Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
File: gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json)
Hash identifier: XC/BDDkMC4jJ8u4nJoGfENcRBX6K3t5Ea5ZiOoMwCEw=
Subject key identifier: 08:C8:A4:80:0A:10:20:2C:7D:5F:B4:41:F2:7A:75:E5:7D:68:7D:C8
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 0197B6A135E946A7F8D40840E80C9A997F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
Manifest number: 0E3B
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: XpmIoWBaU0/ZO7GjFiF+j+14xGCLrYZL4KSHYijolsw=)
2: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (hash: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:35:e9:46:a7:f8:d4:08:40:e8:0c:9a:99:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=08c8a4800a10202c7d5fb441f27a75e57d687dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:54:a8:43:cf:88:49:52:36:bf:a4:ea:96:
30:e6:ee:89:7d:00:2b:12:28:a7:86:f1:e6:ed:30:
44:36:1e:2a:a5:25:9b:05:39:b6:f3:41:9d:7a:95:
5a:f1:12:f5:a9:3d:45:d9:f0:ed:2b:6c:ff:5c:6b:
04:b4:a0:da:77:8a:f3:d4:97:bd:18:46:c5:29:47:
09:20:10:e1:19:3e:44:a9:bb:70:ad:c8:49:74:d7:
1c:5c:e5:17:13:37:f5:3a:b7:83:db:e5:2a:02:11:
ca:45:fa:91:b7:46:69:62:d6:07:17:90:e3:af:0f:
ab:ee:fe:25:b3:f2:8e:bf:4a:d6:6f:39:30:91:64:
1a:4f:9a:bd:aa:ab:05:11:ab:a2:3e:eb:49:58:d4:
b7:34:57:23:c3:9b:87:21:ff:c9:cb:7f:55:f2:a6:
a9:e5:d6:f0:a3:e5:af:fd:49:80:4d:b4:46:bb:fb:
ed:8b:26:90:e0:38:05:d0:4a:21:29:4e:55:0b:47:
ba:36:e3:4c:d3:ca:2e:dc:b2:57:4b:36:a9:57:83:
11:6e:f2:48:70:df:64:4d:5f:db:58:d3:12:16:5b:
f1:0a:3f:d5:b3:fb:45:f8:97:25:0a:00:10:0b:b7:
0b:70:c5:5a:9c:39:ce:b4:61:1e:d0:cb:ce:2d:78:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:A4:80:0A:10:20:2C:7D:5F:B4:41:F2:7A:75:E5:7D:68:7D:C8
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b6:ac:46:45:fa:de:00:6d:d8:df:50:cb:f6:c8:af:b2:80:
01:e8:d1:00:cf:88:21:cf:8b:14:86:f3:bc:09:5c:7f:e6:c4:
2d:47:b1:3c:88:ca:9f:56:e4:1b:b7:ec:e5:36:ea:79:4c:95:
3f:14:37:ed:fe:dd:0f:c9:b2:37:f8:91:f7:7c:37:62:a3:7c:
33:d1:7b:bf:cf:7f:bd:3c:0b:ed:a3:cd:57:49:3b:1e:d1:1f:
86:9f:85:bf:a0:2c:98:66:2c:2b:e6:9c:4e:47:f6:14:07:a7:
60:ef:de:e7:52:c7:c7:7d:f9:07:4e:e7:b6:35:f5:a0:07:21:
8c:3d:83:cd:2d:2d:44:0a:e1:32:ce:9b:86:d1:50:91:77:bb:
b2:88:1e:86:51:39:d4:c0:6e:1c:df:ff:1b:c2:63:31:0e:e4:
d8:a3:aa:09:b2:40:ab:3f:fb:63:44:81:8c:12:ed:cf:f1:85:
a6:b5:1b:17:1b:55:35:53:cc:cb:75:a7:df:02:6c:ad:7b:e9:
97:a9:45:52:85:32:4b:20:9c:86:52:3f:9c:52:e7:04:c0:eb:
59:9a:b9:40:94:e6:43:ae:d8:f1:97:98:e0:57:52:04:ed:27:
f8:41:36:92:e6:87:67:23:71:9f:65:5b:8f:12:ea:79:87:7e:
dd:93:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:33 2025 by rpki-client