Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
File: gCNZN6302riSXVgEWjNxgWyYBTE.mft (raw, json)
Hash identifier: anvuSOJcG8yMetKvjSarL8R2H7I4olInhDyv3aQLueI=
Subject key identifier: D1:39:B4:A7:0D:AA:C2:81:64:13:80:FA:4F:B1:53:B6:D5:90:3F:86
Authority key identifier: 80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
Certificate issuer: /CN=80235937adf4dab8925d58045a3371816c980531
Certificate serial: 0198D40482E3DD7ED8293AC9501485FF6A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
Manifest number: 082D
Signing time: Fri 22 Aug 2025 23:02:02 +0000
Manifest this update: Fri 22 Aug 2025 23:02:02 +0000
Manifest next update: Sat 23 Aug 2025 23:02:02 +0000
Files and hashes: 1: gCNZN6302riSXVgEWjNxgWyYBTE.crl (hash: kzp0Yr+XDm8t0anzQXKql8Nn7URZ6oAaiVcrVRHZlbU=)
2: xGfGnzNZn4HUZigqa5Ok1nkmfsE.roa (hash: XpFkMfmlY0imCtGtKPRW/lTcymGc5XbfGzDPyUvzl8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:82:e3:dd:7e:d8:29:3a:c9:50:14:85:ff:6a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80235937adf4dab8925d58045a3371816c980531
Validity
Not Before: Aug 22 23:02:02 2025 GMT
Not After : Aug 23 23:02:02 2025 GMT
Subject: CN=d139b4a70daac281641380fa4fb153b6d5903f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:de:4b:b0:77:cf:5b:4e:7c:3b:68:a3:25:
5d:41:37:8c:73:54:25:3b:30:f6:6a:18:23:7e:db:
49:fe:d5:dd:0b:af:b2:c0:9c:be:bd:de:1f:33:bf:
c5:0e:2a:b7:98:09:ab:2b:65:2e:79:04:42:43:06:
1f:44:48:c7:62:01:46:8e:31:cf:df:6a:83:60:f7:
b3:c8:d2:9b:3a:1e:aa:aa:cc:c0:c6:bd:66:12:df:
e7:83:d4:35:e9:53:61:c9:94:fc:a4:36:d6:a7:83:
c6:6f:3a:bd:b3:12:16:11:cc:62:b3:5e:4f:b4:08:
07:54:2a:f3:5f:4c:82:46:3e:bf:da:36:c6:da:9b:
41:31:66:e2:a2:40:1f:e6:8d:bf:b5:16:6a:27:dc:
f8:15:a7:67:c6:ee:dd:94:cd:72:49:67:f2:28:20:
82:32:17:02:81:96:e0:24:06:67:a7:c0:da:12:8f:
78:7a:47:c7:18:8a:63:da:38:ea:f5:45:e5:6b:d8:
69:19:8e:2e:78:cf:4f:03:7a:78:f3:79:0f:e6:9f:
15:c9:91:13:a1:8c:b5:b6:98:d2:ae:0a:4c:d3:a4:
2c:fc:2f:c5:c5:48:20:43:b3:a9:95:80:2c:3a:74:
fb:f0:3f:cb:9b:a7:ff:74:5a:3a:e5:3d:18:d2:fb:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:B4:A7:0D:AA:C2:81:64:13:80:FA:4F:B1:53:B6:D5:90:3F:86
X509v3 Authority Key Identifier:
keyid:80:23:59:37:AD:F4:DA:B8:92:5D:58:04:5A:33:71:81:6C:98:05:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCNZN6302riSXVgEWjNxgWyYBTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f62382-99dd-47d4-8de4-1fe6912f8e7e/1/gCNZN6302riSXVgEWjNxgWyYBTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6a:96:40:ae:88:23:e3:06:c0:d0:8d:72:33:e3:3e:1b:e3:
00:0a:35:e7:79:97:52:25:b4:10:05:0a:96:f0:fe:46:b2:98:
5a:9a:f7:d1:24:34:71:4a:97:de:4e:08:8c:37:d4:28:d6:f5:
a9:0d:c5:e6:16:e6:5a:de:bf:c5:ec:8d:e6:9b:59:a4:e1:02:
14:cd:a8:78:87:06:d2:55:bd:79:a2:ca:27:79:6e:af:98:6d:
9e:0d:af:9c:f9:53:2d:6d:71:36:79:cf:76:64:de:0e:41:03:
5b:c0:7a:93:e0:81:45:f0:e4:6c:a0:50:0f:da:2b:0f:e5:76:
9e:46:e1:52:ec:87:40:50:2f:40:13:42:a3:d8:64:27:94:c9:
1a:87:32:39:2b:05:47:f0:a1:e5:c6:99:67:ad:cc:12:2b:37:
ac:01:a9:c7:15:82:f8:b9:45:68:4a:29:d8:e5:a4:69:7a:9b:
44:42:41:d9:6a:5d:7e:f0:5b:dd:85:d8:e6:50:02:ec:f9:c2:
2a:04:b4:4d:4f:90:48:89:48:8a:87:d8:df:3b:95:4c:f1:17:
07:fd:24:6b:97:10:2e:82:34:ca:7b:3a:99:d5:fe:a3:41:f6:
f7:09:0f:f5:ca:ef:0b:a7:33:2d:a4:1c:76:b2:07:4f:5f:c6:
92:a8:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:22 2025 by rpki-client