Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: jR870KzyBE1huzwqVq3JIhCbGChUN5M2Fud+tKR3rnw=
Subject key identifier: A7:F0:82:63:9F:48:4D:13:99:50:BD:78:3A:31:A8:25:66:23:76:41
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 0198D54E306453408239B6F1FA25CF6BCD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 0FA7
Signing time: Sat 23 Aug 2025 05:02:07 +0000
Manifest this update: Sat 23 Aug 2025 05:02:07 +0000
Manifest next update: Sun 24 Aug 2025 05:02:07 +0000
Files and hashes: 1: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: 7f+dNZh0//VBQY933wSSQBiJRFADtjYaxm1Iep/nHNk=)
2: MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa (hash: ImO4oBWkVF+Qx8bpwB2w2UPJr50EG7WrYl+YWVWzFfk=)
3: q6mDakXCczwOucfjGR_MCayBN00.roa (hash: WHAyxlbQLqyJ/G0nYhz0U1oY3c2QkU4OXH4il3FpXbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:30:64:53:40:82:39:b6:f1:fa:25:cf:6b:cd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Aug 23 05:02:07 2025 GMT
Not After : Aug 24 05:02:07 2025 GMT
Subject: CN=a7f082639f484d139950bd783a31a82566237641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0f:72:db:7c:c1:05:56:b5:46:54:b3:fb:17:
91:4e:99:94:46:aa:48:51:db:52:fd:bf:51:78:45:
e5:8d:98:5c:69:4e:8b:cb:b8:4c:cd:4a:77:87:a6:
be:52:53:c9:b9:36:02:0d:90:2c:ca:e8:0a:91:eb:
5c:34:4e:20:f9:a9:6d:36:dd:6b:09:ff:9d:3c:04:
88:90:79:a6:7b:f5:56:e5:ce:00:b2:99:1d:14:8a:
48:ec:34:cb:d3:ab:c1:f0:51:ae:3c:ce:f5:07:9f:
e5:76:d8:ec:43:8b:d9:5a:6c:58:76:a0:e2:70:35:
46:35:bf:2f:61:0d:8a:02:44:c4:da:cf:e1:d7:18:
6a:93:e2:57:57:d9:2c:04:1f:f1:97:eb:a6:9f:65:
d3:e0:60:cd:8b:f7:3d:e4:74:c8:56:47:27:dc:9b:
7f:93:7f:fe:79:3a:ef:84:50:fe:76:78:20:e3:b8:
2d:ae:2d:a8:30:30:42:b7:fb:ec:d6:0b:73:55:30:
f6:3c:25:02:b7:2f:02:b4:11:24:cd:6c:0a:b5:ce:
66:4a:cc:81:53:c8:f3:c6:f5:16:02:03:c3:27:de:
a6:d3:90:41:3a:ed:3a:8d:6e:eb:d6:a2:19:db:35:
46:02:a1:03:97:4f:09:4c:09:7a:28:f2:2e:14:0e:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:82:63:9F:48:4D:13:99:50:BD:78:3A:31:A8:25:66:23:76:41
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c7:28:13:ed:f8:65:5d:1e:25:7e:aa:c4:41:bd:34:d7:c8:
24:4e:62:a6:ff:1d:25:00:1b:a3:6c:2d:92:a9:43:9e:6a:20:
30:f7:f5:a3:f4:e6:b1:fc:65:47:6f:5a:d1:04:a5:7b:b7:66:
1b:d9:74:29:b3:18:84:4a:fa:4d:ac:b5:5e:78:5e:3f:df:3d:
de:70:ac:f4:2c:30:33:39:cf:81:06:31:c4:bf:cc:17:71:fd:
98:46:b6:49:05:09:2e:3a:bc:10:52:c8:fd:52:4c:e4:60:a3:
7c:65:4a:51:a2:eb:23:1b:e8:f8:c6:a0:0c:32:75:bd:73:ff:
b9:bf:f5:82:f1:b3:72:79:7b:00:95:b8:84:28:d4:64:fc:67:
7f:f3:05:f5:6b:48:91:d8:2e:80:26:10:2a:9d:ff:3d:bc:89:
0e:98:9a:c6:3f:89:aa:55:01:48:9e:3f:e0:c8:e2:2e:ba:36:
a7:e2:b6:c8:8f:1a:3d:cd:72:ea:db:3b:21:1e:ed:06:64:8a:
a2:db:7a:65:35:9b:fe:1f:97:88:93:78:5d:26:c5:fb:03:f1:
2a:97:44:f4:d3:23:32:79:d9:bb:70:3e:66:db:af:f0:95:25:
71:6b:dc:f6:f6:08:9a:f3:ac:ed:86:8d:5f:bb:bc:ba:df:1b:
ec:29:2b:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjBkU0CCObbx+iXPa80aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNmExNDEzY2M4OTY1ZWU5MjQxNmI2MDU5ZjkwYjE4Nzc4
YzhiMzgwHhcNMjUwODIzMDUwMjA3WhcNMjUwODI0MDUwMjA3WjAzMTEwLwYDVQQD
EyhhN2YwODI2MzlmNDg0ZDEzOTk1MGJkNzgzYTMxYTgyNTY2MjM3NjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g9y23zBBVa1RlSz+xeRTpmURqpI
UdtS/b9ReEXljZhcaU6Ly7hMzUp3h6a+UlPJuTYCDZAsyugKketcNE4g+altNt1r
Cf+dPASIkHmme/VW5c4AspkdFIpI7DTL06vB8FGuPM71B5/ldtjsQ4vZWmxYdqDi
cDVGNb8vYQ2KAkTE2s/h1xhqk+JXV9ksBB/xl+umn2XT4GDNi/c95HTIVkcn3Jt/
k3/+eTrvhFD+dngg47gtri2oMDBCt/vs1gtzVTD2PCUCty8CtBEkzWwKtc5mSsyB
U8jzxvUWAgPDJ96m05BBOu06jW7r1qIZ2zVGAqEDl08JTAl6KPIuFA53gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfwgmOfSE0TmVC9eDoxqCVmI3ZBMB8GA1UdIwQY
MBaAFBpqFBPMiWXukkFrYFn5Cxh3jIs4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2Ut
ODJjMDg1YTkyNzc3LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC81OWE0M2YtODgxYS00OGVkLTljM2UtODJjMDg1YTkyNzc3
LzEvR21vVUU4eUpaZTZTUVd0Z1dma0xHSGVNaXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmscoE+34
ZV0eJX6qxEG9NNfIJE5ipv8dJQAbo2wtkqlDnmogMPf1o/TmsfxlR29a0QSle7dm
G9l0KbMYhEr6Tay1XnheP9893nCs9CwwMznPgQYxxL/MF3H9mEa2SQUJLjq8EFLI
/VJM5GCjfGVKUaLrIxvo+MagDDJ1vXP/ub/1gvGzcnl7AJW4hCjUZPxnf/MF9WtI
kdgugCYQKp3/PbyJDpiaxj+JqlUBSJ4/4MjiLro2p+K2yI8aPc1y6ts7IR7tBmSK
ott6ZTWb/h+XiJN4XSbF+wPxKpdE9NMjMnnZu3A+Ztuv8JUlcWvc9vYImvOs7YaN
X7u8ut8b7CkrHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:35 2025 by rpki-client