Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
File: ghhRSqrfoDhGuh9tOfH55DfGPEE.mft (raw, json)
Hash identifier: 33a1XjaUd1x0irITYnoViz62h2EUuM6lCCgrAQannlg=
Subject key identifier: 20:CC:C4:3F:99:BC:49:7B:10:DA:DC:D7:0F:5F:B7:22:67:3F:43:8A
Authority key identifier: 82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41
Certificate issuer: /CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41
Certificate serial: 0199FBEB0B845DDD080FFFABF655A5B35412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: ghhRSqrfoDhGuh9tOfH55DfGPEE.crl (hash: s930IBS8Z/CNc+KTHzXWra+ExKLz9nqicFiH9xY+pJM=)
2: i_8OV4hfwWGXwF9V2zc6PphYPKE.roa (hash: C7CIFHPDYn+G4rh2qeYAbZYKxEJSwAPGvW6pQ9glEwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0b:84:5d:dd:08:0f:ff:ab:f6:55:a5:b3:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8218514aaadfa03846ba1f6d39f1f9e437c63c41
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=20ccc43f99bc497b10dadcd70f5fb722673f438a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:9d:04:b9:d4:c8:94:e3:26:5a:a0:95:67:
6c:f2:05:02:31:b8:6e:50:8a:f6:fc:63:80:1c:5e:
9e:e9:21:f8:35:c9:80:aa:ff:b2:d1:48:af:1f:4b:
a6:01:30:d9:e1:bf:63:51:d7:fc:09:44:ed:1f:f1:
d1:08:ce:31:41:57:2c:79:0b:b8:c3:c7:bc:74:dd:
5c:cf:fa:61:c5:80:b1:3b:f0:58:62:37:8d:cf:14:
01:b0:4f:6f:ef:be:62:2d:b6:5b:18:b4:d3:be:72:
19:95:74:1a:ca:6c:fa:23:1d:cc:25:0c:03:14:64:
e1:8c:d7:e0:ac:9e:20:62:15:59:af:be:c7:ae:13:
98:0a:bd:dc:52:60:fc:d3:e0:04:c3:22:67:6b:2d:
ae:3b:82:1f:c6:6d:c2:d3:4e:61:59:2e:e3:97:9d:
aa:b5:7e:f7:88:8e:12:20:8b:a7:ff:2e:63:21:0f:
0d:b8:71:cc:44:a1:d1:8a:9c:2a:23:dd:83:ab:46:
92:ce:fb:cc:34:ab:4c:28:14:d0:92:48:fa:44:d4:
90:67:86:7b:e9:a1:04:fa:b3:99:2e:86:a5:c8:0f:
04:65:b5:4b:67:01:b7:80:ac:2a:e0:58:6b:0b:bf:
2c:36:cf:2b:a4:99:e9:30:14:c8:26:40:e6:b5:47:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:C4:3F:99:BC:49:7B:10:DA:DC:D7:0F:5F:B7:22:67:3F:43:8A
X509v3 Authority Key Identifier:
keyid:82:18:51:4A:AA:DF:A0:38:46:BA:1F:6D:39:F1:F9:E4:37:C6:3C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghhRSqrfoDhGuh9tOfH55DfGPEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/37423c-ebdd-4ea8-814c-333896a00e6f/1/ghhRSqrfoDhGuh9tOfH55DfGPEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:55:f5:45:12:e5:23:70:c0:db:0b:3d:7e:df:60:e1:2a:56:
e5:f6:32:7f:c0:98:33:9d:14:2a:7c:f4:25:09:ee:b6:d6:84:
53:a3:bd:89:3d:4d:be:f2:53:27:46:25:14:19:32:8e:1f:47:
41:7e:ec:70:5a:bc:19:a0:7c:c1:f3:45:80:15:66:33:0c:02:
e0:d3:c0:5a:b1:99:46:84:d5:f4:51:72:4e:d5:9d:8f:2c:0a:
61:f5:5d:61:41:11:0c:66:b5:35:05:af:fb:d1:d7:0b:83:48:
eb:33:6a:45:6c:79:2e:81:e2:a5:8e:bd:69:53:c4:5b:de:d2:
c5:94:e4:20:e4:58:65:b7:8e:83:82:ea:7e:82:57:df:99:a4:
ad:2a:17:18:5b:43:1f:65:34:89:6b:c5:1c:22:ba:77:60:fe:
62:4d:1a:05:7a:82:8f:a8:43:46:76:9d:18:f7:96:b0:df:6a:
35:35:5b:12:c9:cc:78:3f:2d:5a:59:ff:8b:aa:b0:ea:f2:5e:
1f:94:14:8b:2d:18:a6:2e:4a:65:93:14:72:1a:52:b0:37:af:
d1:93:4a:7d:2b:b6:ba:98:fe:0e:cf:78:8a:56:d6:47:4a:4f:
98:ed:0e:d0:65:f1:34:d1:e6:d8:87:0d:31:4d:df:74:b5:31:
8e:13:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:00 2025 by rpki-client