
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: hyOlcU/ZIwM3BbYfJRLGJWSFNl/e4GDt/7lLsbGuy0E=
Subject key identifier: 2C:B4:5B:17:FF:73:61:D1:4A:E5:1F:A9:9E:91:47:DD:0C:2A:A2:D3
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0197CACC4E9889F5CDEDC511DDA6CDE260C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 15EF
Signing time: Wed 02 Jul 2025 11:01:16 +0000
Manifest this update: Wed 02 Jul 2025 11:01:16 +0000
Manifest next update: Thu 03 Jul 2025 11:01:16 +0000
Files and hashes: 1: QFczUkAgEuyKmzEnbolrTA6X2HY.roa (hash: 9oqBYWgD2K4y/lveKI1WmKGPvOv0tK+0eRuH2GWZVYI=)
2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: YIG0GTYb0oiSBWCjTd0Mr25KarZqhgd6B8hQyDxO9Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:4e:98:89:f5:cd:ed:c5:11:dd:a6:cd:e2:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Jul 2 11:01:16 2025 GMT
Not After : Jul 3 11:01:16 2025 GMT
Subject: CN=2cb45b17ff7361d14ae51fa99e9147dd0c2aa2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:12:9a:ed:2e:b5:48:5c:55:1a:47:51:a6:
47:72:d4:76:96:af:70:25:e4:20:3b:8b:6a:1c:93:
63:91:35:ed:b8:cb:8b:65:a2:f4:3b:65:74:b7:45:
d2:10:46:5c:93:4b:1a:12:b6:4f:6b:14:88:62:f7:
e5:e7:03:83:89:9f:e2:ea:99:34:40:33:5e:23:9b:
a7:21:9d:5c:52:2f:d7:01:3c:c0:05:6f:e0:ff:5c:
85:f8:75:80:68:1a:8a:1d:ef:3b:70:fc:44:bc:97:
8c:f8:26:b5:b8:95:7f:35:a2:c2:fe:cc:04:3c:c3:
b5:03:94:9f:84:5d:28:24:26:7f:9a:55:32:f6:14:
a9:ca:84:8a:8e:76:95:88:30:31:42:53:89:82:8a:
e8:ee:29:c6:4f:63:37:b0:0a:4f:24:4d:99:dd:5b:
f1:ca:e3:a0:31:24:d8:24:49:73:ed:55:c0:38:47:
1a:9c:60:ea:04:aa:7a:26:a9:d2:61:9f:cc:1d:f1:
cf:05:43:ef:a9:91:39:35:d3:9d:0c:b1:9f:6e:3b:
d8:d9:08:ad:df:3f:fe:07:33:03:bd:5b:8f:f2:ea:
39:85:ec:6a:91:fe:fa:4b:17:21:1c:52:e2:bd:05:
ef:62:8e:63:67:57:a5:bf:1d:6b:6c:be:e9:e2:97:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:5B:17:FF:73:61:D1:4A:E5:1F:A9:9E:91:47:DD:0C:2A:A2:D3
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0a:33:c5:59:5b:db:8b:ca:73:8e:9d:42:0f:c0:d7:84:a7:
e1:cf:b7:7a:84:7d:f2:c3:82:89:ad:91:e6:a5:37:c5:5e:42:
40:bf:ec:8c:c9:5c:ba:dd:2a:c8:20:b0:d0:75:61:ac:44:01:
4b:09:75:a9:f8:0e:22:cf:2d:6c:ab:ec:dc:2e:8f:a6:3d:bf:
6f:a6:5c:c3:cc:f5:73:d2:7c:4b:14:43:0f:87:43:a4:9e:ba:
94:84:d8:df:b4:55:35:28:f3:43:d4:b4:e3:60:22:b5:38:db:
27:0b:54:ba:31:bb:9b:c9:f3:a0:c6:3b:f4:86:39:f6:e8:70:
af:0c:67:1c:e8:41:bd:87:1d:bd:4c:1c:8c:18:6f:c2:85:3c:
5b:cc:ae:78:eb:f1:35:53:42:1d:62:15:34:f8:be:97:a3:14:
2a:30:15:d8:36:71:97:a9:b8:a8:d6:43:cc:5b:96:5f:4a:54:
32:08:15:c6:df:2d:90:40:66:12:e2:e3:6a:07:26:b0:c6:79:
9a:3e:af:0d:9d:7a:c5:40:6e:80:ec:f3:bd:78:a4:f1:1e:a8:
e6:52:bc:e8:8d:3c:0d:28:38:16:41:0f:05:70:cd:cf:b9:a2:
72:bc:13:86:f4:87:a5:94:e0:f7:cf:e0:15:09:9a:9b:70:a0:
6f:a5:c5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:38:21 2025 by rpki-client