Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: UyOYHFFrqbPZV01ZL6o+tbYVhNAy9nCF8K2csGCuImw=
Subject key identifier: 77:1B:66:51:B1:F4:0F:1F:8B:E8:E6:84:45:ED:7C:98:C6:94:7F:5D
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 0198D7E0F6B1379B1BDCDAD3136303D0639B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0F84
Signing time: Sat 23 Aug 2025 17:01:41 +0000
Manifest this update: Sat 23 Aug 2025 17:01:41 +0000
Manifest next update: Sun 24 Aug 2025 17:01:41 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: GxuDxuG2oUNvalqigRhqna8Z+XTDI5NF2yg4b5MEwPQ=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:f6:b1:37:9b:1b:dc:da:d3:13:63:03:d0:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Aug 23 17:01:41 2025 GMT
Not After : Aug 24 17:01:41 2025 GMT
Subject: CN=771b6651b1f40f1f8be8e68445ed7c98c6947f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:02:51:83:ea:e0:c1:91:3e:be:06:e2:f2:
46:52:a1:74:42:41:5c:09:3e:6e:87:7a:42:91:46:
69:29:38:2d:5a:6c:39:94:21:31:99:ff:bf:29:c8:
27:da:36:6c:75:34:09:13:f2:69:ac:60:67:0d:43:
59:0f:03:ff:fe:0a:1f:9a:3b:b3:f8:22:c3:e0:37:
66:c8:70:5d:7a:d8:73:02:38:42:85:36:bc:ff:cd:
ba:77:e4:c7:88:a2:e6:37:d7:9d:42:a5:3b:d6:8c:
9f:fa:7c:d3:94:af:cb:25:c3:9f:18:18:83:64:6d:
1e:98:8d:0c:fe:2a:a7:79:e8:05:83:ee:df:22:2e:
8b:ff:c8:d5:46:14:b8:6e:98:68:57:c4:18:82:a6:
e1:75:9b:7f:f3:12:39:99:42:54:a4:be:c6:09:c7:
20:57:84:13:70:c1:9d:20:fc:30:58:d6:4d:48:c6:
24:84:8b:14:da:e9:14:e4:59:56:18:e3:67:72:e3:
77:0e:4b:0b:3b:ac:94:a7:68:0d:77:f7:22:3a:8b:
c8:77:9f:70:cd:91:d9:5f:c9:48:e6:11:e3:08:aa:
bd:4e:96:63:79:d9:85:57:cb:8c:45:92:5a:53:18:
39:ef:3e:57:3d:fe:b6:a4:6f:da:a1:24:d5:1b:26:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1B:66:51:B1:F4:0F:1F:8B:E8:E6:84:45:ED:7C:98:C6:94:7F:5D
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:68:ae:3e:1e:6c:56:40:ff:90:d0:6b:61:ee:ed:68:b7:34:
41:30:75:8a:8d:1f:21:df:09:a7:aa:4b:e2:25:a4:8f:81:5b:
c3:d4:f6:86:ad:af:95:46:66:13:f8:15:ec:55:7f:29:1f:20:
b7:41:15:4b:c7:da:bf:15:6e:97:40:28:c7:bd:3f:4f:79:17:
97:4c:a3:ea:64:97:d5:27:6d:f4:7e:0e:eb:6e:e3:ea:cd:82:
be:93:a0:ed:d2:2d:96:5f:53:3a:b2:8f:8f:dd:45:4c:71:e0:
12:6f:bc:33:32:a2:10:6d:94:4c:bc:ef:7c:3e:e2:f0:be:15:
c6:d0:2d:3b:59:72:68:82:32:ae:43:a7:34:a1:85:5b:ff:8b:
58:33:89:5d:60:46:2b:0c:80:bb:1a:2a:a9:31:28:16:2d:1b:
75:d6:c9:3e:b1:c6:86:05:8e:a1:dc:b2:d5:f0:22:1b:b5:14:
5b:bf:80:3a:68:08:38:e2:70:e4:f4:03:87:64:2e:5b:d3:79:
99:4c:ac:1c:36:b2:15:30:6f:2e:3c:34:02:11:e0:37:e3:c0:
d7:23:0c:92:e4:4c:b8:53:13:8e:68:3a:cc:f6:ad:9a:e4:29:
b7:67:e5:ab:b7:db:0d:f0:de:0e:7f:54:18:f6:04:d0:51:24:
6c:a0:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:56 2025 by rpki-client