Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier: JdoI76q4tPwMTO2mtUHzRxmrS9kiIx1q9AIJfxLHnT0=
Subject key identifier: 65:96:EA:11:3D:AA:05:0E:1E:53:05:96:B9:CF:B9:30:0D:9B:8A:4F
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial: 0198D705B11DD5E030B0E26BD0351FE35CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 13:02:10 +0000
Manifest this update: Sat 23 Aug 2025 13:02:10 +0000
Manifest next update: Sun 24 Aug 2025 13:02:10 +0000
Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: tTKJFhMtRqoz60ocgi0uYVPuB9SfegReU48J4oEhjVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b1:1d:d5:e0:30:b0:e2:6b:d0:35:1f:e3:5c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Validity
Not Before: Aug 23 13:02:10 2025 GMT
Not After : Aug 24 13:02:10 2025 GMT
Subject: CN=6596ea113daa050e1e530596b9cfb9300d9b8a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:7c:a8:f9:17:cd:e1:97:27:7a:52:46:3a:
85:86:96:dd:52:f4:44:7c:8f:54:84:c8:72:c6:06:
45:9f:91:29:7d:ac:a2:b3:23:1a:20:df:c3:66:8b:
c9:8d:c5:3a:45:7e:59:76:2e:ec:c4:4c:e6:27:77:
a7:b2:58:fb:32:87:bf:0e:b7:af:38:0f:d3:74:e0:
0e:a7:d0:26:8a:a0:1a:e8:ea:53:90:f3:3c:7f:56:
eb:63:be:a8:22:f8:ff:a8:90:00:15:7d:de:04:6b:
09:fc:8c:bb:0c:65:0b:cc:6c:a9:14:e0:c2:36:ed:
2d:f1:6c:c4:98:94:98:d1:dd:8b:d3:0d:e4:68:a0:
09:cb:66:75:82:0c:ee:6f:de:63:be:5c:25:34:dd:
ab:aa:25:cf:64:99:7d:43:2b:a1:0b:a4:ae:01:72:
6f:41:47:c4:85:2f:2c:41:d6:f1:98:71:6e:2a:d1:
77:cc:03:7f:06:6a:16:2e:2e:50:25:f3:88:78:8e:
ed:3b:89:3a:fe:4a:27:74:71:ff:82:b5:5b:8b:fc:
22:6a:23:7d:bc:d5:be:24:83:6c:fe:ff:0d:23:b2:
39:c5:42:60:25:a9:61:05:18:3f:58:ff:d1:9d:7b:
54:24:2f:a2:5b:9f:21:d7:d2:f5:57:bd:7d:44:f8:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:96:EA:11:3D:AA:05:0E:1E:53:05:96:B9:CF:B9:30:0D:9B:8A:4F
X509v3 Authority Key Identifier:
keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bb:d4:d2:c2:96:86:bb:79:30:3c:64:c7:80:66:e3:fd:17:
08:67:93:db:6a:50:36:e0:f3:55:9a:96:48:9b:d1:75:99:46:
4f:7c:d4:41:fa:71:53:dc:be:4e:fe:09:03:87:f1:0c:61:5f:
ad:fb:b8:ef:cb:5c:29:90:b8:30:8d:76:f0:7b:be:cf:33:e5:
da:29:1e:07:cc:5b:40:2f:ac:2b:17:05:be:2c:dc:69:be:72:
78:72:97:7f:93:37:00:d7:48:7e:69:b8:0d:0e:6f:7a:28:c0:
c6:ab:6d:f1:7c:af:6c:71:27:85:0e:92:2c:74:9e:9a:2e:31:
29:13:a5:bc:f9:d1:00:12:a3:18:dd:43:51:1c:98:d1:f7:44:
74:88:f5:10:19:c0:96:10:9e:ad:59:cb:73:57:90:a7:e2:ce:
4b:96:54:db:47:25:a2:33:4b:d1:bf:e5:8f:f4:15:72:d8:9f:
89:31:ad:ca:f6:c5:f6:29:6c:ee:e5:b9:eb:db:03:02:ae:1d:
a7:cb:0f:5b:c6:c2:22:31:f5:b3:50:72:fc:b9:12:71:7e:b7:
6a:85:a1:3e:16:f2:68:79:21:e4:ea:5d:0f:58:8d:cc:30:a5:
11:9d:11:5a:8e:14:d8:d7:d8:85:e5:20:05:61:d7:f7:05:56:
22:45:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:57 2025 by rpki-client