
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier: 5jCcHx03NbSuYuaSdZuVIKk7QRuYpVDx2120AOxWO4s=
Subject key identifier: 8E:4F:93:A3:BF:04:F5:B4:B4:F2:83:E4:59:A6:F8:E9:2A:5C:98:A2
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 0198D65F97288192002CDCAA2C11F7E5B348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number: 0BEB
Signing time: Sat 23 Aug 2025 10:00:45 +0000
Manifest this update: Sat 23 Aug 2025 10:00:45 +0000
Manifest next update: Sun 24 Aug 2025 10:00:45 +0000
Files and hashes: 1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: 3ikTkHjMIhBCrSDVnIZm/suglWTKp5cQSXxiwgWNYJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:97:28:81:92:00:2c:dc:aa:2c:11:f7:e5:b3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Aug 23 10:00:45 2025 GMT
Not After : Aug 24 10:00:45 2025 GMT
Subject: CN=8e4f93a3bf04f5b4b4f283e459a6f8e92a5c98a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:2e:fb:3c:da:ba:59:b1:5c:b4:2c:22:66:
2e:b4:94:9a:25:d5:f9:44:76:a8:f7:38:2b:b9:7e:
e9:8a:7a:ce:68:5d:e2:98:50:a9:bb:7e:6e:dc:28:
82:34:e4:45:ef:6a:e9:2d:a4:37:dd:3a:92:58:07:
01:87:12:6f:87:b6:0a:66:d7:63:a0:08:f1:84:fc:
0e:3d:f6:fc:a4:67:2d:0a:12:58:94:45:13:64:94:
68:f4:5b:ae:48:6a:cb:4c:ad:d2:c2:94:c9:4d:e0:
c2:a4:be:23:74:2b:72:76:b0:1d:de:6d:66:39:e9:
46:19:26:55:44:f0:1b:bb:ce:1e:cb:89:2d:e2:a9:
9f:76:db:2b:c4:14:b4:c5:f5:c7:86:e5:d5:ed:68:
44:3c:30:ef:7d:ff:28:2d:c7:13:1f:e1:11:2e:c0:
f7:76:30:19:a4:77:1b:24:ec:3a:85:b5:93:20:1a:
a3:4b:f1:ac:75:9d:4e:80:e1:77:1b:03:cf:2d:b2:
06:55:68:3e:02:1c:05:87:45:72:64:f0:3d:b3:72:
6c:83:20:15:bb:ed:f8:37:f4:ae:5f:cb:a6:cb:25:
5c:04:43:b4:79:d8:a6:83:47:0a:d6:bd:9c:21:88:
0d:d7:04:2a:76:7a:86:68:b7:fd:83:7d:2a:25:fd:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:93:A3:BF:04:F5:B4:B4:F2:83:E4:59:A6:F8:E9:2A:5C:98:A2
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:08:ac:f4:e1:6c:30:c7:12:9e:b8:f5:07:0b:93:bf:d0:01:
c5:32:a5:3d:14:fc:a2:b2:ca:23:41:e3:4e:0a:dd:70:f6:3b:
bf:2f:7a:88:c2:25:6f:01:88:4f:73:92:42:95:ed:1e:97:39:
cb:f0:cc:26:f9:bb:c5:b3:21:92:51:ec:dc:a0:53:db:3d:ad:
19:ba:91:2f:84:d8:c2:d7:e8:98:f6:11:4a:ba:13:58:6b:71:
a5:46:b2:59:be:bc:e6:72:09:e7:77:e6:7d:27:ef:d7:02:3e:
61:71:48:fd:7f:5e:d9:e9:c7:f6:e4:fa:f6:4a:b7:2e:8e:7c:
fa:2d:5b:32:79:cb:ac:30:ae:77:44:12:c8:09:09:a6:22:d5:
a3:35:01:78:9c:1b:c3:e8:c0:b6:77:13:c5:bf:60:af:11:42:
fb:5e:71:4b:dc:7f:5a:d2:95:d9:75:d4:69:11:b5:5d:f9:9f:
6f:18:17:57:4b:ab:30:66:6d:41:9f:48:a8:01:e2:d4:40:07:
e1:e0:67:7a:11:4c:40:e8:e8:b0:24:01:93:c2:b1:37:05:23:
84:16:61:9d:cd:2a:8d:51:ac:6c:44:bd:b4:5f:23:46:38:58:
9d:3e:f5:6c:1d:dc:1d:2c:23:74:ff:d4:8f:08:c5:dd:c3:35:
e0:8a:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:06 2025 by rpki-client