Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: vSf509sx5kp08lTws6W9rqifzVd25ZyqH7H6Ab092TA=
Subject key identifier: 7B:F3:2B:0E:32:01:6F:ED:FE:8C:AD:AC:6B:8C:47:79:89:45:E6:BD
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01987ED41F636FB99D79A05BAB9A20C65033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 10:01:27 +0000
Manifest this update: Wed 06 Aug 2025 10:01:27 +0000
Manifest next update: Thu 07 Aug 2025 10:01:27 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: H9ZImAMPibeoqADyIk0hVvmPbC2T6PtMc+Yx1NCxmv0=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d4:1f:63:6f:b9:9d:79:a0:5b:ab:9a:20:c6:50:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Aug 6 10:01:27 2025 GMT
Not After : Aug 7 10:01:27 2025 GMT
Subject: CN=7bf32b0e32016fedfe8cadac6b8c47798945e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:e0:85:eb:e8:d9:2d:25:42:3e:b6:1b:e3:
b9:a3:19:39:c9:44:26:23:9e:0c:b5:c1:7c:2a:82:
50:24:02:a8:e1:74:e0:1d:01:ba:29:2b:f4:ca:61:
96:f4:62:90:06:2f:2a:59:9e:5e:c2:98:29:b8:7f:
90:9f:cc:d0:3e:4b:9b:3c:84:5b:3a:ee:82:01:30:
22:6a:8b:e5:43:fc:97:72:e5:3f:47:b6:40:95:d5:
4c:68:93:b9:78:f9:7e:7c:de:1f:e1:b4:5d:7b:e3:
9f:b4:b0:64:c7:b8:f3:de:46:b1:75:a4:90:1b:b4:
6c:2b:ee:0a:74:50:af:18:b5:b2:08:1f:ed:2c:74:
42:67:b0:05:a8:47:d9:b4:85:ea:2a:8c:2c:92:de:
15:bc:ce:8f:ca:3b:e9:04:d8:87:35:b8:c2:15:23:
6e:a3:b2:38:2e:07:51:28:d8:21:76:19:00:eb:d3:
69:53:09:fb:eb:a6:c7:2f:07:e4:71:2b:0e:88:0c:
dc:9e:ab:52:51:1d:5b:bc:96:45:98:de:93:1b:82:
ab:8e:95:ba:ec:b6:b2:c9:bc:e8:6d:35:86:86:fe:
d5:16:1f:77:79:6a:12:6d:cd:21:c3:cf:5f:ef:08:
25:b1:76:40:df:5e:cf:18:7b:6e:c3:b8:79:f4:c2:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F3:2B:0E:32:01:6F:ED:FE:8C:AD:AC:6B:8C:47:79:89:45:E6:BD
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3c:7b:5a:5c:85:fb:8b:84:29:c4:bc:ef:51:93:14:9d:84:
49:2b:bf:31:49:b5:5c:c9:2a:e4:bb:13:b6:8f:2a:dd:1c:ee:
a5:29:e0:9f:5b:7c:cc:eb:34:b2:3e:cb:54:f6:6c:43:9d:1a:
1f:5d:7e:2a:f1:34:4c:46:a9:5b:56:e5:a4:c8:42:6e:57:38:
1a:75:d4:db:72:40:ed:9c:b8:81:77:8a:4f:24:37:2f:30:a2:
66:4a:54:7c:f3:48:b3:50:11:41:b1:74:56:54:af:67:c6:c1:
5e:93:fd:69:fd:6c:76:d4:8f:0b:4a:42:c5:7d:a9:43:12:2c:
c6:c6:e2:76:2a:6f:48:4f:ab:34:97:ba:34:9a:89:6a:d3:0e:
cf:e1:68:24:a0:d7:5b:30:31:f6:cc:0f:95:15:46:c4:56:c5:
03:99:07:da:3c:04:e2:6f:0a:46:62:73:02:65:31:5a:17:eb:
6e:93:f8:a2:97:35:c9:ea:07:d1:54:0c:a8:98:5c:63:9a:82:
39:e1:c6:c0:28:01:ba:42:50:37:6d:39:89:c3:61:fd:f7:3e:
c5:53:50:8e:0a:75:d9:c9:0d:4e:55:3c:3f:7a:36:e7:b0:f9:
e7:34:d9:0f:0f:d4:16:28:84:78:5e:69:71:91:fe:30:13:5a:
40:61:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:15 2025 by rpki-client