Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: 1dG7bYztJyKgrMRbp1sOkiZMbCCnSs+uf+mUucgyJ/U=
Subject key identifier: 81:CD:09:53:D9:9F:3C:27:39:FD:04:2A:E2:E6:FF:4F:F3:53:6E:1E
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 0198D6985DB480EEC192FA908597E2ED36B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 1397
Signing time: Sat 23 Aug 2025 11:02:46 +0000
Manifest this update: Sat 23 Aug 2025 11:02:46 +0000
Manifest next update: Sun 24 Aug 2025 11:02:46 +0000
Files and hashes: 1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: 4Q26D+W6zAlsolSzG2JHq2juB1YWyOq9zUUKNYqL4fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:5d:b4:80:ee:c1:92:fa:90:85:97:e2:ed:36:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Aug 23 11:02:46 2025 GMT
Not After : Aug 24 11:02:46 2025 GMT
Subject: CN=81cd0953d99f3c2739fd042ae2e6ff4ff3536e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:3b:6f:a4:fa:e5:54:fd:ec:99:5a:60:82:
47:43:e9:2c:58:3b:e2:7f:13:b4:cf:32:ad:a7:f7:
fb:a3:22:25:36:1b:cb:23:c7:10:a1:98:9e:d2:d8:
91:bb:cb:78:87:bc:46:df:96:59:48:8f:d2:19:3b:
06:60:e8:9b:82:7e:af:f1:7c:47:68:54:df:9d:c5:
ad:07:c4:2c:a8:78:96:8d:13:4c:c4:fb:1b:30:7a:
78:a7:a1:d3:ec:e3:89:af:7c:71:9d:04:f0:68:88:
9f:87:2c:71:39:22:96:2c:fd:84:28:1e:03:0a:5f:
1e:df:ec:dd:cf:b3:56:2b:56:c8:32:9d:b9:4d:e5:
8e:e3:32:f8:fb:b5:c0:a9:ef:d9:f9:4e:13:c3:f4:
9f:39:f1:d4:3e:05:4a:64:8a:92:20:e6:98:33:0a:
4f:3a:b1:e0:71:d4:7b:a3:dd:38:ab:93:0a:11:08:
48:97:b7:94:ac:ed:80:da:ba:97:b9:2d:70:f8:a0:
38:ae:c9:50:19:7f:2e:d2:e2:b7:0d:0c:f5:1c:d7:
f4:09:f2:82:cb:3a:ea:43:3d:5c:99:77:34:cd:70:
ee:48:61:40:1e:29:c2:13:56:99:d6:b8:ff:cf:37:
b4:8c:73:05:34:a5:d3:48:16:42:54:74:f1:2a:4b:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:09:53:D9:9F:3C:27:39:FD:04:2A:E2:E6:FF:4F:F3:53:6E:1E
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3d:e8:3a:fb:9c:ed:02:8a:6e:13:bc:b3:9e:21:cd:d4:36:
ba:a7:a1:91:48:14:10:cc:26:aa:c7:96:56:22:c0:db:6d:4b:
be:d9:2b:6d:ea:23:fa:c7:e3:a6:9f:42:98:66:4d:e2:f4:aa:
6d:8d:e8:9d:6c:4a:99:d6:b3:82:eb:80:b6:47:af:f5:6a:47:
18:ad:46:1c:89:9b:04:b4:bb:a9:74:4d:43:82:8d:27:82:11:
23:98:50:f9:1e:3a:60:11:c7:fb:b7:85:68:fc:c6:f8:d2:f7:
30:4b:0b:1a:83:58:5c:4d:c7:7f:42:f7:9a:74:3f:d3:94:da:
ec:12:08:c6:16:45:b5:76:9b:ac:be:a7:a7:64:31:98:dd:59:
3a:0f:c8:bf:bd:74:fd:e2:99:d3:7c:76:e5:84:e7:8f:c7:43:
bb:4f:52:fd:40:5c:b8:67:b0:17:03:9d:09:38:37:03:ec:2e:
88:53:d7:b8:73:12:90:f6:3c:9c:bb:0d:e1:14:b9:38:44:51:
6e:97:ed:2f:88:5b:20:20:e9:e3:06:93:00:c6:f7:ad:af:fa:
06:dc:eb:c2:bf:5f:9c:7b:e4:fd:ae:7e:12:17:7e:34:0d:47:
97:7e:3e:d2:9d:55:b4:a5:22:1b:fb:73:48:f0:fa:aa:d0:db:
75:2c:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:34 2025 by rpki-client