Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: yempr7TA57+Efety7C5wwufwDLtRsKUmU8/gTjK9MhQ=
Subject key identifier: 4F:66:A9:78:08:A9:D9:12:60:19:04:28:5B:6A:93:D2:4C:B0:8A:6D
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 0198D404EB029545CDF8697E47E85EF2E13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 068C
Signing time: Fri 22 Aug 2025 23:02:28 +0000
Manifest this update: Fri 22 Aug 2025 23:02:28 +0000
Manifest next update: Sat 23 Aug 2025 23:02:28 +0000
Files and hashes: 1: FpuhTfwOdSf21755rrSFTL20Tbk.roa (hash: X6w/yqAHbg5XsmgEDpJrMUNkNSsz78dV/DwakO4C27U=)
2: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: tKCctsrYZmDKyl2UNDIjSOOC4/ajv/65Z9dDL2Y7N84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:eb:02:95:45:cd:f8:69:7e:47:e8:5e:f2:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Aug 22 23:02:28 2025 GMT
Not After : Aug 23 23:02:28 2025 GMT
Subject: CN=4f66a97808a9d912601904285b6a93d24cb08a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:1a:df:78:42:60:fc:51:b8:84:7a:b3:a3:
c9:04:67:1e:70:d0:9f:6e:89:72:25:02:fc:0a:7c:
47:30:f9:04:ba:99:40:3d:79:d7:4a:21:e6:02:b7:
2d:ac:69:6d:af:6b:63:b2:92:28:63:ee:7d:63:0d:
44:3a:ed:c2:98:00:79:0a:4d:b0:ec:67:18:b9:a8:
d0:b3:82:31:c8:5c:c7:6d:0b:70:23:65:d4:8c:2b:
17:ef:7a:15:a6:52:af:16:f7:22:66:48:48:24:f4:
bb:57:02:1e:d2:51:ee:b7:31:f6:b6:fa:ad:ec:9b:
c3:4b:59:af:3f:c8:1d:da:14:0a:40:05:7f:84:d8:
93:93:dd:c6:1c:60:6a:e3:56:49:c4:5a:73:fc:10:
1c:73:75:3f:d6:a0:e6:14:73:10:ae:7f:e5:24:d0:
19:d5:0e:35:b5:e8:13:29:15:13:59:53:ff:20:1d:
b8:54:ab:75:7d:19:10:c0:f7:97:68:d6:db:c7:a3:
15:32:79:19:da:cd:16:82:f7:1c:91:2a:ae:a5:d8:
c5:c5:d2:40:72:7d:ab:8c:1a:3a:79:53:8b:7f:3d:
b1:f6:af:8a:19:22:c0:db:a6:1c:59:20:b6:6a:79:
20:ba:9d:87:24:f9:7e:4e:fd:f4:0d:e7:c8:13:19:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:A9:78:08:A9:D9:12:60:19:04:28:5B:6A:93:D2:4C:B0:8A:6D
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f6:78:a9:80:54:e2:ae:44:c9:24:bd:f3:98:8b:a0:38:97:
24:f2:e5:2c:ad:88:39:96:f3:bd:5e:96:ec:ec:22:4a:89:82:
9f:26:4d:f1:a8:9c:51:b9:dc:e8:85:b5:41:74:b4:b7:c3:3e:
65:f5:7c:30:1d:cb:b2:c7:46:b0:bd:d7:3e:5e:eb:16:16:ea:
88:18:16:82:ce:77:59:75:d6:18:e2:da:98:51:af:2c:14:25:
86:ed:4a:c4:cf:8a:25:91:23:d6:b9:af:03:7a:dc:1c:f2:5c:
42:f7:92:a3:bc:4a:80:b0:3a:b2:c7:06:f8:4e:69:29:3c:62:
f4:dd:58:6d:b0:6e:4b:89:d7:cf:7d:89:cf:51:b1:d5:9f:6a:
ca:de:c1:40:a2:0d:a6:c6:c5:7a:85:73:47:5a:6a:ca:23:4d:
3d:87:68:ba:c0:ec:9e:12:ca:a9:a2:f6:6c:2f:06:98:ea:c9:
ed:3e:97:bc:3d:71:2e:62:c2:41:a7:6a:8c:4c:ce:64:4b:21:
db:5f:a3:46:38:56:6b:d3:10:cd:18:c1:8f:bc:ab:b4:75:8c:
fe:5e:c7:33:cc:4f:37:85:6d:17:8f:d2:b7:a2:60:99:4e:da:
e5:9d:1c:5a:9a:b3:20:fe:d1:5f:99:2d:16:93:ea:ff:09:ff:
43:1b:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:26 2025 by rpki-client