Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File: GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier: VFT88g/NU+5mFDa1f6x2nbzkgTM8TEKgNzG/IQwCcgo=
Subject key identifier: C0:DA:79:41:2F:ED:86:3D:E6:88:E9:5C:03:37:85:52:A3:7F:6F:46
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial: 019872CFEE60D3D7C79352A21FDBE507FD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 02:01:26 +0000
Manifest this update: Mon 04 Aug 2025 02:01:26 +0000
Manifest next update: Tue 05 Aug 2025 02:01:26 +0000
Files and hashes: 1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: FoC2uXEtvuSy9YAsEgK802YFZp5h4iLoCYNe832FYPE=)
2: Z3Go8saXwZXXMMYbEYiVPWGVRXk.roa (hash: XTY4+F/77lFXbbIzurIN7oqokSXQvQHevFpVhwO/K9Y=)
3: puaohYxhGlR_ojExuJSBgJp58B4.roa (hash: 1Zbm+b0MGHPeRak+rHKtmgsa3JMwl8hkqHTwmCOmzbo=)
4: ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa (hash: vp55FHfuHOdAmakK1OzqAocvmJ8Vg24tSRWH6j9DsJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ee:60:d3:d7:c7:93:52:a2:1f:db:e5:07:fd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Validity
Not Before: Aug 4 02:01:26 2025 GMT
Not After : Aug 5 02:01:26 2025 GMT
Subject: CN=c0da79412fed863de688e95c03378552a37f6f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:61:2f:65:5e:51:7f:87:20:7f:9e:6a:c1:
42:a8:18:72:59:1d:cf:79:5b:3b:7c:4d:97:76:e2:
c2:0f:bd:7e:24:6b:76:73:33:a8:f6:a5:f5:ed:aa:
2d:cc:2d:48:f1:d7:4c:88:a8:60:2f:ef:9e:42:7e:
9e:d1:0e:da:a2:b2:48:05:21:e0:ff:91:b3:5e:78:
ab:54:34:b2:0c:4b:ed:25:01:00:c8:29:05:64:7f:
5b:d5:a2:f7:53:eb:2d:5e:7d:87:9e:c6:bd:67:2b:
af:00:af:bb:da:53:5f:1d:74:bf:76:99:e8:e8:b9:
b5:4a:82:00:da:f4:49:4e:9a:41:d4:e8:d0:41:4f:
d7:17:3b:1c:73:59:5e:83:48:d2:d1:33:50:f8:93:
86:32:6e:c8:a8:d6:7f:23:df:9e:9e:ac:09:c2:60:
d9:0e:9e:e2:87:e8:e5:4d:45:56:41:bc:32:4d:f3:
97:28:6b:99:f9:27:06:d4:e5:bf:ba:5a:78:27:4d:
55:24:dd:39:6f:3e:e5:80:a3:e4:e2:9b:8e:4c:76:
e1:a8:6f:c2:80:90:a9:ab:53:1f:26:cc:0b:03:5c:
02:3b:a6:8c:fa:04:41:7b:8f:08:9b:78:8c:42:18:
f7:49:13:c1:08:e0:48:e2:0c:44:dc:4f:77:33:69:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:79:41:2F:ED:86:3D:E6:88:E9:5C:03:37:85:52:A3:7F:6F:46
X509v3 Authority Key Identifier:
keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:3b:52:bb:34:b4:15:31:a3:d9:54:2b:85:14:63:f7:f3:
50:5c:d5:b9:f5:10:2e:2a:e6:63:31:e1:db:1c:d2:d9:c4:04:
d1:b9:16:d6:96:2d:7e:c3:04:80:65:d8:54:1c:e6:8d:9f:e8:
f4:3d:c1:f7:82:e4:4a:25:d6:da:63:2c:2d:3a:d4:22:0e:65:
79:e1:81:9c:73:19:e4:14:dd:20:e4:f5:fe:14:48:f7:16:61:
9e:8b:69:73:e9:41:e1:c4:40:5d:ad:b9:a7:39:40:3c:c2:1c:
10:b2:52:e8:ee:26:4b:92:7e:85:97:d1:a2:67:a1:43:87:9b:
c2:60:b2:62:b3:cf:83:51:90:4b:98:d9:a4:22:20:96:6e:07:
f0:b2:fe:f5:d7:45:07:47:e7:32:f7:3f:73:42:95:e1:96:4c:
e4:03:68:a5:65:1a:9d:ea:ca:54:e0:9c:4e:20:71:28:97:d2:
36:35:e7:42:bd:9c:52:81:00:4b:7b:2c:69:21:e7:15:06:f7:
44:a1:44:d9:c5:de:53:a5:6a:f6:82:4f:b1:ab:95:44:cd:31:
ae:82:c4:29:f2:47:9c:42:9a:9b:47:6b:91:70:2d:65:6d:3e:
f4:38:4a:ca:ec:53:2d:3f:ec:22:d2:a5:b5:3f:ba:ac:96:a0:
0a:4f:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:09 2025 by rpki-client