Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: Bg4NvcyGpIOFRRhCwHIFnv9xb/cv60zu6URWJ1AR61o=
Subject key identifier: B7:60:F7:7A:70:61:A3:F6:41:B7:7A:53:0D:F6:82:F9:40:2B:83:70
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 0198D583C2A80F1C09D43EB7FCB1220EAC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:38 +0000
Manifest this update: Sat 23 Aug 2025 06:00:38 +0000
Manifest next update: Sun 24 Aug 2025 06:00:38 +0000
Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: QqKMW0/8JvrJZT5jU6CDRbM5IclSM6NOWHazb5FP2uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c2:a8:0f:1c:09:d4:3e:b7:fc:b1:22:0e:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Aug 23 06:00:38 2025 GMT
Not After : Aug 24 06:00:38 2025 GMT
Subject: CN=b760f77a7061a3f641b77a530df682f9402b8370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:d1:2a:94:07:11:bf:a1:18:a8:9c:61:5d:
74:f7:75:09:73:d3:0c:45:7f:a9:ab:09:a3:7d:7d:
4d:65:97:bf:64:b1:02:eb:e4:ad:6b:6b:43:9b:38:
35:a7:88:6b:1d:c0:6c:64:4a:ae:3f:1b:81:fa:f2:
6f:63:1a:03:50:47:e6:dd:65:02:e3:8f:c5:c7:71:
25:80:ce:b4:cb:21:25:43:60:f9:e9:e3:c9:eb:7c:
d4:02:12:d9:2e:42:28:68:89:f5:b0:63:3d:d5:f9:
d2:c1:37:8e:ea:03:da:d9:54:6b:8d:ac:83:fc:86:
dd:0a:14:53:a9:c1:35:a6:c7:69:e9:d8:a4:bb:25:
f5:32:46:13:28:f9:35:b9:82:a2:60:6e:49:da:70:
4c:04:ce:ae:5e:36:45:52:13:30:bc:28:0a:83:46:
4a:a3:0d:42:c4:7d:ec:ff:aa:f8:79:6b:b0:e8:fc:
24:e5:09:35:71:2d:ee:a9:14:18:14:e1:0a:92:2b:
96:04:a0:1a:ed:b6:40:6a:d2:d7:8a:e1:d1:1c:51:
a6:63:6f:b7:49:4b:26:35:10:ed:84:d2:9a:90:64:
32:1f:f2:21:9d:ab:04:78:04:89:85:4d:d1:9c:2c:
3e:f5:8d:1d:e4:6a:7f:c8:3d:d9:dd:79:fb:f1:51:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:60:F7:7A:70:61:A3:F6:41:B7:7A:53:0D:F6:82:F9:40:2B:83:70
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:23:78:0b:78:e7:42:d1:25:8d:88:fd:cc:82:eb:83:be:56:
e7:98:87:f1:a8:92:0b:e2:d1:a1:29:8e:e8:9f:a0:4a:b0:f5:
19:f1:a9:5d:39:ac:36:c9:3e:eb:a8:02:9d:b6:33:bb:44:2f:
ee:d0:a0:8a:d4:06:3d:ed:5f:0c:3b:cc:31:bf:c6:4e:3e:ed:
52:1a:8b:d6:89:c0:ff:2b:41:13:92:fd:4d:27:41:70:c1:1e:
7a:e5:4d:8b:32:6e:25:87:96:ac:0e:ff:eb:93:39:b7:f2:78:
cb:c5:8a:33:dc:d7:f4:57:dc:a3:c0:cc:de:63:19:43:8e:c3:
0d:e2:8e:13:49:4a:8a:fa:ba:4c:ae:9a:a0:15:d1:2b:d6:ee:
47:39:83:0d:a8:01:40:b4:42:71:a7:1f:3b:a2:fd:a1:ae:8d:
62:f3:41:90:b8:19:f6:be:cb:a0:fb:2f:a6:22:8d:07:c7:ab:
4a:86:c8:26:30:8a:b5:f6:70:6b:e8:e8:08:ab:44:87:c2:e7:
f4:a4:e8:aa:6b:f3:a0:34:86:2c:0e:fe:30:22:6f:b6:c1:c8:
78:8c:84:5f:a7:c7:68:06:8f:1e:33:61:a8:5e:25:01:b0:25:
b5:bb:6c:a2:d6:91:ba:58:a3:ae:21:71:32:c8:e3:4b:9d:ee:
4f:89:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:28 2025 by rpki-client