:a5:d2:0d:
0e:2a:dd:80:64:75:8d:77:52:12:ef:0a:1e:36:98:
4f:59:f2:63:2b:a4:09:15:18:07:a5:4f:3c:1b:57:
3f:0a:2b:6e:96:16:d7:28:bc:b3:ee:7a:d2:f9:f3:
12:07:c6:ea:f8:26:fe:18:0f:c4:b1:49:e7:c2:83:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A0:DE:B5:B7:DC:78:8A:44:29:98:1B:31:19:74:8F:7B:3A:66:9F
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0f:b4:41:34:32:ae:57:5a:1e:75:37:3f:71:c9:33:07:ee:
28:ec:7e:2a:ad:09:0e:af:72:5a:98:e7:7a:f0:e2:c1:35:52:
76:5b:85:1f:7c:6e:bc:43:ae:9f:56:3f:54:e5:4d:28:19:b4:
76:b1:20:2b:58:26:c8:b5:a5:d7:d4:41:e5:6c:22:48:85:70:
d8:b0:30:68:a4:91:79:b9:4e:34:16:10:14:1a:d8:6c:c5:cb:
37:10:e4:95:40:07:ce:bf:02:8d:68:52:3d:22:29:c5:96:5a:
41:bf:3f:0c:a8:6e:5b:33:77:c2:15:38:90:1b:9e:97:87:81:
2f:6e:16:8b:38:d6:cd:ca:91:d0:96:73:1b:7c:6e:9c:57:c7:
e1:f9:99:bf:b3:d5:df:ab:80:9e:3c:7a:7b:3d:4a:e4:c2:af:
cc:24:f8:76:e3:69:86:09:47:bc:14:3b:c5:73:10:e3:32:a7:
aa:5b:10:3b:c5:b5:21:89:66:95:1c:7e:99:3d:04:75:48:48:
d6:a4:13:7f:1f:fc:ce:ed:ef:76:a1:29:d7:d3:50:b5:b5:98:
79:eb:06:99:25:88:cc:25:35:a6:16:55:89:a4:39:c0:ec:33:
6a:08:b6:5d:86:82:f9:21:a3:d2:e1:00:7d:3e:81:b3:9f:6e:
3a:49:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:31:55 2025 by rpki-client