Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File: ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier: FHe4I0WsvOwcTKoyunczTwHHGpj10wlw7HpqeSYh3PQ=
Subject key identifier: AB:93:84:EF:5B:22:99:06:72:17:75:00:11:B4:39:C3:3C:5F:0C:9C
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer: /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial: 0198936CD27DC5F743FFE8CBE444EE3C468F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number: 06B5
Signing time: Sun 10 Aug 2025 10:00:39 +0000
Manifest this update: Sun 10 Aug 2025 10:00:39 +0000
Manifest next update: Mon 11 Aug 2025 10:00:39 +0000
Files and hashes: 1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=)
2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: 4c3LmvaZ0wsFRCf4ej3VrO5RWu2hgk3ALNpsK1Ajbzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:d2:7d:c5:f7:43:ff:e8:cb:e4:44:ee:3c:46:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Validity
Not Before: Aug 10 10:00:39 2025 GMT
Not After : Aug 11 10:00:39 2025 GMT
Subject: CN=ab9384ef5b2299067217750011b439c33c5f0c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:30:b0:b4:05:91:4a:aa:88:8a:8d:49:2f:
b3:c5:71:4d:d0:2f:1f:ab:f5:27:c0:ef:43:d5:24:
ff:7f:32:23:e0:e1:6e:4f:ec:e3:ed:3e:95:43:a0:
ff:c4:47:1c:f5:28:a5:d4:37:ff:4b:fb:fd:20:ff:
08:a6:c9:dc:b0:73:2a:20:a9:f7:46:4f:d4:4d:57:
cc:9b:64:04:85:ee:36:ac:c5:ec:bd:30:70:59:cd:
a7:03:e8:87:04:a9:f8:be:ef:49:9b:f4:3d:97:b5:
f0:be:5c:b6:70:6b:b4:40:96:3b:52:29:ba:6a:7a:
3c:c1:68:37:35:77:4e:9c:4c:59:7d:bd:6d:f2:70:
69:0e:f8:ef:bd:dd:16:93:df:52:3c:88:e4:80:73:
2c:53:59:aa:4c:61:ef:17:58:e0:53:f2:8b:63:0b:
9e:4a:88:e7:f7:6a:55:15:0a:4e:16:22:b6:b2:19:
e1:1c:5c:62:36:0e:4b:04:5d:a6:55:13:65:94:5f:
bf:e3:a1:f0:c3:7d:5e:41:56:ee:fc:1b:c9:46:98:
54:b4:79:3f:c6:0d:ce:b6:d4:91:a6:41:c6:4c:e8:
39:e3:5d:b4:64:a2:82:c1:67:55:89:7a:e0:e9:af:
50:f6:cd:14:8c:09:8f:24:16:d7:65:8f:37:d0:54:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:93:84:EF:5B:22:99:06:72:17:75:00:11:B4:39:C3:3C:5F:0C:9C
X509v3 Authority Key Identifier:
keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f7:ed:9d:81:d2:13:c9:77:92:ce:40:eb:d7:87:d5:6a:ab:
73:98:a5:52:d8:d1:bb:f1:67:a5:c7:13:3d:72:d1:52:16:2c:
91:90:43:b9:6e:f4:f7:7c:15:30:7d:f6:ee:4f:fd:8d:9b:37:
24:d0:d2:54:b8:8b:5c:c1:2e:45:17:fa:33:40:ba:dc:28:1e:
09:73:26:b0:a3:a4:8a:75:c5:b8:f3:99:bc:f0:8b:b5:65:6f:
46:86:21:f8:e5:24:51:71:f9:06:bb:5b:c9:d7:bc:32:68:76:
da:99:94:82:a0:06:60:34:90:b5:23:83:05:46:2a:a2:3a:03:
05:d1:48:89:f3:9d:4b:ed:94:51:94:87:a8:8a:78:7b:52:25:
8d:d4:9e:69:f7:ab:c6:fe:74:e7:60:1a:61:9b:02:27:ca:89:
e0:80:68:e5:9d:ce:81:84:ec:59:a5:e4:9d:76:e0:13:5f:5d:
d8:24:12:2a:4b:d9:0a:99:29:09:19:a3:b2:61:2e:48:99:b4:
13:6f:a8:fb:6d:a9:b3:6b:9f:8f:7c:55:6d:ea:b3:79:68:f1:
81:86:69:d6:28:d4:74:e5:e4:ab:90:7f:ea:10:85:00:9a:3f:
4a:fa:bf:3a:cb:ef:78:a9:02:24:f9:8c:eb:c6:d8:97:f1:17:
33:31:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:46 2025 by rpki-client