
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: tswf7yPUcXCpMboqCGO6gQNoKda4edJ7WPUuiPdhHcc=
Subject key identifier: DF:2B:0D:50:F4:F9:AD:78:1F:8D:B3:AB:3B:0F:08:C7:FC:4F:C4:E1
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 0198D584009C1807342EBBCB21A0C64175E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 07E2
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: VwWx7TI5PfdWHmEANMaZDvrxbfM.roa (hash: GdO5B/HxREqllXvO5zZSatBqAt9AEAlFDZB8KwpSWpc=)
2: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: 7eblgI4oyOk+6K/TBCferyjKZbuOdMMuyHEX5TUG/4U=)
3: jXrYu6LJxwivjMZClD5ZjOpwIqA.roa (hash: ck7XGlXmTp2bXTd8xLW029LSmXtDoPF5+uZ9OUYHI7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:00:9c:18:07:34:2e:bb:cb:21:a0:c6:41:75:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=df2b0d50f4f9ad781f8db3ab3b0f08c7fc4fc4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ef:65:bc:6d:96:77:4e:46:9b:e3:cf:ee:71:
19:fb:f2:34:50:b9:4c:3b:bf:87:69:05:ce:d1:db:
db:b6:71:37:69:57:fc:8d:d1:ab:79:d5:65:84:ab:
3d:57:47:31:1b:3d:b7:77:f9:f9:92:36:01:3f:97:
bc:cb:1f:c4:3d:8a:7f:1e:01:14:48:be:4f:44:0b:
6a:7c:9b:84:b8:12:28:ef:bc:7d:56:1c:c0:f7:ac:
81:ff:e9:6f:85:3c:7c:94:b8:5d:8b:86:60:e8:93:
95:a7:9c:eb:f7:ae:de:9e:6a:63:e3:2d:f0:53:a2:
0f:42:b0:59:20:ce:7c:74:ae:de:70:bd:90:a3:17:
54:14:80:a7:8c:ba:a4:2f:c1:6a:90:24:54:58:df:
f2:fe:e3:75:e0:6d:6b:a6:8d:2b:e8:e8:3e:e1:96:
3f:a0:56:f4:e2:fb:4e:cf:89:7f:e4:0e:38:eb:b7:
cf:f2:5f:3f:19:00:f4:73:63:91:a7:5a:c8:b0:7b:
d7:74:75:41:a1:05:1b:25:e2:5a:a6:bf:1b:9f:b3:
88:4e:3e:82:48:67:67:e3:f9:6a:3c:f0:7e:79:af:
e8:98:83:97:b0:69:46:a0:ee:79:20:e9:c6:29:95:
83:1f:28:95:87:83:ec:16:93:db:fc:43:c1:b6:fc:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2B:0D:50:F4:F9:AD:78:1F:8D:B3:AB:3B:0F:08:C7:FC:4F:C4:E1
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a2:a8:a6:64:88:de:2c:21:7d:c4:ec:58:8a:fb:72:3c:e2:
38:31:33:ae:e8:9b:43:68:16:bb:b6:1d:4d:c7:cf:ef:02:89:
1b:95:9e:2e:59:ad:1f:e9:22:3e:ca:36:9e:ad:fb:f6:3e:82:
10:a9:3d:c5:57:59:e2:74:83:08:aa:f1:98:58:56:cc:ad:ae:
e8:72:d1:4d:15:3f:04:88:4a:3a:17:7b:d1:11:8b:39:5a:56:
e8:fd:d8:ac:1e:5d:78:1d:19:d4:99:8a:91:25:28:01:79:71:
85:ad:48:96:99:98:24:e4:1f:84:52:b4:4e:7c:82:b4:35:a0:
f3:3e:1a:e6:2f:ca:d9:8f:ac:85:b6:78:76:3f:65:ba:98:20:
6c:18:15:de:5c:7f:90:9b:c0:8c:30:75:f9:46:78:ca:e7:df:
0d:bf:98:3a:b7:a9:50:98:cb:89:b3:35:df:24:f0:da:ce:48:
61:05:fa:35:0a:1f:b7:98:19:14:f1:e9:a0:57:09:87:10:2a:
f4:36:7f:cb:a0:a8:09:f6:d1:44:f0:97:85:90:95:ec:0d:8c:
65:91:40:e8:d6:37:20:45:f6:44:51:fa:81:e4:66:61:f1:c2:
79:05:66:b2:6d:ec:db:34:d2:39:10:be:9d:04:18:9d:40:83:
c3:79:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:00 2025 by rpki-client