Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File: GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier: zs8Lugrkyx4YysT2j/Ihe85ku3jTJbWWUdihrKIQw2U=
Subject key identifier: A8:07:65:32:AB:6F:06:10:76:56:16:E0:BF:1F:B6:BB:E0:27:60:15
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 0198D5BBBFF81091A9379875D8E9BF500EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number: 0520
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: 1BCQS42AU0GGH4PRx7vWlNY6UnM.roa (hash: UsPM1kz8JudOE7Cn+hyYQwficWvW1KbcDmuvAJ6iOSc=)
2: 31ag2HrgANjhnzyqvzYcA_GuDbg.roa (hash: 2P8QZCQEYwZ7T/ngNrFwmBzstV47MWzT0cHknGsfldw=)
3: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: uGaVJE/lT30G5TtjH+oqFs1ajN/GODaAZkXPqS3SVz4=)
4: xKJMBlinbdfn34LVJF69A7qgGkk.roa (hash: ghKwNM3pv6/CjqUkOttxn9jN7TiH2L3Yp/7tBiGxOUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bf:f8:10:91:a9:37:98:75:d8:e9:bf:50:0e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=a8076532ab6f0610765616e0bf1fb6bbe0276015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:4a:db:6b:5d:75:92:10:8f:2f:4c:c1:3b:
4f:22:b2:13:f9:d5:8f:d2:5f:d1:15:87:4b:dd:fa:
7f:84:5e:45:e9:b2:4b:1d:b8:e7:c6:55:f4:53:9a:
72:e6:e8:70:ca:16:f2:69:19:d3:09:3a:57:67:28:
c4:40:ba:a2:11:75:62:15:f6:66:98:c4:88:b2:45:
34:a2:ef:30:bc:6d:1e:5d:ab:58:01:87:a2:3c:29:
82:31:cd:39:d1:73:a3:50:93:13:c2:46:0c:12:d4:
4b:cb:5e:70:09:53:d1:bb:3a:07:47:69:96:4a:5a:
d6:2f:b0:62:0c:b7:3f:a4:9b:1e:e1:ca:a9:cc:f1:
f9:73:f4:a1:e4:92:e2:bb:30:d9:1a:5a:8e:e9:98:
c0:54:21:50:55:51:26:aa:f5:1d:12:10:3d:5d:e2:
1c:d2:53:a7:13:26:be:54:f7:4b:9b:d3:ab:04:41:
d3:0e:25:7c:3d:03:00:d1:ae:0e:51:32:85:92:0a:
cc:0b:6c:a5:21:03:4a:f5:61:ed:4b:fc:83:71:e3:
81:b9:79:e6:80:30:da:a6:64:7e:91:f3:1a:cf:39:
3a:cf:fc:84:e9:b0:78:3f:00:b0:32:fe:e2:b8:84:
df:2c:c2:8f:ff:2c:62:f0:a9:48:a0:f9:84:24:84:
5a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:07:65:32:AB:6F:06:10:76:56:16:E0:BF:1F:B6:BB:E0:27:60:15
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:ad:23:7c:f0:32:92:af:f3:dc:3b:31:ef:b6:07:81:bf:
28:da:e4:7f:fb:fc:05:50:aa:d7:9d:06:53:81:ee:6e:6b:27:
f1:a5:0e:e6:72:05:27:5c:ff:ae:c8:23:ab:00:2c:dd:1b:bf:
d7:8f:f9:da:21:bd:5f:c8:33:8b:5d:82:07:9a:48:2c:f9:b4:
8a:11:15:b7:e3:11:fa:81:50:b5:24:be:b3:0c:95:20:49:9d:
1e:89:ef:59:98:bf:7d:85:dc:66:6e:ab:7a:6d:17:9c:8d:75:
6d:af:f6:ad:ee:5e:e7:70:1c:ce:6c:ce:d1:8d:88:62:64:9c:
d9:62:ac:4a:17:4d:03:fd:93:36:b7:73:0e:4c:f2:d2:0c:72:
2e:12:ad:73:a2:a6:b2:b4:8a:26:ac:46:d5:02:d7:f3:66:2c:
7a:a6:e4:9e:f2:22:86:30:71:e9:25:f6:b3:21:1c:1b:6b:ed:
8a:06:77:3a:62:60:85:15:f2:97:1e:ef:a0:63:fa:2d:1c:81:
d8:ef:51:22:65:e2:80:a1:a8:41:da:7b:d1:96:e7:93:d9:2d:
ea:0d:07:f6:7c:71:ac:aa:c4:8d:bf:55:81:a3:10:47:6d:fc:
89:40:c6:09:0c:6f:0b:47:5e:ad:9b:60:47:66:35:bc:2f:51:
f9:13:b8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:51 2025 by rpki-client