Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
File: gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json)
Hash identifier: NIH5ed+AAezAZFpSKky75sT41fJrCubRTRqswBFG//0=
Subject key identifier: 2D:98:C2:AF:ED:33:80:1C:18:47:E0:B8:9E:F6:77:FB:C8:B1:E7:4A
Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Certificate issuer: /CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Certificate serial: 0197B82145BF91BFCDB020E43D5BB3926FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
Manifest number: 05D0
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: HuWSmht5WAvI31ALVxohsMAOFVU.roa (hash: NEqYNw5Ua7Qih23DC5eW2LfJiM7edWxcLo1N0yMRd5I=)
2: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: 2uP0Pz47Y/tCnJAJseEdrp20G9F6lpdTMZ0OiNiYfqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:45:bf:91:bf:cd:b0:20:e4:3d:5b:b3:92:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=2d98c2afed33801c1847e0b89ef677fbc8b1e74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:c6:9c:b0:b0:c7:8d:98:47:22:6c:f7:b4:
23:d8:c1:15:a9:cc:9e:ab:6b:87:30:76:d4:c5:20:
29:75:41:21:50:ae:b5:96:c7:0c:78:c9:dd:bc:8e:
8b:90:47:1e:dc:22:df:b6:58:e9:87:ce:8f:46:b8:
10:fe:18:0e:dd:02:f8:02:f6:53:b5:f7:2b:ff:fd:
d0:4c:99:22:ee:f4:1c:c4:31:d2:b5:f1:ab:d9:67:
20:fc:a9:d0:37:3a:86:31:bf:b0:cc:3a:d4:97:b7:
5f:e4:05:59:15:8f:f7:c1:e7:de:9f:a8:22:ce:b7:
19:82:89:5b:40:38:a3:54:da:90:50:6a:e0:d5:fb:
7c:23:9c:8b:50:6a:f0:d8:a0:cc:02:3c:8d:1e:c4:
08:e7:34:c7:8f:e1:df:ef:d7:f3:30:a8:e5:57:ad:
56:2c:90:f2:ed:4a:52:e7:bd:8f:49:b7:6a:d9:2b:
9f:ce:af:23:a6:5c:e9:e7:3f:ac:fb:34:0f:99:47:
9a:57:b5:57:d1:59:39:ff:76:d9:cc:a1:ce:a9:7a:
c3:c7:49:e5:ad:7a:e5:cc:62:9c:fe:68:94:5b:67:
f7:c4:d4:af:85:24:e0:2d:bd:ba:3c:35:86:14:aa:
3f:e0:f7:cb:37:61:26:dc:49:1a:bd:6a:25:08:66:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:C2:AF:ED:33:80:1C:18:47:E0:B8:9E:F6:77:FB:C8:B1:E7:4A
X509v3 Authority Key Identifier:
keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ef:23:fd:34:c6:0f:d7:36:85:6e:45:12:9b:ea:d7:87:1e:
07:ec:60:a3:65:50:e3:ef:3c:ec:d5:7f:12:40:7c:cb:09:2f:
b8:a5:db:0a:2b:68:c4:67:f1:93:60:ba:61:e1:82:ed:2c:ab:
82:4e:98:28:0d:3e:62:02:14:9f:a5:9e:62:99:66:ed:37:bd:
8b:c9:32:cd:75:12:52:01:b2:14:1d:b3:d0:8e:45:04:4e:65:
4a:9e:e5:8e:12:ae:3d:fa:dc:0e:f3:d0:e7:a1:a0:21:6e:94:
05:20:c0:fa:a1:9e:cf:fc:09:60:d6:8f:06:98:72:56:70:79:
90:6a:8a:5f:fe:46:9c:40:8e:36:07:26:ff:49:a8:3f:2f:2d:
ba:d7:95:94:a9:3b:04:b6:35:28:89:81:68:72:b0:b0:e6:17:
67:03:7b:c5:a5:0b:57:5f:c6:b4:d5:6e:e5:a1:57:59:69:d8:
eb:f7:cc:5d:25:55:d9:7e:ce:9c:56:b4:4e:56:8f:6a:f5:ce:
28:70:f9:af:4e:71:98:99:ed:58:44:d0:34:8a:d3:1e:e9:f7:
f2:ef:30:68:b6:a2:3c:ef:91:d2:a3:5a:e7:c5:8a:81:04:50:
94:b5:4b:1a:72:28:5d:24:6d:87:b8:f1:93:2e:7e:f2:39:fc:
48:e7:c8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:45 2025 by rpki-client