Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier: jPzS0quLlNEu2SP2aUTJTWTeGwY8grDlQNLpdiUqlfM=
Subject key identifier: BB:9E:EE:B8:34:5D:59:85:EB:5D:A1:22:B5:BA:6A:D1:73:DE:3A:E3
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019896A5E5E61BA4B27ADE8535EFCDF9454C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:01:51 +0000
Manifest this update: Mon 11 Aug 2025 01:01:51 +0000
Manifest next update: Tue 12 Aug 2025 01:01:51 +0000
Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: zeQ878DVHf+AF8YbwHrC74Uc76cxtHstLEdxMUBDBBk=)
2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:e5:e6:1b:a4:b2:7a:de:85:35:ef:cd:f9:45:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Aug 11 01:01:51 2025 GMT
Not After : Aug 12 01:01:51 2025 GMT
Subject: CN=bb9eeeb8345d5985eb5da122b5ba6ad173de3ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:2a:fc:aa:36:a9:08:b1:98:3f:a1:73:c8:
90:0c:e6:c5:5a:7d:5b:66:93:60:02:32:08:e7:dc:
2b:b9:d5:63:a0:8b:1e:06:ff:3c:34:cb:92:41:f5:
14:8c:d2:f7:d4:da:20:91:b8:28:e0:ee:e4:a0:45:
03:d6:80:e9:b3:b5:ec:9d:9e:0c:0e:fe:81:68:c5:
95:34:a2:d2:12:66:7c:cf:39:ec:cb:0e:f6:26:d5:
8e:dc:2a:1d:9d:2c:cb:0f:67:13:b0:06:00:25:61:
f2:03:4f:86:5b:de:b4:45:dd:05:0e:71:7c:8c:11:
42:39:56:29:d1:e9:bc:10:33:2e:bd:84:bb:a3:9b:
0b:e9:8c:cd:23:2b:b1:33:3c:cc:b2:65:22:04:7a:
e3:08:27:ef:4c:9b:16:da:67:9d:02:38:63:be:70:
a3:c0:66:11:2a:db:12:8f:e3:69:a9:42:85:14:ae:
34:bb:a2:e6:5c:9f:ec:04:a5:50:e2:62:81:97:1f:
f5:57:b0:06:fd:90:4f:7b:58:c9:ae:13:69:74:c5:
3d:39:59:9e:7c:12:3e:8a:8f:32:e5:cf:7f:47:ab:
94:2a:72:d9:b0:93:88:c9:6f:a9:b4:fe:16:82:4b:
47:a9:c3:ae:9c:d2:d8:8e:cf:34:7a:8c:73:74:53:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9E:EE:B8:34:5D:59:85:EB:5D:A1:22:B5:BA:6A:D1:73:DE:3A:E3
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3a:c4:77:76:5d:de:ff:43:90:89:cf:8e:9e:08:59:56:d7:
af:83:e2:1a:ee:b2:c0:54:29:b1:64:cb:27:48:e7:f3:e2:dd:
87:ff:9b:df:ef:f5:de:10:92:bc:bf:40:40:13:9c:63:f6:64:
37:54:9c:a9:4f:a1:96:e2:d0:5c:a3:f2:41:42:06:a5:08:db:
8a:c7:32:2b:bc:47:63:e1:4c:a6:1f:3a:f5:e8:6c:44:b0:0c:
17:2e:bb:97:ba:05:0e:43:2a:f7:86:d3:73:d2:aa:70:6c:55:
1d:c5:ab:9d:43:20:dc:c8:ef:20:02:ed:22:a0:d1:aa:80:d6:
ec:51:42:5d:4c:3c:d2:3e:9d:e3:42:a6:00:b6:e4:d3:25:f0:
56:0a:6b:44:b3:dd:c7:93:b3:8f:be:a3:d7:ed:41:ac:26:17:
8f:7c:88:8a:08:9b:8e:2a:2d:91:2f:a6:6c:7d:01:f4:6a:e5:
88:53:62:91:61:7c:71:64:85:96:3d:ba:96:e0:27:4f:61:fc:
4a:42:a6:65:1f:84:89:cb:79:7b:e0:07:90:8d:a1:3a:a6:47:
fa:d8:08:75:41:d1:d2:d0:24:4f:1f:45:90:b9:02:0e:bf:76:
2f:4c:84:48:47:b1:27:85:6c:04:6e:17:75:6c:90:7e:d1:d7:
1f:29:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:00:45 2025 by rpki-client