Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: vtdzf4RkhDq4a4NObHujrZS+fd3quyRuhWnRRqhwavU=
Subject key identifier: 30:4B:8D:27:40:93:5E:63:C6:25:C8:52:7D:66:A8:2C:A5:98:F3:86
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0198D73B46DC5F0DCE2D6774E88355CD98A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 167A
Signing time: Sat 23 Aug 2025 14:00:42 +0000
Manifest this update: Sat 23 Aug 2025 14:00:42 +0000
Manifest next update: Sun 24 Aug 2025 14:00:42 +0000
Files and hashes: 1: QFczUkAgEuyKmzEnbolrTA6X2HY.roa (hash: 9oqBYWgD2K4y/lveKI1WmKGPvOv0tK+0eRuH2GWZVYI=)
2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: /diim7eyWI0eFif9L9Pw9TLQ6uqmtBTZ7qz0gxbngH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:46:dc:5f:0d:ce:2d:67:74:e8:83:55:cd:98:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Aug 23 14:00:42 2025 GMT
Not After : Aug 24 14:00:42 2025 GMT
Subject: CN=304b8d2740935e63c625c8527d66a82ca598f386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:76:09:8e:18:af:0d:0d:00:3a:68:d4:13:
1f:32:69:48:bd:b3:e9:c6:91:70:3a:0b:ca:a4:56:
76:3e:c4:47:cb:a4:cb:a9:13:c2:40:15:b7:fd:32:
ad:1c:36:87:84:f2:39:69:f9:fe:49:14:cf:80:9f:
dd:19:55:66:45:7d:60:e8:cc:85:40:32:7a:b9:f5:
68:66:f7:52:6a:c6:9f:cb:01:e3:b3:b9:3d:4e:37:
79:36:09:89:55:ad:ee:9b:5f:71:10:23:14:b5:56:
3a:a1:0c:44:41:b0:b0:20:56:39:5d:75:b7:f6:ae:
a0:9a:65:d5:56:d3:07:fe:b3:ee:88:67:a3:ea:3f:
38:4c:93:f6:45:f5:43:82:20:b3:15:5e:a9:38:aa:
d0:d5:97:33:e3:e0:d8:50:40:bc:25:ea:6a:36:81:
41:17:56:06:d1:64:e2:35:0f:e0:d2:e9:3e:5f:99:
03:b5:4c:55:18:ba:a3:29:63:5c:d2:4f:5f:c1:43:
48:5f:49:e7:a0:63:04:3b:bc:0c:1b:23:99:f7:9b:
a8:75:9a:0f:99:97:38:e3:f2:a3:3c:10:2a:0c:98:
e8:99:57:75:03:34:bd:40:ea:f6:79:c0:37:65:04:
e0:b4:55:e5:af:7f:f5:52:6b:5c:a5:95:95:19:90:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:8D:27:40:93:5E:63:C6:25:C8:52:7D:66:A8:2C:A5:98:F3:86
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:82:ec:db:74:53:09:f6:f1:e9:9b:08:9f:2e:ab:f7:43:e6:
26:d5:3c:f7:c1:42:44:2c:b5:0a:12:ab:2b:19:5b:35:3d:55:
ea:51:44:bd:9f:f4:d3:5b:9e:bb:7d:88:df:f6:51:a0:2d:44:
c6:28:cc:88:a5:a2:e6:4e:fc:8f:16:85:1b:57:d4:76:5e:38:
ea:b4:e4:2d:01:cb:8e:d6:fc:36:19:c4:1c:77:a4:28:a9:23:
00:8f:74:01:65:d7:e4:08:63:7e:dd:66:83:89:50:ea:40:ab:
c5:a2:cb:a3:13:32:96:b7:12:71:62:6e:1e:e2:b7:ae:f5:64:
78:78:ae:5a:41:4b:ff:fe:cb:e3:77:38:be:b9:da:e2:7e:1c:
d3:3c:95:e0:4e:18:29:0c:9a:f0:c4:69:92:d8:9a:11:0b:08:
43:0e:04:13:51:39:d8:5b:4d:10:a0:83:08:00:b1:74:36:9c:
b6:4b:59:bd:e8:83:79:f0:e0:e4:27:f2:4b:7d:cd:c2:85:34:
a6:04:26:6e:1c:55:5b:46:20:bb:9c:d7:89:62:59:36:ad:71:
1b:71:96:0b:03:83:11:09:5f:34:a1:90:1d:98:52:ac:94:a9:
c2:71:f9:5b:e0:e0:65:5f:b0:69:1b:95:a1:7f:ec:e1:12:bd:
9f:2f:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:22 2025 by rpki-client