Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: 9/bigyyf7ow8o+0SNVI91ZVqNAJdPS0jYOewpw5NHNQ=
Subject key identifier: 76:DA:6A:31:5A:FD:48:A2:8D:FE:F9:64:1F:99:1D:F4:B3:24:8F:B0
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 01989712A66FBCF624DB4818EB1046B3E68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0D1C
Signing time: Mon 11 Aug 2025 03:00:38 +0000
Manifest this update: Mon 11 Aug 2025 03:00:38 +0000
Manifest next update: Tue 12 Aug 2025 03:00:38 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: 61KqwWXgrXsxFGlFh1hkzTH5yqn3pvM1GhND18pICNw=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:a6:6f:bc:f6:24:db:48:18:eb:10:46:b3:e6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Aug 11 03:00:38 2025 GMT
Not After : Aug 12 03:00:38 2025 GMT
Subject: CN=76da6a315afd48a28dfef9641f991df4b3248fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:ff:1d:2e:60:dd:bf:9c:f3:ab:6d:4e:c3:
90:18:b3:59:da:a2:fb:51:a5:99:9f:b7:b7:2c:25:
04:45:98:69:1e:e2:91:ed:1c:8f:d3:21:b8:88:fb:
55:94:7b:2a:8c:5f:e0:dd:a9:1a:fa:05:0e:1f:a7:
10:c4:0a:e6:0f:59:55:f2:ee:b5:18:c6:a9:17:11:
0d:da:83:e6:5c:17:9d:29:04:38:56:b6:c0:ec:f0:
e5:31:0e:53:20:39:d0:66:29:d5:34:50:66:a5:72:
88:23:fd:c7:af:e5:e9:b3:55:b3:68:a4:97:e3:21:
39:da:b8:10:60:97:99:58:00:89:63:21:0c:1b:31:
98:8a:c9:73:f1:19:0a:8d:b8:fc:ad:a8:66:df:e4:
4f:3e:21:4e:c1:5e:b3:05:80:d9:f7:c8:66:f5:32:
6e:ee:c9:4d:7f:13:5b:88:9c:07:1b:dd:b8:d4:08:
f8:53:9c:71:76:f0:3b:d3:44:71:35:53:80:4e:d4:
9e:fe:40:84:7d:67:ef:fc:c3:61:89:84:45:0d:2a:
38:19:cb:af:71:a1:b9:d2:26:a1:b4:d2:25:c9:0e:
65:96:0b:5c:6b:0a:46:47:a0:87:2f:47:4f:4a:5c:
31:f1:e1:3f:b0:1d:8d:00:46:c1:75:2a:fd:78:85:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:6A:31:5A:FD:48:A2:8D:FE:F9:64:1F:99:1D:F4:B3:24:8F:B0
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:af:15:59:6b:3c:3a:2a:9c:2b:ba:c0:79:b1:87:9d:4d:a6:
46:5a:9e:89:d7:70:f4:88:cb:eb:36:38:13:47:44:7f:da:27:
8e:4c:b3:92:1c:48:c0:fa:45:39:c5:24:47:1e:dd:b4:e3:42:
ef:64:d3:c0:6d:6e:c2:1c:67:3c:b8:a0:76:ab:b0:0e:dd:ab:
29:b9:2e:6d:7b:89:cd:aa:5d:9d:8f:2d:9e:dd:7d:a2:50:b0:
67:00:94:3b:7a:eb:96:3a:f3:f8:6b:21:9e:36:6f:c3:9c:e6:
77:e1:9b:22:ca:10:63:0e:17:a5:6c:3b:f3:ef:f2:11:22:ff:
58:ed:d7:d5:b1:6e:5c:b6:c0:6f:b5:59:b0:4a:f1:fa:34:3c:
5c:c5:e5:7e:6c:44:51:5d:01:28:55:6f:7e:1c:b5:b3:53:7f:
82:b5:cc:c0:69:20:ba:ac:28:ca:9b:21:9b:b3:b3:05:d2:d0:
e7:05:73:b3:e9:21:83:b0:1c:b6:5d:ff:77:c2:96:05:30:c2:
9a:59:45:0a:29:92:24:06:b0:55:82:8d:58:e9:1b:db:3e:34:
a0:19:1b:8a:63:6f:3e:12:92:b0:e5:00:e8:26:0c:3b:1b:8b:
a9:26:84:26:69:f5:ee:f4:75:91:98:90:0f:e5:01:26:b7:81:
f0:4a:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:38 2025 by rpki-client