Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: +qw1RQ7cFyaEblOdW87E2MdJCfFx1gXM/UW+LRMtaEg=
Subject key identifier: 57:13:12:EA:EA:66:DC:45:39:A8:78:A3:14:41:67:1D:23:9E:98:53
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 0197CACCA1BC81D75112FAC4FD3B65BAF1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 11:01:37 +0000
Manifest this update: Wed 02 Jul 2025 11:01:37 +0000
Manifest next update: Thu 03 Jul 2025 11:01:37 +0000
Files and hashes: 1: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: O6VSFU80/pb/JAA2QPFFo96F8f2KzWDkVj/kBzdY5Eg=)
2: tiFC6JqksrztinNgeHjMezLIyQo.roa (hash: AMO7U+NdmFNyNa76WinXG21mQKY3WubeaQslsZeF+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:a1:bc:81:d7:51:12:fa:c4:fd:3b:65:ba:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Jul 2 11:01:37 2025 GMT
Not After : Jul 3 11:01:37 2025 GMT
Subject: CN=571312eaea66dc4539a878a31441671d239e9853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:a8:67:99:ef:69:0b:4d:57:f1:b0:54:1b:
48:5f:e9:17:9f:d4:a1:5f:2f:26:8c:08:49:e0:aa:
97:7b:39:3b:e3:3f:a3:a7:78:21:d1:65:95:31:0d:
76:89:7a:0c:a1:45:3a:96:0d:b8:24:15:34:f3:4f:
10:0f:08:4f:67:9a:f3:07:76:16:88:ca:1d:5c:af:
c2:41:a1:c8:97:a7:da:4f:59:10:b3:43:b3:49:8d:
10:01:2b:a3:66:6a:be:fc:f9:19:f3:03:16:db:54:
8a:ba:5f:8e:b5:88:b1:7a:3f:34:36:ad:69:7c:ea:
5a:55:15:4d:3b:d9:c2:b3:57:f1:a7:82:15:7e:9f:
e1:10:b9:64:f0:1b:07:0e:32:5a:21:1b:a8:f7:13:
49:88:27:75:e4:8b:c0:33:64:a4:65:90:bf:24:ba:
2a:39:d7:7c:48:e7:20:6d:c7:dc:bd:70:8e:4b:34:
d7:d9:32:2d:18:66:ef:d9:6a:26:98:8f:6e:d1:5a:
f5:ae:e0:98:22:d0:00:60:d7:c9:d7:93:aa:25:65:
32:9f:1d:6a:f6:2b:23:54:18:96:7e:dc:94:f0:bb:
cd:ad:e8:4d:02:a6:86:a2:ea:83:9b:3d:35:be:b2:
0f:85:4e:fd:f7:46:5c:14:31:a5:c3:18:61:b9:97:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:12:EA:EA:66:DC:45:39:A8:78:A3:14:41:67:1D:23:9E:98:53
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:b5:ff:2b:60:56:6c:10:76:25:c6:fc:55:35:1c:2b:e6:
cc:ef:b0:eb:16:c7:09:07:43:3a:9e:06:81:02:b4:18:13:48:
57:f4:6c:10:b2:6b:bc:12:e4:24:1e:de:8d:16:c3:4b:7a:32:
52:69:49:64:f5:aa:5c:1f:73:8c:14:55:33:aa:b3:45:a5:1b:
29:80:df:3b:a8:a6:be:d0:82:ac:e0:45:a6:e3:a7:20:6e:d1:
a8:b2:e6:07:a0:af:12:41:f9:cc:07:ab:bd:0b:5a:bf:fd:f5:
3d:3e:5d:b4:f1:e4:2c:41:54:31:68:c2:30:59:53:83:b0:73:
77:14:67:3c:64:a7:48:a9:d6:99:16:fc:36:8f:9f:1f:30:0a:
4e:ef:92:09:8b:c6:fb:a8:52:4d:f0:4b:e5:9c:fd:dd:da:ab:
da:a5:6d:d9:56:d3:30:5d:69:fb:7c:cd:ef:f8:d6:c4:0a:c2:
0e:c1:41:69:54:ff:ba:a9:be:2e:7d:ba:5f:d9:55:a3:12:ea:
3e:7b:97:dd:8a:64:96:c9:13:e5:2f:62:b6:ee:68:70:b5:e7:
5b:c0:ca:8f:9d:2a:1c:71:14:e2:58:1a:5a:58:fa:e3:10:b5:
bb:78:21:b1:ec:62:4f:20:77:78:39:3b:5f:f0:39:60:32:ed:
db:45:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:16:40 2025 by rpki-client