Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier: JrodGS/xgf0JB6ZllgIt+hWFcKCdbMT+PM5DBlKRzlU=
Subject key identifier: F0:D2:A1:C4:39:8E:27:55:98:C5:87:62:C1:98:5D:27:D7:D3:44:61
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 019872CFB2D059CCF7F22A835CEDFDE90DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number: 1118
Signing time: Mon 04 Aug 2025 02:01:11 +0000
Manifest this update: Mon 04 Aug 2025 02:01:11 +0000
Manifest next update: Tue 05 Aug 2025 02:01:11 +0000
Files and hashes: 1: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (hash: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=)
2: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: ypJxI73JWGuqxuoYfsViy/J6zPvcTOAg62PvbAMwyrM=)
3: wgLpdQzEQiut3zZPkrk2it4-KJM.roa (hash: rQ6r9VvnZsN117x/0JkyHFIrRA5vncbf9BthsT1+A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:b2:d0:59:cc:f7:f2:2a:83:5c:ed:fd:e9:0d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Aug 4 02:01:11 2025 GMT
Not After : Aug 5 02:01:11 2025 GMT
Subject: CN=f0d2a1c4398e275598c58762c1985d27d7d34461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:da:69:84:9a:12:a4:2b:a1:cf:aa:d4:c7:
58:27:10:a8:66:06:44:21:ea:80:09:87:4b:9a:b5:
b2:68:fb:ff:ab:bd:d3:10:f4:75:93:0c:5d:66:79:
01:04:5f:7d:4a:a6:42:22:d9:15:30:30:cf:61:42:
fc:0b:04:a6:cb:fa:40:db:1a:11:32:5b:80:47:e2:
87:28:75:e7:d3:7c:0c:e4:ea:65:e0:e7:77:bc:0a:
f7:c2:74:72:63:04:97:3c:7e:64:79:72:13:15:6b:
bc:b7:da:e8:55:f0:93:51:2b:f1:4e:38:8d:23:c9:
99:bf:e5:0d:e2:53:c5:04:01:eb:48:fd:e9:f9:db:
c1:c5:99:1b:5e:60:56:1c:b5:45:75:40:0e:cf:42:
cf:f8:6b:1b:00:47:49:af:55:69:94:ed:9e:e4:82:
55:c4:de:0f:25:b4:0c:03:e7:1b:f4:95:56:de:75:
01:f4:d6:e0:86:c3:75:5e:59:ab:6c:95:e0:36:df:
6d:7c:3f:47:bc:ca:18:ca:ef:29:b5:db:f7:7d:10:
be:cb:8c:67:d2:18:f2:0c:d1:ab:93:e1:fc:d2:ff:
f5:6d:22:8d:0a:f2:de:54:67:4b:72:cd:b7:fd:92:
3a:e6:f8:1a:f1:aa:d9:9a:93:be:24:99:02:36:ed:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D2:A1:C4:39:8E:27:55:98:C5:87:62:C1:98:5D:27:D7:D3:44:61
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5c:47:1a:99:41:52:34:c0:ba:41:19:00:97:27:3d:0f:98:
31:e9:93:9b:b9:62:96:2a:56:a5:a6:f6:fe:13:36:66:5d:53:
8e:39:02:7a:8e:a9:fc:6b:fc:67:63:78:01:ac:eb:b0:b1:3f:
ce:a0:21:09:77:13:40:88:62:1f:e7:e6:14:83:11:18:2d:5d:
54:26:b1:a6:e8:e0:2d:22:ac:fa:aa:62:9c:1a:60:4e:29:30:
19:e3:e2:14:6e:34:fb:05:3e:fc:32:c2:54:b8:3b:70:f9:3f:
9f:49:9d:6a:71:9c:c7:22:6c:c6:12:97:b2:e9:3b:5e:ac:9d:
43:cd:5b:e8:3e:e7:14:f3:7f:4a:04:ef:9a:14:e9:79:46:50:
69:87:d0:1c:8e:17:c3:77:ca:55:db:8f:13:6e:74:5a:8e:7b:
d7:d5:cb:15:a4:a4:79:14:bb:55:0f:b5:85:48:04:57:68:a0:
27:f3:64:82:bb:6f:52:c2:f6:a4:b0:b6:6d:35:dc:ec:4f:f9:
2e:a1:2e:4a:0d:ca:a9:da:e9:8b:b7:ae:f9:a6:96:ba:53:4a:
0f:34:94:c1:65:a1:a2:34:78:88:a3:2c:c8:a7:8e:33:e5:98:
d7:64:9f:88:4c:28:3d:9d:08:d7:57:dd:c3:66:7e:4a:11:b0:
c1:9f:5b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 03:23:58 2025 by rpki-client