Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json)
Hash identifier: 8VCSIRsncs17ogCiGJR10FQKG+ypWIrn2kNaa9inweQ=
Subject key identifier: 8D:B2:58:00:42:58:F1:E3:00:AB:E4:D2:6C:76:A6:A5:A5:53:90:03
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial: 0197C312C0224F1E0EE10625CEF67F346F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
Manifest number: 12FE
Signing time: Mon 30 Jun 2025 23:01:15 +0000
Manifest this update: Mon 30 Jun 2025 23:01:15 +0000
Manifest next update: Tue 01 Jul 2025 23:01:15 +0000
Files and hashes: 1: OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa (hash: GAxHkIIERYjerOgQkJ6KzahFSgbI1tnYkcltOUuSvzI=)
2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: b6t9LnCj1f0zja3FbeaP+cXo8GTHFts/U1I2ZnCZkfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:12:c0:22:4f:1e:0e:e1:06:25:ce:f6:7f:34:6f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Validity
Not Before: Jun 30 23:01:15 2025 GMT
Not After : Jul 1 23:01:15 2025 GMT
Subject: CN=8db258004258f1e300abe4d26c76a6a5a5539003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:c9:c6:13:0a:c8:c6:47:81:89:9c:c2:25:
d4:fd:a2:3c:bc:46:56:26:79:1d:44:8c:1a:87:05:
a5:40:5f:32:d2:e9:c6:57:8d:1f:c1:eb:a5:0c:c5:
a9:19:53:97:c1:ae:f8:47:1b:2a:b7:d0:5f:31:eb:
ff:ca:a2:8f:98:8b:92:c0:16:d3:a9:84:51:1b:83:
6a:d3:17:db:d1:c2:f1:6d:91:89:bf:c8:ea:20:4f:
64:1d:09:a0:42:a3:cf:30:fc:34:12:67:1f:3f:7b:
70:9d:17:1e:51:77:ba:04:8a:63:2c:f1:c8:85:fb:
5c:14:5b:20:27:c7:be:ae:61:6a:7d:22:d7:4d:8c:
c9:f1:ee:76:7b:37:7f:2f:93:a6:80:d5:bb:70:cd:
15:42:15:49:3e:1b:fd:39:0a:18:b0:c0:78:a1:25:
bf:d4:3e:76:af:f4:1c:98:f2:03:63:3b:87:b8:26:
73:c4:a0:5b:a4:99:67:e3:83:bd:73:85:95:73:88:
7b:b8:28:4a:b0:f4:bd:0f:54:94:1e:b0:62:9f:4e:
bd:41:30:00:02:0f:a3:64:7d:00:c8:b7:6f:36:0e:
ba:3c:bb:cb:80:9a:da:06:b4:28:e0:47:73:b9:a5:
60:65:e4:56:e2:5c:5e:85:e0:b9:e0:65:be:1f:ba:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B2:58:00:42:58:F1:E3:00:AB:E4:D2:6C:76:A6:A5:A5:53:90:03
X509v3 Authority Key Identifier:
keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:68:c8:47:02:fe:4a:a1:47:96:eb:52:8a:c9:58:57:87:80:
ef:92:ab:20:66:68:50:00:df:67:d4:ff:9c:c0:00:12:39:d4:
eb:51:04:10:af:9b:12:6e:be:39:7f:9c:87:02:67:5b:8e:f9:
b8:7f:b0:45:1d:8e:8a:01:03:59:7b:c5:57:33:6e:cc:05:30:
8f:93:4a:94:61:a4:5f:6b:57:ba:48:63:68:f2:87:a9:9b:c8:
6f:4f:4d:04:ba:02:19:1e:ab:fd:7c:28:03:08:31:4b:61:89:
95:db:4e:b2:b8:c4:ac:b5:28:b8:ba:75:5f:ed:f6:f0:12:bf:
43:7f:e9:53:eb:7b:49:48:71:b5:2a:2d:a9:b7:44:3d:ba:54:
bc:86:38:0b:37:70:ce:de:26:8e:f2:e6:2a:4f:94:41:4a:ba:
ec:32:66:8b:fe:82:b1:a9:51:d4:cd:f9:6c:df:ce:09:90:6b:
3b:f5:18:23:cf:d4:33:cd:44:25:63:80:bd:3d:15:d5:73:29:
9d:ec:4b:d4:17:45:88:75:40:06:64:fd:22:25:f2:1b:fc:ed:
c7:a8:90:2f:29:c8:f2:7b:ce:58:bf:91:0a:da:24:a4:a2:78:
0f:60:48:73:5d:31:57:3f:dd:53:28:db:c6:03:de:6f:cc:a4:
0e:6a:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:10:35 2025 by rpki-client