Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: DzowVvSu4/MVdt+JCYxgU2mLTIV0++EC82fNABRnQuE=
Subject key identifier: EA:56:72:C6:8D:2E:AB:DB:AE:32:B8:55:1D:43:15:09:F6:DA:38:3F
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 019873E2DC5C32EDED6A3E15E2BBCFA230ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 0DAF
Signing time: Mon 04 Aug 2025 07:01:44 +0000
Manifest this update: Mon 04 Aug 2025 07:01:44 +0000
Manifest next update: Tue 05 Aug 2025 07:01:44 +0000
Files and hashes: 1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: 1hqD+bFxw7N9qrUSGPNd7GXld9iJ0b5ooDRLudfI3l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:dc:5c:32:ed:ed:6a:3e:15:e2:bb:cf:a2:30:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Aug 4 07:01:44 2025 GMT
Not After : Aug 5 07:01:44 2025 GMT
Subject: CN=ea5672c68d2eabdbae32b8551d431509f6da383f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:75:43:b5:df:4f:c0:9f:45:85:57:d2:ca:
cc:9a:93:77:37:fe:ac:cc:de:81:11:c6:54:59:76:
32:1b:db:5b:13:e2:1d:0c:51:d0:89:a9:42:db:cd:
d5:4b:c1:d5:2a:02:a9:5a:48:d9:43:11:ad:94:f7:
65:ad:81:1b:e1:94:1e:3a:f0:62:e1:36:87:dd:ab:
dc:f9:27:f0:8e:eb:cf:58:0b:de:78:60:b6:9f:9b:
03:41:4d:fe:07:e3:87:17:e3:43:99:f1:87:e4:ad:
76:72:80:2a:66:2d:00:a8:c5:31:b7:0a:c5:c1:15:
e8:86:44:fe:98:ee:c1:15:d0:fa:62:a8:d0:9e:07:
3d:fb:76:de:db:4f:b0:89:2d:2a:ed:cf:8d:05:d4:
3c:e0:22:12:69:dd:fb:90:b1:4f:82:cc:91:ea:06:
fb:80:77:87:64:ff:1b:ee:96:c1:4a:68:21:35:5b:
e8:14:f3:cc:4e:7d:e5:3d:70:b7:98:60:16:f3:41:
60:16:8d:87:f6:97:66:13:a1:ea:6c:a3:3d:d0:cd:
50:8f:35:40:28:32:ca:b5:36:d9:7f:08:6d:72:0f:
66:2e:8a:57:f6:b7:00:13:15:01:ac:bb:13:da:f8:
f9:d4:c4:79:79:5b:53:21:f0:ba:2c:1b:5a:82:1d:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:72:C6:8D:2E:AB:DB:AE:32:B8:55:1D:43:15:09:F6:DA:38:3F
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:18:21:f3:03:4b:10:6b:d7:6a:3d:96:98:89:3f:0c:b1:f8:
dd:5e:3d:6e:83:ae:d3:b8:85:1e:04:8f:5d:99:5f:5d:c9:9d:
5b:18:ec:ac:2b:65:50:17:b1:6b:91:00:32:b6:b1:79:fa:8e:
04:fa:e9:36:2a:d9:8a:e6:2e:15:b8:23:10:7e:c3:a9:5d:f4:
1e:c2:d2:b1:b7:0d:49:4a:0c:3a:ef:dc:f4:3a:02:c0:55:13:
16:ba:c8:d6:11:84:2f:91:63:b6:49:6c:f9:df:a2:48:15:91:
b9:26:ed:b1:cb:0b:32:ee:23:f0:32:98:8f:fa:57:cd:2e:1c:
4c:ae:d0:8d:98:8a:d7:e4:7a:6b:96:b3:61:d6:5b:0f:b6:0f:
a0:e2:e1:aa:5f:91:54:50:c6:be:01:2d:46:85:0d:c7:f0:3d:
7d:ea:19:e1:0c:5e:99:91:41:e7:63:d8:3f:2d:c9:b6:c5:d2:
d5:19:d7:b2:a7:7e:28:53:a4:77:eb:93:d2:0a:fc:0e:0c:6a:
4e:2a:5d:dc:05:4b:68:f7:26:b3:9c:3d:33:53:45:8f:7a:bd:
bc:bf:8d:0b:70:e0:6f:54:b5:4b:ff:23:a3:0a:b6:5a:4a:fe:
c9:60:48:d4:b6:50:25:59:3f:ec:48:85:53:2f:a5:94:a3:b5:
d5:f8:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:20 2025 by rpki-client