Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: VysRWubOfH/Z18U4C/y1v5z6+n9fT3pzwSU1Wo3VJ8M=
Subject key identifier: A1:C2:0C:78:B7:73:9F:DA:94:49:8D:19:31:8A:60:55:D7:8E:00:9A
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 019872CF8FDEAD243A7A1ACE711DD5580FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 0239
Signing time: Mon 04 Aug 2025 02:01:01 +0000
Manifest this update: Mon 04 Aug 2025 02:01:01 +0000
Manifest next update: Tue 05 Aug 2025 02:01:01 +0000
Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: Xz2JEzNi5t/KrJjIZ9h8WqvbLaZnhiLQnG6sY3Lc9Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:8f:de:ad:24:3a:7a:1a:ce:71:1d:d5:58:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Aug 4 02:01:01 2025 GMT
Not After : Aug 5 02:01:01 2025 GMT
Subject: CN=a1c20c78b7739fda94498d19318a6055d78e009a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:d4:78:0d:54:6a:05:cd:11:7c:65:da:cd:
0b:8b:38:e5:7e:b2:77:e6:6d:d0:1b:58:80:95:75:
9a:f5:c4:d5:52:24:e9:73:71:02:bb:42:0c:06:fd:
19:4b:ef:4e:a5:98:2d:b9:3f:f0:d6:ed:2c:71:94:
ad:9c:f3:a5:b4:ea:16:c2:22:89:1e:d6:4d:88:2e:
cb:78:85:2a:5a:6d:bf:db:02:53:cc:8a:4f:54:8c:
88:85:54:07:d2:2c:94:da:fc:b6:e5:e7:47:a4:48:
6a:6f:ed:f8:3e:68:f8:af:ea:8f:38:3a:2d:22:dd:
15:17:09:62:97:2a:c1:d2:1c:c2:98:cb:7a:45:b8:
22:d3:89:f8:5e:f3:a3:de:bd:74:5f:1f:cc:81:81:
04:b0:f0:b3:be:73:47:7b:9d:7f:d7:29:23:ed:64:
a0:68:45:05:cc:1e:6c:22:8c:1d:08:f4:60:09:dd:
6f:a5:51:9a:7b:9a:cb:03:1e:f5:50:76:b9:bc:e8:
87:2e:65:dd:c3:4a:91:0c:d5:02:16:7f:10:23:79:
cf:0c:a7:ea:cf:c1:5d:f4:e5:68:fc:5e:4b:af:d4:
7b:47:8f:72:1e:d0:79:05:74:10:4b:8e:80:da:cd:
20:b1:09:85:d1:d9:2d:aa:ce:6b:f5:a6:2e:c1:fc:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:0C:78:B7:73:9F:DA:94:49:8D:19:31:8A:60:55:D7:8E:00:9A
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c5:e6:e1:fc:d9:c8:e8:5c:40:34:de:82:0b:6d:e1:55:a5:
3a:ce:48:9b:f9:fb:1e:13:dc:c3:72:5a:99:e2:ab:cd:25:04:
3e:71:23:99:0b:9e:3e:ba:90:ff:f0:7f:69:f5:68:f5:a0:ec:
98:0d:94:05:2a:82:e3:bb:cc:c7:bb:01:f3:32:b9:05:ea:1f:
c1:65:41:4c:41:76:0b:0f:59:53:61:ba:4b:61:4b:b3:b3:f3:
8f:3d:21:22:eb:9b:14:67:ab:4c:fd:fa:eb:06:53:d7:89:2b:
b1:fb:55:d0:85:45:24:3b:82:5a:9f:98:f0:a8:fc:8d:4c:6a:
22:19:15:65:e3:9a:9e:f0:b7:17:f6:94:ca:93:50:95:e9:8b:
f6:24:92:9a:fd:ca:78:b6:1c:e9:65:fe:28:22:ff:94:f5:a4:
f1:90:c5:93:49:79:6c:e6:0e:73:12:45:e4:f8:d8:94:e3:c7:
82:72:4e:8b:ae:b1:be:2f:ef:25:a9:03:44:fb:53:61:33:fc:
63:a7:2f:0f:10:6a:d2:f5:49:b3:fc:96:81:8a:d9:b2:68:32:
a8:44:b5:89:6d:aa:eb:8c:9a:eb:43:52:dc:07:80:9a:86:63:
5e:ef:44:e2:82:6d:93:40:dc:59:67:b4:af:e2:a8:bf:33:b2:
28:3d:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:02 2025 by rpki-client