Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: ZUGXknhgiySLPRfP2vDJPi+SZLCBYnvBhVq/tdTeGzQ=
Subject key identifier: EE:A2:8C:F8:C1:E0:0F:71:93:89:63:3C:1F:AB:18:33:33:9E:A8:3A
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 01987298ED8C3FB021CA7C28E0DFC886DCD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0959
Signing time: Mon 04 Aug 2025 01:01:21 +0000
Manifest this update: Mon 04 Aug 2025 01:01:21 +0000
Manifest next update: Tue 05 Aug 2025 01:01:21 +0000
Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: 5zuCujdlyAK4P63ZB1hyEV0PB25W5XUsxqOZCgFucU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:ed:8c:3f:b0:21:ca:7c:28:e0:df:c8:86:dc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Aug 4 01:01:21 2025 GMT
Not After : Aug 5 01:01:21 2025 GMT
Subject: CN=eea28cf8c1e00f719389633c1fab1833339ea83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:a5:1b:57:e4:c0:7c:00:a0:a9:f4:38:f7:
9d:66:ea:4d:54:1c:9f:d2:2a:77:9d:92:0d:1a:4c:
74:2c:a2:40:7b:c5:53:64:90:4f:4c:9d:cb:fc:c6:
b1:2b:3d:a3:22:a4:96:80:91:81:0f:fb:b5:e1:92:
df:7e:38:c2:f9:8b:bc:73:85:96:f7:58:8c:d1:06:
ce:7d:6a:0c:db:2d:9f:1b:25:37:06:84:63:f2:65:
62:53:31:61:24:c4:de:9b:c9:5e:23:15:dd:75:76:
61:4d:24:42:00:a6:c1:69:3b:06:27:0e:35:ea:68:
13:c6:57:5b:d2:2e:20:dd:5b:6d:3c:85:49:70:a3:
23:b3:59:de:f9:1d:ab:00:bb:cd:7d:82:58:48:b7:
4b:3f:f0:92:06:bc:40:5b:01:c7:62:12:a6:2b:8c:
0b:2a:a5:cc:86:97:ba:f1:30:f7:cf:57:2e:6f:72:
73:8b:2b:d1:c0:11:6e:06:05:d1:1a:d1:bb:c7:db:
00:8e:42:64:b1:90:c6:3a:32:10:5e:00:90:6a:30:
f1:28:d4:60:b8:18:8a:ca:e9:88:e0:64:66:c4:c2:
fc:54:ef:d0:7e:04:c8:b4:4c:92:4e:3f:97:da:f0:
ac:89:fd:ea:3e:73:c0:49:96:7c:50:3c:e3:91:79:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:8C:F8:C1:E0:0F:71:93:89:63:3C:1F:AB:18:33:33:9E:A8:3A
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6f:af:d2:1e:9f:6c:8c:a2:50:7d:ab:96:b9:f0:c3:f3:56:
73:cb:ad:da:34:19:32:75:a7:02:90:d3:c7:78:bb:3f:a2:d9:
67:e5:8d:70:f0:b6:3c:a1:51:88:d0:fc:e3:73:62:03:ee:b9:
a4:d0:81:9b:c6:b2:42:a6:b3:b5:77:c6:fd:4e:e2:54:82:f6:
f2:97:0f:9b:4c:f2:06:ff:02:f0:49:d7:71:70:e8:be:74:e2:
cd:f2:ec:38:20:84:0e:c3:e1:77:ff:38:a6:28:c2:b8:d0:e1:
43:f1:8d:14:6c:03:35:d0:26:94:c5:4e:45:a2:e0:bf:cf:8c:
92:71:27:b4:78:d4:ce:15:a5:00:e5:c9:73:74:68:11:f8:37:
6a:eb:ff:62:9e:6d:37:d8:3e:fd:9d:11:ac:fd:bb:12:ed:8e:
ec:e7:37:1f:7a:61:6d:ba:5b:0e:b8:ee:20:5b:45:20:44:f8:
57:f7:e5:9d:57:9c:89:19:f2:09:ce:f1:0e:2c:6d:9c:9d:ce:
51:33:e7:f4:df:92:b4:a4:b7:04:9b:ec:70:23:29:84:a9:a5:
e0:2b:90:48:4c:f9:af:12:e5:15:fb:9f:69:04:72:30:0a:f0:
c7:46:34:50:c4:95:19:f5:c5:c2:d5:04:4e:5d:7b:3d:fe:72:
ee:14:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:42 2025 by rpki-client