Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: Z9Nd3XJrftzoTwnzTey9qXfCQlhzSqdDQeXhbT/zaaY=
Subject key identifier: 96:34:20:7A:1C:CF:83:A5:32:28:58:AC:1C:9C:21:DC:F8:0E:E9:FD
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 019881D515363E045A477E864D29931B0BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0BA3
Signing time: Thu 07 Aug 2025 00:01:22 +0000
Manifest this update: Thu 07 Aug 2025 00:01:22 +0000
Manifest next update: Fri 08 Aug 2025 00:01:22 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: QTH7YwUUAUSEuf5rZaNS2wFO7A90tDgJ0I8gYONE2bk=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:15:36:3e:04:5a:47:7e:86:4d:29:93:1b:0b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Aug 7 00:01:22 2025 GMT
Not After : Aug 8 00:01:22 2025 GMT
Subject: CN=9634207a1ccf83a5322858ac1c9c21dcf80ee9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:a7:b7:97:70:47:fe:96:42:54:5f:8d:8d:
36:5c:a1:df:14:8c:0b:02:ba:bb:e6:2c:29:de:4e:
db:02:d2:e3:15:ef:b8:46:89:3c:6e:ef:24:46:29:
f7:b2:03:09:1a:13:5e:35:63:12:66:c8:d2:20:29:
27:b4:61:3a:92:67:46:7b:c8:6b:9b:9c:28:d8:2f:
33:bc:e9:94:f7:f9:27:03:fe:6e:52:36:3f:24:3a:
7a:8d:da:a0:c9:d8:1d:da:9b:59:6a:1b:36:15:85:
11:51:4c:d3:4e:65:98:04:f4:dd:13:d4:ee:77:b3:
c0:93:c6:5f:28:0a:64:7e:bb:85:39:a2:2f:e9:d9:
1c:42:36:ea:e8:d9:df:b0:ef:db:1f:be:e6:93:d9:
d5:c4:38:eb:9e:e3:57:3d:aa:46:04:aa:e0:ce:45:
55:11:51:1c:c4:95:b7:43:f9:e8:c4:df:ce:14:13:
41:86:66:62:38:23:cf:fd:84:90:f9:d9:c3:7f:31:
94:c8:74:9d:65:87:a4:f3:27:36:aa:3f:3a:11:3c:
ab:cd:de:0b:0d:82:5f:a9:4a:22:8a:41:05:2e:fd:
a0:14:51:1c:26:2f:75:f3:de:0a:ac:8f:a4:c3:db:
3c:db:c9:b3:6b:36:54:46:b8:6c:5c:03:28:08:5e:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:34:20:7A:1C:CF:83:A5:32:28:58:AC:1C:9C:21:DC:F8:0E:E9:FD
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c2:10:41:00:6a:0b:3b:65:4f:69:68:c5:2b:51:e3:93:40:
b0:bf:06:54:5a:a3:6c:54:ce:d5:5a:58:e6:17:82:95:99:04:
ff:45:d1:3b:6f:a6:ce:88:85:82:b5:e3:1c:f4:7e:b9:75:91:
9d:cc:e3:b4:dc:78:f9:e5:06:bf:76:ed:2d:df:7f:fc:8f:e1:
eb:61:2b:d3:c5:dc:53:14:12:ac:44:19:8b:6a:bd:2f:af:06:
2c:39:01:24:9a:a6:b9:01:01:40:87:7a:7c:56:0c:1b:37:ff:
8b:e4:5f:9f:07:19:73:f5:fb:58:fa:09:dc:79:d6:12:88:5d:
0a:01:84:c4:92:6b:67:0f:3b:a7:35:17:4a:21:68:bb:73:32:
8f:99:25:c3:9a:ca:60:e1:cd:07:be:44:91:05:56:ec:4c:59:
82:8c:d7:7c:20:80:6e:13:53:01:f5:d1:04:21:d8:92:9b:7a:
5f:88:29:27:e4:07:aa:60:63:45:5b:06:df:6d:9b:8c:4c:8e:
f7:ab:24:8f:6f:2a:0e:6c:ac:2f:9a:91:94:32:fc:9d:42:81:
6d:c2:4b:80:a1:8f:2a:57:a1:1d:4b:89:a3:d4:f8:d1:96:cd:
91:17:2e:02:ff:04:64:76:e4:98:46:6d:c4:9d:5a:f0:c3:2c:
b0:e9:f6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:38 2025 by rpki-client