Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: jc8KLCB71H4r0QZWowrMS0btCqWXbyso4YpjNuYWrzw=
Subject key identifier: D5:B0:05:C8:E7:6F:87:DD:A5:8B:9C:14:49:C6:13:0F:34:95:EF:80
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 0198D6CDAF974BBCB3859C0261D50B1B168C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 6B
Signing time: Sat 23 Aug 2025 12:01:00 +0000
Manifest this update: Sat 23 Aug 2025 12:01:00 +0000
Manifest next update: Sun 24 Aug 2025 12:01:00 +0000
Files and hashes: 1: YdAjbfCRxVQuhwuJCOd8n6-9uGc.roa (hash: ryQI+IE9GniEW1zRKSAQBzSoJ8r45pp9QujhZtOYmEk=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: lg2gO8K9mEp3kgFqqU6zeP7QWOHqEQrLJ1eH4UVx0v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:af:97:4b:bc:b3:85:9c:02:61:d5:0b:1b:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Aug 23 12:01:00 2025 GMT
Not After : Aug 24 12:01:00 2025 GMT
Subject: CN=d5b005c8e76f87dda58b9c1449c6130f3495ef80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:df:08:3d:50:b1:c5:74:ce:9d:cf:bd:9c:
c6:3a:8a:98:8d:c0:98:f3:b6:44:2b:d1:79:d6:01:
5f:0c:53:30:7a:3d:23:9b:05:92:0a:f5:6d:5c:fb:
88:53:db:d5:f3:63:2b:db:21:cc:69:08:f0:13:b5:
eb:7b:d8:eb:25:10:8b:64:1f:62:73:5a:3a:c0:45:
89:8a:33:bf:0a:71:6f:f0:9b:17:89:c9:ef:47:40:
65:d8:14:1b:9a:77:1d:86:d5:b5:99:c7:52:3a:f4:
d5:c5:e1:0b:9d:42:b5:ce:91:6f:9e:11:7d:22:9e:
d6:54:88:bb:21:50:ba:43:e0:77:c2:f4:e4:91:09:
12:8a:8c:eb:31:8b:eb:f7:a9:6f:21:4f:14:c2:94:
d8:47:58:46:8c:c3:1f:2b:88:bb:48:e1:44:8b:46:
d7:b9:75:7d:0b:f7:8d:4e:ee:e9:75:3c:a0:c2:28:
20:bd:bc:ae:7d:20:77:6e:3d:28:2a:27:e4:75:24:
96:35:e9:cb:ae:86:c5:be:2d:f8:7a:8e:16:50:fe:
51:a7:06:88:d9:b8:2d:1a:68:04:6b:35:57:93:83:
fa:fa:66:d9:75:07:8e:ae:02:fe:61:37:62:e0:8b:
36:ae:a9:9f:54:f7:20:23:72:e3:69:d4:6c:21:88:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B0:05:C8:E7:6F:87:DD:A5:8B:9C:14:49:C6:13:0F:34:95:EF:80
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2a:46:ab:82:1b:cb:43:07:9b:bb:23:51:4a:cd:32:30:6e:
5e:5c:bb:8b:f5:6b:65:d9:a7:86:36:a9:7b:d2:84:d9:94:ed:
35:6c:de:88:ba:47:c8:81:7e:87:ba:43:ca:a8:e9:42:ae:ab:
6a:21:d7:9b:15:21:95:10:59:6a:e2:d3:19:5a:00:da:ce:ca:
5d:e2:b1:f3:79:96:7e:61:1c:6d:f7:93:c7:3c:7e:af:c6:6c:
2f:60:3a:02:eb:6f:4c:b5:a2:be:29:06:16:f0:c9:ff:da:9b:
4d:0b:19:5c:e4:f5:3c:19:f3:cb:90:f6:d3:08:8b:34:a0:20:
f9:02:cc:b6:68:ae:d6:b4:c7:ae:11:2a:95:a2:ce:b1:a5:6d:
aa:d1:79:96:0f:0c:e7:0b:9a:95:e3:94:29:c4:7d:20:44:0b:
38:17:e8:21:e9:64:55:81:2c:55:08:25:00:57:b0:1c:67:9b:
c9:1a:ce:07:43:5b:87:95:c0:e7:48:ea:be:72:ef:93:10:f1:
b9:31:cc:b1:e0:21:8e:a2:3d:22:57:54:d4:1c:77:80:97:33:
22:7d:0a:86:1e:ac:c4:b1:13:99:f6:16:aa:bf:e3:9a:05:1a:
97:c7:25:4e:b0:9c:0b:74:d2:74:20:95:62:30:bd:aa:c5:f4:
61:33:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:36:50 2025 by rpki-client