Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: lAbJQJOYiL5lUH5LjLYwnu4ownCYc+RojgJR5PViQQc=
Subject key identifier: 5F:81:B1:2A:08:FD:5F:9A:DC:12:B6:13:61:AD:C1:18:3B:1F:A2:AB
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 0198D6614F101F3321F1F5286C044E6296ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:38 +0000
Manifest this update: Sat 23 Aug 2025 10:02:38 +0000
Manifest next update: Sun 24 Aug 2025 10:02:38 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: wPJWZ9XkyavSAVEipAm3OXRYv2t1iezsW81bUZ0suic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4f:10:1f:33:21:f1:f5:28:6c:04:4e:62:96:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Aug 23 10:02:38 2025 GMT
Not After : Aug 24 10:02:38 2025 GMT
Subject: CN=5f81b12a08fd5f9adc12b61361adc1183b1fa2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:8c:98:ef:27:62:73:28:6f:7f:6d:83:57:
7e:fc:ae:18:34:e0:b7:6d:18:1c:a5:df:8a:29:e1:
e0:5b:94:ab:8b:a8:5f:cf:e4:ed:8d:9f:d3:f7:f0:
dc:c3:18:f4:0b:52:49:48:d6:2e:fa:2b:7f:18:d3:
87:8f:0e:5c:63:cb:ea:1d:e0:28:62:25:8a:2f:f1:
14:6a:2d:52:44:14:97:ef:8e:23:10:0d:15:ae:1e:
d5:0e:2e:19:c9:1a:63:30:45:22:02:67:a8:af:4a:
e3:f0:50:d0:56:1a:ab:7a:62:09:8f:b3:d7:18:e4:
58:8a:da:a8:61:61:74:16:7c:16:49:91:ce:a5:93:
56:f4:0d:41:f4:20:0d:41:d8:7d:07:43:48:1f:56:
a5:0e:39:ff:48:9b:1b:dc:03:e9:a4:91:23:93:da:
da:33:5f:ef:16:dd:35:2f:3e:16:d6:95:6b:0d:3b:
6b:53:ad:96:a8:2d:26:d0:f2:92:fa:d7:d2:ea:22:
b7:59:0c:3a:b8:44:7d:4f:04:c0:2f:52:5c:85:03:
86:dd:67:6f:0b:44:7d:dc:02:86:23:a5:85:75:12:
f3:13:5f:9a:45:71:66:a7:33:2a:91:87:8c:cf:77:
75:cc:07:fc:79:a6:a2:27:45:cb:68:9d:b0:80:a2:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:B1:2A:08:FD:5F:9A:DC:12:B6:13:61:AD:C1:18:3B:1F:A2:AB
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4e:01:1f:50:92:c3:aa:ff:0b:db:37:10:8a:d9:e2:ad:2a:
b8:9c:c0:fd:c5:9c:3a:44:26:d3:a9:87:2d:2d:75:df:ab:cd:
11:1d:6f:ca:5a:5d:9f:cd:8b:7e:c1:f8:47:f0:a1:f6:cd:9a:
af:98:83:a4:b7:c7:ed:67:9d:2b:89:70:25:cd:f8:25:f5:17:
97:de:2f:4c:ce:18:51:3d:03:f7:e0:4a:3b:72:1b:7e:92:f9:
07:2f:24:6c:f8:df:e1:38:63:43:f9:10:87:68:11:49:f0:2e:
90:51:12:66:0d:3d:65:83:ea:15:8c:3b:ad:b0:b5:ef:11:05:
95:b3:52:66:26:df:e1:fb:b8:f6:21:40:eb:f4:d4:1b:0b:8c:
ae:a1:47:90:1d:af:cc:92:d3:64:d7:17:77:ad:a7:bd:6f:8d:
cf:c2:f2:ba:03:e0:41:8a:54:39:59:f3:3f:27:39:b5:54:2f:
fb:08:af:cd:35:c9:1a:ab:8b:1e:40:1e:40:8c:73:58:3e:d3:
c5:e3:ab:6f:f3:25:c7:c9:f0:fb:93:6e:8b:af:ce:24:41:37:
71:09:ce:a9:d1:3b:57:e2:a8:4c:72:5e:15:0e:ad:24:af:61:
eb:70:dc:33:2a:dc:db:d8:66:1e:5f:1f:df:65:20:5a:89:9f:
a9:58:18:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:28:03 2025 by rpki-client