Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File: gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier: 7aZ2BAmPYMDEw7V0jJMf3vCR64qkosf2mK8w+0c/ZXk=
Subject key identifier: CA:03:D0:59:F3:F8:F4:6F:D0:37:3E:1C:23:FD:04:36:F0:B3:70:7D
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial: 0198D5F14348FB2700E394AD1105D289C2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number: 055D
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: ZiyZdvBOQNbIrEZCS1F3xRb48rcUJrMCgXdWDewx5gI=)
2: kwCip9bpks_MxIN5r8NE5b6pcCA.roa (hash: ZeSOKj/aYYMZXd7Dug4q1iZDEoHYeGkqnVSfcCaU2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:43:48:fb:27:00:e3:94:ad:11:05:d2:89:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=ca03d059f3f8f46fd0373e1c23fd0436f0b3707d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:1f:d8:e8:be:be:00:cd:d4:62:61:42:cb:
66:fb:6a:00:57:8f:c7:3a:ce:f5:f0:52:95:84:3e:
57:a0:09:eb:c0:1f:12:b2:eb:c0:cc:e2:e6:b5:31:
54:56:b4:aa:92:f4:89:5d:34:af:55:dc:7f:ab:0d:
52:95:d5:29:87:1e:1b:44:8e:7f:c7:d1:7d:87:f3:
71:e1:82:86:c3:ab:2a:81:0e:c2:d5:dd:11:6e:75:
b4:95:03:f3:2f:9f:87:ed:8d:5f:2d:bb:0a:05:18:
e6:a2:df:b1:db:8d:db:91:fe:1f:6f:fe:81:3b:64:
7a:ff:9d:45:8b:7c:8a:57:a0:1c:21:64:8e:d1:0f:
40:b3:e6:b9:e9:db:84:b3:09:38:36:6a:5e:f5:80:
ee:f4:77:df:6b:3d:3b:b2:5d:3f:60:cf:bb:a6:c4:
ec:3b:b6:9f:66:b6:31:1d:66:c6:94:4f:84:de:4a:
db:4a:b3:a9:77:2d:5d:f3:e6:13:a6:13:4f:88:1b:
e6:62:81:d8:49:5a:6c:03:4e:fd:5c:b4:a9:ef:0d:
d6:a5:f9:0c:9d:f5:30:ab:30:e6:e9:b1:2e:4b:3a:
a5:3e:c8:4d:89:8c:71:72:94:ff:03:27:a7:33:bb:
10:7b:c5:21:fb:71:80:92:30:dd:e2:14:67:be:f9:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:D0:59:F3:F8:F4:6F:D0:37:3E:1C:23:FD:04:36:F0:B3:70:7D
X509v3 Authority Key Identifier:
keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8f:c0:c0:bc:2c:5b:c0:6d:a7:10:98:6c:28:66:a1:18:5b:
f6:38:cb:1b:f2:96:13:a2:cd:8a:a6:a2:0a:8c:be:c0:2e:45:
08:c4:e7:ff:fc:5b:d9:ec:61:29:82:75:f9:7a:63:27:05:62:
67:42:56:13:90:a5:7f:0e:72:fe:bc:2a:7b:45:74:32:8d:23:
ca:1f:fe:1d:b0:5f:d1:1a:b6:1b:75:d5:f2:64:eb:0c:6b:54:
fb:13:87:8d:dc:5a:23:44:3e:09:07:ae:83:70:c4:ed:8e:17:
2f:e1:b4:c4:26:1f:eb:ed:14:01:5f:7c:60:17:af:58:51:13:
66:cc:45:9a:f2:20:da:d6:28:c3:e0:ef:a1:aa:e6:74:ff:8b:
bb:cd:ff:b1:b2:41:df:ad:35:bb:ab:b9:a1:57:d4:fa:bc:bd:
71:7d:ff:a9:f6:8b:36:97:5c:47:8d:b1:16:e0:c9:f7:b3:f5:
f9:5a:be:d8:cd:cc:0e:7e:ce:b4:99:68:13:16:6f:af:b8:97:
ed:1d:95:8f:b1:31:64:8f:d9:8f:eb:d0:c2:38:88:f0:1c:a1:
3e:c8:aa:ff:48:bd:e9:fb:63:ac:49:fd:99:58:f8:a5:51:9a:
86:7f:83:92:73:65:be:cb:ff:d0:24:d2:5f:c6:15:6a:b0:4c:
59:cf:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:36 2025 by rpki-client