Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: 2vkCjRtq0rlD2h/m0WoedLtSR77aZJqNM4HyNN3LaHQ=
Subject key identifier: E6:8B:76:21:2E:0C:B1:37:4C:06:9F:00:F3:D8:35:F8:2F:D8:2C:E6
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 0198D54E8F75882DA94F3B17F5E548296D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: WxO7mlvMH0p6YtLMkWWqU/xkNHxfiVgCBshRDpbbdoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8f:75:88:2d:a9:4f:3b:17:f5:e5:48:29:6d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=e68b76212e0cb1374c069f00f3d835f82fd82ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:78:8e:50:71:b8:94:30:64:3f:fd:a9:a8:
04:2d:01:b9:fb:83:83:fc:76:a5:ce:33:f0:72:61:
78:ad:32:2d:29:d1:86:51:ca:d9:70:20:17:f5:0c:
bc:3a:3f:dd:5a:6d:7d:90:c8:b8:3b:ec:95:99:85:
7b:25:58:b1:e2:98:a4:71:e8:6f:62:82:53:66:5b:
53:58:e0:dd:27:a4:64:0d:dd:2a:72:69:44:6f:ec:
dc:2f:3c:52:a7:1a:1f:7c:dd:ed:83:47:06:44:9a:
1f:cb:32:0d:9f:74:50:5f:d9:2c:a7:23:33:e3:61:
02:bc:f3:12:98:c7:ae:83:ef:66:82:8f:ca:af:91:
b2:d4:70:85:24:44:ba:93:31:28:b1:ee:4f:4f:9e:
0e:ac:1d:0a:67:a1:29:8a:93:22:ce:d3:7a:65:0b:
a7:9f:21:6d:c6:1c:65:70:f5:58:2c:86:1d:72:0a:
a4:51:b4:ea:8f:19:e9:6b:5e:9e:80:58:60:de:b6:
0a:24:76:68:63:44:aa:e4:41:36:69:bc:84:8a:45:
fd:3e:45:2d:13:5d:ea:b5:b6:5c:2d:f3:33:5e:d6:
7b:cd:e0:38:56:65:8f:c8:79:63:32:7e:6b:21:9c:
bc:91:f9:16:ca:f8:7f:98:23:ad:5f:16:a4:e7:27:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8B:76:21:2E:0C:B1:37:4C:06:9F:00:F3:D8:35:F8:2F:D8:2C:E6
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bd:86:32:cf:6c:e5:c8:cd:d3:30:3d:29:cf:41:ab:56:91:
c0:d7:ae:b7:a3:87:de:61:38:e3:6e:87:c2:ce:74:60:e0:0c:
ee:3f:ad:be:90:35:0b:e2:c7:40:ab:a8:f3:3a:10:a9:6c:26:
e1:fd:c5:b4:ca:a3:e3:93:f4:37:f8:98:fa:bc:cd:21:93:13:
c5:78:0f:f8:c5:2d:f4:13:0b:b7:0e:3c:68:81:ea:a7:7a:77:
b6:89:90:6c:ce:67:4e:03:3a:3a:ff:14:78:2d:2f:ff:9a:74:
4d:9d:ac:28:0c:96:a5:c7:a2:63:c0:76:15:ec:3e:53:45:a4:
ed:5a:ad:20:3b:d8:14:6c:93:b0:52:e2:26:02:e6:a7:9c:f0:
ac:ab:24:f0:ad:58:a9:02:77:ee:63:33:78:41:c2:ca:b5:fd:
61:66:36:74:f5:de:b2:7b:d9:43:63:81:d1:b3:5a:59:98:00:
9e:a1:45:33:dd:21:fc:f4:ad:6d:e2:a8:ea:f8:3c:85:14:9c:
08:b1:29:44:40:a6:3d:32:52:3c:17:19:23:e9:eb:d1:e0:ef:
f5:96:74:98:f2:4e:58:42:6c:f3:1f:8e:c4:18:f8:c9:ad:7f:
81:be:57:45:f1:0b:5c:a6:29:6b:1a:4d:9e:86:8e:ae:3b:24:
db:9f:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:12 2025 by rpki-client