Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
File: GtXRdMu0aq-GVVuA4XczMbhwtWg.mft (raw, json)
Hash identifier: F4C5VNdplmO7A1GLzEI6icsdHTk3mZOhMc1RlnWCQLI=
Subject key identifier: 0C:D0:0C:93:13:0B:FE:96:4F:BA:47:4A:B0:37:DE:28:27:2E:98:8C
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Certificate issuer: /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial: 0198D73B25AAB1AE40C841695AD3110BFC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
Manifest number: 0505
Signing time: Sat 23 Aug 2025 14:00:34 +0000
Manifest this update: Sat 23 Aug 2025 14:00:34 +0000
Manifest next update: Sun 24 Aug 2025 14:00:34 +0000
Files and hashes: 1: 9dcg4kop7SgWnE6_RqxuTw6E4S0.roa (hash: 0Gyw3aRec61kP8ssDusbhrk3Tfc+FxYebdPIc+4lPH0=)
2: BCx9uHR447EqnUAT6LDXDmc-U64.roa (hash: uKePdL/bKCVHy8Q2jDMnzQQFWnYFjJHWmlJeT5g86S8=)
3: GtXRdMu0aq-GVVuA4XczMbhwtWg.crl (hash: 4zddvBgJh6BzgoOJD/wbQsumfCQuWhWq1WCqrPJFz/A=)
4: XUhnIv1VyzEH-O2IlJPEOJmVv7s.roa (hash: ia3ApPA9xBWk3etwJmYP71gyRoYwwrPnhqVB0ZSnJZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:25:aa:b1:ae:40:c8:41:69:5a:d3:11:0b:fc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Validity
Not Before: Aug 23 14:00:34 2025 GMT
Not After : Aug 24 14:00:34 2025 GMT
Subject: CN=0cd00c93130bfe964fba474ab037de28272e988c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:1e:24:fc:b8:9f:59:8c:a9:8a:fc:01:da:
d0:2d:2b:ce:50:e9:ec:43:91:16:5e:6a:e1:02:46:
d3:b9:d3:ed:f9:b9:5a:17:11:bf:ed:dd:e9:ae:82:
aa:cb:c3:f1:20:da:51:a3:72:9f:e9:6b:65:17:14:
fb:d3:8b:8b:b0:7f:b2:2a:db:bc:57:39:75:6f:6b:
14:c5:2b:6a:df:82:97:ce:1e:ab:37:86:fb:42:e3:
c4:a3:66:90:86:0a:74:5c:46:3f:6f:98:88:a6:f3:
c4:cb:03:6c:40:68:21:af:70:ff:87:c9:15:db:dc:
e8:a0:a5:cb:34:e9:b3:b1:b9:7f:3b:16:97:5e:99:
40:80:63:d7:8c:cd:bb:4e:00:78:97:fe:9d:7c:8f:
27:b4:e2:00:d7:26:46:37:3b:84:7b:88:82:bc:5a:
41:33:f6:e4:87:d8:66:0a:52:29:b3:9c:30:2d:52:
64:63:df:a5:d2:44:44:6f:c6:c5:6b:aa:49:b4:36:
e6:f8:06:45:42:b6:37:ce:73:3d:e7:3d:2e:c0:60:
cc:6c:b7:62:a3:86:d2:48:fa:a2:a2:b4:62:98:58:
55:57:2a:84:a2:a3:ea:ff:19:a3:10:05:32:76:80:
d2:9d:ac:3b:88:df:8e:4e:c7:1e:88:ae:6b:ce:7d:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:0C:93:13:0B:FE:96:4F:BA:47:4A:B0:37:DE:28:27:2E:98:8C
X509v3 Authority Key Identifier:
keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:b2:83:4c:0d:da:54:3f:76:7f:d3:f1:c4:69:98:67:6b:
90:b3:1f:a3:b4:a8:b7:d8:34:81:29:1f:2e:d0:65:19:ea:44:
16:f3:88:c9:04:ca:b9:fa:e1:c5:58:9b:4f:4b:c3:ba:13:bc:
96:38:eb:f2:4f:95:0a:56:12:7f:4e:81:99:f5:35:21:6d:94:
c5:0c:fd:57:8a:b3:bf:bf:3d:01:24:2b:a5:4c:38:eb:57:46:
9b:6d:49:58:79:cc:75:b5:5e:26:cd:8b:77:4f:22:bc:9a:04:
c1:13:0b:b6:f5:75:67:b9:40:0e:b4:74:df:0f:62:15:b8:9b:
7f:86:10:d5:01:3b:bb:62:2e:22:a2:23:1e:e0:c2:a2:fe:00:
58:70:a7:07:f7:96:b9:5f:ba:68:53:fc:64:43:5b:14:89:a7:
02:31:17:6a:03:8e:c6:07:95:09:ce:ac:43:7a:71:ff:ee:75:
d1:a0:ba:1c:05:04:87:10:f6:7a:ce:88:ec:73:ef:b2:ae:b4:
83:38:ee:16:3b:69:03:1c:2f:db:72:29:55:1e:ee:7a:5d:4a:
eb:5d:60:b0:27:ee:47:ac:44:73:f5:24:0b:d5:25:82:42:37:
5c:21:e2:93:18:f9:4b:7d:94:00:53:7e:aa:1a:40:36:c2:91:
bb:6d:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:58 2025 by rpki-client