Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: ZgGVHaoPHDc5nqUHp/4kF4kizliiKoZsAACSsO4XnJA=
Subject key identifier: E1:BC:60:33:7F:03:3E:F8:25:0E:20:AE:4C:FD:B5:C4:EB:74:2D:D9
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 0198955B8D23293563B27B69ADB69F334274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 19:01:01 +0000
Manifest this update: Sun 10 Aug 2025 19:01:01 +0000
Manifest next update: Mon 11 Aug 2025 19:01:01 +0000
Files and hashes: 1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: pGAhBlqc+Ub9dUGRvVJVTcQO+QBRkUTxQ3sy1+vIsec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:8d:23:29:35:63:b2:7b:69:ad:b6:9f:33:42:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Aug 10 19:01:01 2025 GMT
Not After : Aug 11 19:01:01 2025 GMT
Subject: CN=e1bc60337f033ef8250e20ae4cfdb5c4eb742dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:b1:9d:3d:51:67:29:56:9c:0e:71:cd:0b:
5e:7b:60:19:3f:36:1f:ee:d0:47:eb:0d:2b:3a:41:
35:e8:a6:14:47:bb:e0:e8:2c:83:ee:62:32:21:07:
fa:67:c9:32:59:6d:95:0b:fb:db:87:7f:06:d0:30:
d4:aa:bd:d4:2d:fd:71:cf:4c:21:c3:9c:21:2f:9b:
f7:85:2a:ec:84:21:fc:15:e1:41:93:9d:fb:77:c0:
91:46:57:c3:5e:3b:18:18:f9:82:ea:7e:b5:89:8c:
61:7e:8b:26:19:1a:9d:d7:29:72:ad:4f:9a:52:c7:
36:67:29:bb:d3:33:83:6f:00:83:31:11:75:13:e8:
53:06:fd:5e:3b:a6:dd:0c:26:19:98:3a:11:6d:14:
eb:10:c0:cf:72:5a:01:a3:3d:14:1b:1d:e5:6d:bb:
bc:19:aa:28:64:3e:32:dd:25:b8:29:0a:76:cf:d2:
29:05:e5:ce:7f:1b:b6:22:86:f8:82:9e:a5:d5:d3:
ff:91:96:7e:06:ca:f0:59:84:28:e5:4c:e9:4c:cd:
4f:b2:f7:b5:5d:c1:9d:1e:23:00:1b:eb:23:a5:13:
60:4c:2c:9b:5d:fa:bb:ca:1d:dd:5b:b3:e8:79:84:
c0:e4:fd:6c:38:6f:29:25:92:6c:c4:5b:c4:2f:67:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BC:60:33:7F:03:3E:F8:25:0E:20:AE:4C:FD:B5:C4:EB:74:2D:D9
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:26:91:37:4f:52:fe:c9:a8:aa:ac:ed:5d:91:46:dc:3e:f2:
97:74:21:32:e9:81:52:44:7e:50:0a:6f:f8:74:e7:6d:e7:75:
9f:34:94:18:6d:d6:8e:e0:f4:89:bf:fd:db:1b:82:39:bb:af:
af:87:1c:bf:95:f8:dc:9d:ef:23:d7:c4:13:a8:c0:a2:f5:4d:
dd:3b:6e:c8:bd:34:bd:f0:e8:33:56:7e:66:2e:8f:0a:7c:18:
d9:9f:a2:79:8c:06:cb:c4:3d:8f:9a:6f:d8:db:53:8f:3b:0b:
93:db:6d:15:14:68:44:87:83:61:cc:8f:9a:a2:23:19:7f:52:
90:72:c5:45:cb:c0:e2:f9:ea:1d:60:46:18:3b:eb:0c:27:f9:
e8:8f:8f:38:a2:40:90:66:0e:8a:74:ae:42:09:8c:a1:4f:22:
15:3b:f1:8f:b3:db:39:a2:f8:86:95:40:2c:69:53:1c:34:2b:
f5:b8:b4:6d:d4:1b:94:79:e0:7e:e3:db:7c:ea:d0:7f:29:10:
e9:7c:76:47:24:5f:4c:d4:9b:8f:b1:46:d6:2f:db:1e:77:7b:
6a:ba:19:6e:1b:f6:fe:f8:43:3d:81:fb:51:6a:93:5b:88:04:
d8:c0:42:d2:02:4d:7c:4d:8d:15:48:e8:16:a4:56:00:ee:aa:
43:a7:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:12 2025 by rpki-client