Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: YNoqXM/JXCNleHx+BTx5lhgmLx6kBORbmbp/8o7cklA=
Subject key identifier: 75:65:20:FD:8F:F6:3F:81:5F:86:03:3F:42:13:A6:90:04:61:16:71
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 0197B70E7026EDF3596BAF00592C957915DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 0900
Signing time: Sat 28 Jun 2025 15:01:05 +0000
Manifest this update: Sat 28 Jun 2025 15:01:05 +0000
Manifest next update: Sun 29 Jun 2025 15:01:05 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: qkuwOuFCQmSGfmDvNeHWI+1jHcb33GtfrkHl7EAp6/k=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:70:26:ed:f3:59:6b:af:00:59:2c:95:79:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Jun 28 15:01:05 2025 GMT
Not After : Jun 29 15:01:05 2025 GMT
Subject: CN=756520fd8ff63f815f86033f4213a69004611671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:85:a8:4c:1c:83:4d:5e:a3:e5:9c:b8:91:
0c:14:7f:9e:d7:01:0e:df:4c:f8:1b:4a:91:86:76:
d3:7f:ce:ee:1e:8f:42:3a:d2:db:44:f1:3e:c6:32:
be:39:2f:20:18:8f:7b:52:55:c1:d8:08:67:d4:85:
99:af:75:91:5e:04:14:cd:13:75:d0:85:6d:19:97:
23:55:80:89:66:71:e5:1b:66:a1:52:a0:e1:e5:f2:
bf:4e:55:70:31:71:91:3e:27:22:c9:26:ad:29:da:
99:3b:8d:60:16:f7:fe:5e:93:b5:3d:4f:dc:a4:4e:
b7:4a:39:c6:57:0c:63:c1:07:44:a3:43:98:db:61:
d7:23:6a:f6:5c:c2:7e:13:ca:25:02:d5:b1:d6:f2:
7e:8d:a5:1f:04:86:bf:8c:9a:94:19:00:15:4f:73:
68:ed:bd:5a:a7:a6:61:46:af:1c:06:6e:1a:c6:cd:
48:37:bc:2f:09:00:af:44:6c:a8:fd:93:17:d3:6e:
88:d5:da:80:30:60:7e:51:07:4a:4e:cc:f2:fb:15:
9e:01:66:c9:c2:7d:52:ea:2d:4e:4b:c4:69:57:5c:
e3:cb:a5:12:48:96:b4:9f:37:dd:50:14:32:4a:0c:
b8:c5:b9:19:e2:3f:70:55:14:6b:b5:24:51:a0:e8:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:65:20:FD:8F:F6:3F:81:5F:86:03:3F:42:13:A6:90:04:61:16:71
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c6:72:3a:18:22:28:b0:14:0c:a0:f0:ab:20:77:c1:81:52:
84:02:28:4e:de:c8:71:f9:3c:85:e0:9d:55:de:8f:32:25:d1:
8b:ca:2d:a3:d4:6f:cd:6e:03:c4:ac:5e:e8:d6:7f:45:f1:d2:
a0:04:54:d7:fd:cc:92:7e:89:bc:18:53:be:ea:88:40:e3:be:
59:ac:f1:da:04:e5:1e:b2:1d:47:13:de:13:ac:dd:30:6a:27:
26:02:8a:84:a5:c4:a0:fd:a7:de:f2:8a:ab:60:3f:da:c7:9c:
aa:7a:56:87:b3:30:fe:e1:46:a5:84:02:c2:1a:c0:23:2a:1f:
d3:00:d5:24:2a:8a:e2:f0:d6:f1:8f:6c:a9:62:84:55:b6:0c:
e0:ac:3e:41:e0:c3:ae:e4:19:7c:57:9e:2d:57:53:42:ac:36:
a1:0b:d9:53:cb:cc:b2:a6:f8:53:9e:06:3c:a6:db:21:10:27:
b9:cf:a9:6e:96:e4:ac:26:75:73:2c:d7:70:27:09:c1:31:ba:
46:55:b0:aa:9e:4f:e8:42:9d:f4:3f:c8:d2:d4:be:40:dc:48:
97:80:f0:cc:e5:16:22:67:ef:9e:ec:21:a5:01:ac:ed:7d:5c:
4e:89:33:36:d7:9b:a0:ae:3f:4f:f6:1b:58:78:0f:90:90:03:
bd:2b:ec:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:31 2025 by rpki-client