Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File: gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier: zcfvGTuALJ/AMchwljCyFXChQOcXmJwS/yUrM/VEtJQ=
Subject key identifier: D8:07:B6:14:F5:83:2A:71:63:E0:B7:7E:E9:67:4C:C1:F3:AF:6C:B2
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer: /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial: 019887336B25F75A2B191CD6B597299623D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number: 161D
Signing time: Fri 08 Aug 2025 01:02:30 +0000
Manifest this update: Fri 08 Aug 2025 01:02:30 +0000
Manifest next update: Sat 09 Aug 2025 01:02:30 +0000
Files and hashes: 1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: fjYYxJZmTdnbiGFhEpG3h7KA4+ikX54dULxWxehfuZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:33:6b:25:f7:5a:2b:19:1c:d6:b5:97:29:96:23:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81689572b200ba4879381c8574274265592a14ab
Validity
Not Before: Aug 8 01:02:30 2025 GMT
Not After : Aug 9 01:02:30 2025 GMT
Subject: CN=d807b614f5832a7163e0b77ee9674cc1f3af6cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:1e:ed:78:8a:0c:2c:a2:3f:e1:56:f2:7a:
64:cb:5f:93:39:71:23:e2:9c:09:1e:c4:32:bc:75:
20:0d:1c:42:02:23:69:90:81:6f:43:13:86:b2:d3:
71:2b:56:d1:6c:57:fa:ec:0a:b1:64:b0:75:da:5a:
e7:c5:5b:c6:11:59:ee:d9:76:45:0a:21:dd:c1:5b:
18:99:3b:76:fb:a1:36:1f:95:0e:7c:d0:68:80:13:
79:9a:43:be:e4:1d:92:b5:8e:9b:c4:ce:85:2a:91:
f2:30:b4:b8:0b:63:64:ae:0c:f4:30:2d:73:97:63:
ef:82:75:f5:7e:49:c2:36:66:8c:59:ac:16:ce:3c:
8f:99:63:60:65:d2:54:98:9c:b8:cf:b7:ee:25:cb:
e1:87:c6:e4:7c:ab:b9:b0:03:ad:b9:04:c6:f3:33:
d9:3e:d6:e9:d3:6d:e4:fa:c6:66:b5:a8:43:e7:8e:
0e:f1:7c:a4:c5:0d:7f:3a:dc:ca:16:c1:85:01:41:
e3:79:e0:59:07:d8:21:78:5a:39:e3:7c:5e:5b:2d:
84:3f:ed:62:6f:71:3c:0c:14:2a:e5:cb:da:dd:e6:
13:63:bd:95:38:f1:5a:28:78:b2:aa:d3:34:95:3c:
02:91:6a:f4:c3:06:da:c4:5c:80:9e:04:c5:99:02:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:B6:14:F5:83:2A:71:63:E0:B7:7E:E9:67:4C:C1:F3:AF:6C:B2
X509v3 Authority Key Identifier:
keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d8:a6:06:35:52:1a:ff:89:e6:58:26:fa:95:df:dd:28:66:
3d:b3:67:fd:ea:ab:ba:0d:0a:ca:7c:2c:ee:d2:e9:9c:d4:f8:
65:71:e8:b9:a8:ef:d3:6d:18:55:28:84:06:00:52:28:fc:ac:
e7:55:78:b9:d1:75:cb:4b:07:b5:b9:bb:04:4b:45:82:d6:7d:
3c:a2:ab:4e:8b:70:1e:75:a2:03:99:ce:8a:e2:a6:c4:ba:a8:
7d:e6:83:86:07:6f:c5:01:24:b5:45:18:29:5d:ba:98:c1:73:
25:2f:d6:c8:68:af:43:c6:be:a6:88:b4:90:89:fe:12:0a:1b:
57:27:c4:c6:a5:bf:0b:ca:8a:ea:31:92:7f:6e:8d:1f:76:38:
14:87:f2:40:fd:31:1f:aa:e3:77:d4:e3:fe:d2:80:37:d6:ec:
59:e3:00:56:d8:b8:ef:5b:a1:16:9e:89:f7:3d:cc:a4:f3:1b:
58:7e:fd:47:10:3b:6a:fe:0e:c5:4e:9d:7e:25:96:68:32:35:
14:08:5b:38:7e:50:22:bf:4a:83:1c:bb:2c:15:be:85:7f:85:
95:fe:0c:cc:23:a6:25:30:17:60:98:dd:0b:94:7c:b6:6d:1b:
ad:34:a5:4d:5f:15:c6:1e:9f:34:38:86:71:a9:1d:4e:02:8e:
78:14:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:21:06 2025 by rpki-client