Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: B5Yf9ZkHnZSOjxWzil+J26naCOi77NGYQ0gjME8lQM8=
Subject key identifier: ED:14:6C:7F:9C:66:76:94:E1:1B:52:48:8C:A3:B4:5D:15:4C:8F:99
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 0199FCFD6499FF898EB7C4E141B0D9D8B77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 07BD
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: 3ZngFvUJlKlQIHDx3LKn+/kZ4FoX17mypM10FZ06qrI=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:64:99:ff:89:8e:b7:c4:e1:41:b0:d9:d8:b7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=ed146c7f9c667694e11b52488ca3b45d154c8f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:9e:c8:1b:4c:c3:4f:fa:5d:c2:3b:b5:89:
e6:9d:8f:a1:dc:fd:5b:61:12:e1:28:3a:d2:19:ec:
fb:25:0a:bd:9a:c7:7c:26:68:58:4b:eb:c5:af:6f:
7d:bf:29:87:b4:48:6e:d7:bf:a3:0b:9f:0c:ed:dd:
39:24:35:2f:c9:33:48:af:37:54:4a:81:0a:82:71:
c3:ca:51:8f:03:0d:b4:fb:89:91:73:f9:8b:e1:2f:
c8:ac:a0:96:8d:f8:df:d8:e7:71:46:37:6c:13:93:
e8:b4:fa:99:37:96:29:3f:53:3e:1d:6e:16:99:82:
c0:23:a4:78:35:6f:60:d2:9b:dc:49:31:51:b3:83:
73:09:30:ca:27:87:2a:77:82:e7:24:b8:b7:71:4a:
ff:a9:f6:a1:b9:a0:61:7e:34:fa:85:56:ab:c2:3d:
5d:90:f9:5d:ec:af:27:11:fb:32:9a:f0:8f:3c:43:
06:4d:aa:7c:c7:5c:46:06:27:3d:f2:a6:5e:35:f6:
ad:ae:5c:88:9a:bd:15:a9:16:ae:7f:04:54:4a:80:
87:ce:af:e2:88:d4:19:33:a7:a6:96:6a:e5:3e:ff:
7c:2a:54:ba:9f:35:68:6f:f5:14:b4:e5:a7:ab:40:
fe:49:75:6f:f0:9d:91:1e:be:a8:70:44:54:33:23:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:14:6C:7F:9C:66:76:94:E1:1B:52:48:8C:A3:B4:5D:15:4C:8F:99
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e9:b0:f1:ab:c3:d3:3f:4d:39:6d:40:eb:f2:1d:b8:e4:16:
5f:16:f3:97:76:ae:9d:e5:c8:b6:59:f2:e2:76:ae:e1:20:c9:
7b:25:ba:26:7d:8c:a9:f9:14:a4:70:e9:ab:47:75:cc:f5:60:
7e:94:85:b7:18:da:98:71:35:36:2f:53:b5:d9:8b:e8:8d:82:
c0:47:4e:f4:54:a9:7e:fb:9a:a4:9b:9e:23:14:18:55:de:26:
40:fd:db:88:d8:7b:28:8d:c7:17:3f:f8:ef:1b:df:a9:3f:06:
e1:70:b5:25:db:18:7a:35:6a:08:70:56:27:53:63:50:86:0f:
13:91:37:e9:10:e3:ad:a1:38:be:64:2f:ae:65:39:d8:ce:bc:
8b:d5:89:c7:ea:b4:35:51:ee:be:7f:7e:80:27:00:cb:f1:a9:
fc:5a:65:d9:d4:2f:4e:8f:f5:28:e9:7f:ce:ee:a2:00:5a:bf:
bb:fb:b4:0e:ba:0e:5f:69:24:33:78:07:c4:4a:ec:0e:20:f9:
ba:a3:46:26:ea:83:c7:24:44:21:0f:c1:62:ad:20:97:2b:42:
92:4d:3c:d3:cb:5f:c3:4f:65:c7:1b:99:24:c2:96:aa:38:a8:
5a:f5:a9:0c:e3:dc:82:ae:5a:52:1f:36:7e:bd:e3:bd:47:28:
e1:7a:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:44 2025 by rpki-client