Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: tS5HHxcuPdTZVVievD95cxxzt26ptRYtTWWzwQUZMjU=
Subject key identifier: 1F:25:C7:C4:8E:7D:6E:61:29:F1:CE:3D:F0:FD:45:71:05:A3:17:66
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 019874193274375C9AD53B64022C9A24F668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 08:01:04 +0000
Manifest this update: Mon 04 Aug 2025 08:01:04 +0000
Manifest next update: Tue 05 Aug 2025 08:01:04 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: mqN7lWSYVuYJ1nGnZP8A1cNM7mihKg5k106wf86S4jE=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:32:74:37:5c:9a:d5:3b:64:02:2c:9a:24:f6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Aug 4 08:01:04 2025 GMT
Not After : Aug 5 08:01:04 2025 GMT
Subject: CN=1f25c7c48e7d6e6129f1ce3df0fd457105a31766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:03:36:b9:0d:5b:5b:da:b8:dd:0e:8c:20:
cb:77:8c:b1:e3:69:5c:3c:08:d4:ec:a9:6a:71:12:
1e:1d:16:99:2c:41:64:c4:c9:51:ab:3a:c5:4f:4c:
f0:16:4e:88:07:3b:79:82:c5:22:c7:6c:99:c3:44:
ca:74:f8:e6:5c:46:ab:16:72:2a:cf:64:c3:d3:a5:
14:60:93:14:48:99:4b:80:ee:23:b5:36:27:8b:52:
19:24:a4:13:f4:7c:1a:4d:ea:2f:37:22:bf:68:4e:
dd:eb:a4:9c:55:35:f5:ba:71:8f:be:2c:c9:d8:16:
6d:a2:d7:36:49:4a:35:5f:3b:d0:9f:c9:86:5c:a4:
dd:da:1a:10:81:c0:9f:57:61:02:02:a0:c0:c6:80:
2a:85:e2:84:e7:c3:23:2c:88:c4:f9:f3:0e:d3:66:
e0:46:6c:f8:d2:7d:2b:79:c3:0a:47:bb:e4:38:72:
6c:af:7b:30:f6:f3:8f:91:10:31:ee:ae:46:9b:e2:
86:05:a4:d4:87:1c:c5:e8:af:23:56:5e:97:04:c3:
c9:44:7b:3b:41:42:68:ca:b1:f0:23:ff:67:32:d1:
e6:86:27:e3:6c:85:e4:c5:9d:f2:4d:40:87:ff:70:
f6:7f:67:b8:b1:a9:b6:39:2f:1b:86:a4:fc:83:4f:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:C7:C4:8E:7D:6E:61:29:F1:CE:3D:F0:FD:45:71:05:A3:17:66
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:aa:ee:4b:51:b0:34:28:fb:da:f8:11:28:76:8c:40:29:1a:
a4:44:b8:f5:a8:be:06:dd:2e:5b:c4:2f:94:d4:e6:68:8e:15:
25:6a:85:58:d2:7b:06:2c:6a:33:ae:b1:e7:e6:93:6b:b9:a5:
f4:6d:c9:a5:82:0f:3a:14:0f:05:35:60:08:8a:0f:28:fa:48:
e0:38:15:e7:85:ff:0a:7d:16:c6:f9:b1:e6:30:62:a8:d7:da:
87:fc:71:5f:a7:5d:9d:33:b7:ff:85:aa:c8:f0:80:c9:27:29:
ad:d1:1f:02:b0:24:37:77:32:f0:d0:63:4e:ce:e3:49:67:53:
f0:62:4f:e5:21:5b:d5:22:52:77:cd:cf:10:bc:3c:cc:26:33:
ca:61:c4:97:29:30:03:33:f0:b7:af:2b:78:7d:a6:7e:8e:a0:
e8:03:b3:ae:fa:b4:a7:86:e2:98:de:77:08:2e:2f:7f:38:ac:
67:ae:ae:2d:40:32:75:a4:bd:ff:7c:61:7a:45:ef:1d:65:7d:
a3:32:b1:28:47:55:e9:b8:ca:e0:89:fc:82:91:29:ee:e0:af:
80:de:ad:75:e6:42:87:e3:7d:c4:9d:a8:0d:6b:90:af:2a:e3:
80:aa:75:f9:31:b2:59:11:13:28:8f:82:23:55:23:24:ce:ea:
c6:44:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:14 2025 by rpki-client