Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
File: gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json)
Hash identifier: voKSgKXV1cT+Ixt7XEdmb2HLL59OQzoQyP1g6YSuwiw=
Subject key identifier: 36:40:AB:7A:21:0D:D4:9E:83:0B:6B:6E:CB:7F:96:11:E0:9E:7F:68
Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Certificate issuer: /CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Certificate serial: 0198D5F1C7E23F24A3A5369FB2BC88A6E9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
Manifest number: 0664
Signing time: Sat 23 Aug 2025 08:00:48 +0000
Manifest this update: Sat 23 Aug 2025 08:00:48 +0000
Manifest next update: Sun 24 Aug 2025 08:00:48 +0000
Files and hashes: 1: HuWSmht5WAvI31ALVxohsMAOFVU.roa (hash: NEqYNw5Ua7Qih23DC5eW2LfJiM7edWxcLo1N0yMRd5I=)
2: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: vyz0QgYUhlVTNdnGnj5WaMFcVm1CD7YqFzRr83Y0PkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c7:e2:3f:24:a3:a5:36:9f:b2:bc:88:a6:e9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Validity
Not Before: Aug 23 08:00:48 2025 GMT
Not After : Aug 24 08:00:48 2025 GMT
Subject: CN=3640ab7a210dd49e830b6b6ecb7f9611e09e7f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:8c:3c:3d:81:61:c5:62:e0:3d:6b:34:04:
88:e0:e6:c8:16:1d:11:1f:60:09:4b:f8:e3:e2:e9:
31:28:78:9c:69:73:89:c4:b7:66:8b:7b:7e:68:1a:
9b:18:40:e4:05:92:36:e7:80:42:52:30:7e:37:60:
f1:a7:ec:75:c5:ea:fc:41:c0:b4:cc:5b:c1:5b:0b:
5a:68:9b:f2:2e:eb:df:33:dd:f0:51:d6:9c:95:eb:
40:c8:c7:bf:36:c8:7b:39:70:f4:fd:04:32:ba:bf:
55:38:ed:4e:ec:e7:bc:91:06:a1:84:c4:27:bd:18:
ad:af:72:97:9c:1c:10:1b:bb:f8:15:8e:ae:53:c9:
b8:17:17:57:6f:6f:67:17:40:a3:a1:6b:46:10:9f:
c2:9d:bc:97:99:42:f1:fc:2b:30:4f:58:2e:37:30:
3b:44:56:f7:3a:b7:41:fb:1a:24:6b:21:94:29:49:
85:1c:91:5f:1c:29:75:9b:4c:7b:f7:65:81:dd:c1:
4e:a6:25:ba:88:ce:87:7a:ea:1f:87:47:a8:4a:19:
72:d5:6c:79:8d:3a:a4:cb:10:1f:0e:01:fa:88:4e:
1b:ce:1f:64:eb:03:ac:81:67:9d:9f:c4:a4:7c:ee:
94:06:cc:3b:59:ed:84:06:92:cf:a5:0e:14:dc:c7:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:40:AB:7A:21:0D:D4:9E:83:0B:6B:6E:CB:7F:96:11:E0:9E:7F:68
X509v3 Authority Key Identifier:
keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:b4:f4:8c:0e:b1:10:e7:4e:da:9c:d5:69:ec:ec:0d:a5:
62:34:f2:bd:9c:62:98:da:5a:89:57:c3:b3:b6:42:10:90:49:
8c:c5:c7:a6:f3:a1:cd:4c:02:06:a1:9a:84:70:38:d1:65:2f:
f3:de:de:f4:9e:90:a2:18:38:25:b8:0c:3a:aa:36:3c:dd:86:
a0:88:55:39:4f:ae:59:fa:2d:2c:42:9e:d8:0c:09:75:04:b5:
d1:5c:8f:53:74:5b:58:06:70:73:a6:2c:37:42:01:75:c7:74:
9f:b3:83:a2:45:b2:1d:b0:4d:0c:2a:67:aa:8f:c1:a7:8d:06:
10:11:bb:ba:09:4f:82:89:06:75:f4:52:b2:a3:9c:37:28:a6:
29:cf:73:1b:a2:71:82:d7:c0:4f:e9:1b:65:1f:7f:99:8a:5e:
06:67:c2:44:41:87:9a:63:45:5b:f5:36:7b:ad:b8:4e:c3:44:
02:dc:ae:7b:82:57:c6:4e:77:fa:b3:75:5a:a7:87:b2:81:7e:
1b:38:ec:c7:70:9a:4c:87:d3:bc:ed:18:80:c6:1e:60:dd:88:
f6:52:4a:e0:14:61:07:6f:20:0d:01:d2:b5:85:cb:1f:b0:50:
5f:18:cf:a4:0a:13:25:df:de:22:48:1e:7f:88:4a:48:3a:f3:
6e:aa:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:46 2025 by rpki-client