Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: jXjIfu7BejpET+rlZRP6x6F/Nlo8yRLGCeKByYHDefA=
Subject key identifier: 98:E5:41:D0:D8:1A:D0:E8:C4:0F:8C:A3:95:D2:C9:EE:00:8A:63:A5
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 01987374956B47EBEDB8402F762BE9C9924B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 095D
Signing time: Mon 04 Aug 2025 05:01:16 +0000
Manifest this update: Mon 04 Aug 2025 05:01:16 +0000
Manifest next update: Tue 05 Aug 2025 05:01:16 +0000
Files and hashes: 1: fvmPK9oBYawf3WrvWH2W-IrLack.roa (hash: jbyIzGoc+3nZMPPaYxP5PgX+7SvKTCObiN1ijSSrLNI=)
2: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: aawvbMUptLQOTvT7aluf7YIjSUNCnf1kRzs9OWFN3XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:95:6b:47:eb:ed:b8:40:2f:76:2b:e9:c9:92:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Aug 4 05:01:16 2025 GMT
Not After : Aug 5 05:01:16 2025 GMT
Subject: CN=98e541d0d81ad0e8c40f8ca395d2c9ee008a63a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:99:6e:6d:c5:cb:93:7b:0a:e1:21:8a:a9:
8c:90:0e:22:b7:24:6e:5a:65:69:a5:eb:0c:7d:77:
5a:46:44:1d:98:dd:e3:44:8d:75:16:bf:9f:ab:ac:
9d:23:22:e5:a8:d4:31:05:0b:60:ce:fa:18:d6:52:
25:d4:6e:99:35:b9:89:00:b1:ca:f7:b3:22:d6:a2:
90:af:c5:cc:77:b6:1b:d2:26:dd:e7:20:cb:50:2d:
bf:d4:8d:a7:32:33:8d:96:7b:21:98:ec:00:f9:48:
56:24:2d:47:28:fb:54:14:43:40:82:af:5d:ab:7e:
e1:f5:c1:2e:87:a8:d5:d9:e4:88:a8:a3:7c:d4:fb:
02:ea:ef:40:99:4a:9f:fd:ff:42:bd:f0:99:5b:54:
17:ad:63:a9:d0:c3:5d:b9:28:de:64:cd:4c:68:80:
29:25:4c:67:2b:67:1d:9a:5b:74:2f:75:ed:19:b2:
c0:0c:88:c7:06:53:47:96:19:6a:6a:a7:01:a0:3c:
d6:b6:a1:06:4b:a9:9e:b6:09:b1:f6:97:36:48:d2:
b0:9b:ba:46:29:f5:09:8f:05:17:8d:8d:73:ca:e2:
67:92:b3:5a:88:5f:39:82:f3:75:81:9e:5c:1f:e3:
e8:83:a9:b7:7e:4b:59:e0:81:36:7c:e1:21:e3:0f:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E5:41:D0:D8:1A:D0:E8:C4:0F:8C:A3:95:D2:C9:EE:00:8A:63:A5
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ae:ce:f6:b1:9f:19:50:79:55:36:6d:f8:ba:15:dd:b3:ef:
c9:b0:a8:24:4f:d8:38:2e:c3:06:72:14:8c:91:06:a3:d6:cd:
f0:0e:61:97:40:97:f3:8d:d0:d8:45:99:ed:ba:31:bf:58:eb:
4f:3f:8d:b5:08:a7:2d:ff:3e:6e:04:ca:b3:4d:94:81:36:8c:
7b:b2:8a:b0:d0:8f:86:75:66:3c:c2:0f:99:d6:51:af:8e:02:
64:11:06:6b:21:82:fd:26:57:3b:26:e8:83:2f:37:e7:86:0a:
bb:c9:af:fc:98:15:82:d7:42:6d:bc:02:e4:73:96:c3:5c:ab:
2c:8f:41:1c:2d:2d:09:4e:5c:d9:3d:60:6d:c4:3e:99:c4:67:
2d:6f:e5:b6:41:04:e8:29:a6:18:d3:e5:d3:70:98:82:3e:93:
63:f0:46:d4:13:81:d4:e7:b7:47:74:7c:66:89:5e:94:07:23:
6c:cb:36:07:22:77:8a:a0:2c:80:ee:09:23:51:f9:ea:e1:f0:
c4:38:72:6a:9f:39:39:17:6c:11:6b:f8:f6:cc:85:d7:f4:ed:
73:f3:95:ec:94:92:70:8e:de:c6:d5:90:bb:fc:f9:ef:cf:28:
7a:b4:50:f5:fc:33:69:b5:ea:8c:f1:84:e6:46:28:84:74:dd:
30:b5:c3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:22 2025 by rpki-client