Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier: TlzD+xa1+ei7UNa7MUbBBW0MK4zVx6aXfQnVI446KGc=
Subject key identifier: CE:68:8F:77:FF:7B:E4:18:E1:58:43:C0:3A:4B:B3:59:6E:18:33:97
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 0198D73B46233BB925E4C06D7CC142C4076E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number: 114C
Signing time: Sat 23 Aug 2025 14:00:42 +0000
Manifest this update: Sat 23 Aug 2025 14:00:42 +0000
Manifest next update: Sun 24 Aug 2025 14:00:42 +0000
Files and hashes: 1: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (hash: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=)
2: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: WdqaXHsLKUVXPjmIWlmnLmMILiEtqHJu06HhGxaImgk=)
3: wgLpdQzEQiut3zZPkrk2it4-KJM.roa (hash: rQ6r9VvnZsN117x/0JkyHFIrRA5vncbf9BthsT1+A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:46:23:3b:b9:25:e4:c0:6d:7c:c1:42:c4:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Aug 23 14:00:42 2025 GMT
Not After : Aug 24 14:00:42 2025 GMT
Subject: CN=ce688f77ff7be418e15843c03a4bb3596e183397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:8c:99:e1:8b:8b:5f:f2:33:51:76:8e:c8:
21:1a:73:02:e6:87:cb:cb:cd:7f:3a:a3:92:a4:c4:
17:09:68:3d:b1:45:0f:1b:91:4b:8f:71:69:52:0f:
d0:da:8a:66:ec:d5:ee:fe:74:ee:da:3d:b9:94:ac:
74:9e:26:1b:eb:c8:1d:97:a5:3a:bb:bc:69:71:41:
1b:f4:5f:82:57:d9:6f:34:33:02:5c:c9:0e:43:47:
ee:13:df:7f:ad:96:75:c1:02:d0:a2:47:2c:00:c3:
d7:38:e1:cc:fe:c0:0d:f0:4f:52:6e:fc:55:95:e4:
91:04:3d:39:e5:3d:4b:06:2e:9d:a4:01:18:f9:f9:
02:45:37:62:79:31:82:26:ca:a8:a6:2c:09:2f:d0:
24:5f:12:3c:aa:68:c6:1c:a4:eb:bd:0a:c4:ff:c5:
89:f3:93:29:a9:74:d1:0b:0d:d0:0b:8d:61:d8:dc:
88:53:74:88:d5:e4:72:a9:ee:63:00:d6:bf:28:ed:
05:b7:bb:0c:f1:36:e5:46:a5:3f:5f:31:5c:d0:cf:
e1:f1:a0:88:bd:c9:8d:0f:16:34:14:87:27:4b:e8:
7a:ed:60:1a:be:36:7b:50:f0:97:4b:11:d5:ed:c2:
27:bc:ab:d2:d9:8a:55:bb:d5:fa:d7:18:ff:5a:cc:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:68:8F:77:FF:7B:E4:18:E1:58:43:C0:3A:4B:B3:59:6E:18:33:97
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1b:b4:7b:a2:41:a7:7f:a2:94:58:e9:5d:8e:a3:93:17:93:
b8:14:2c:d3:07:52:48:54:92:fb:8f:3a:c5:4b:71:9d:45:ee:
60:37:5b:ff:ad:b6:9d:06:90:f5:e6:d5:2d:ce:80:4e:c0:84:
f6:6a:c2:6f:b7:c5:d7:d8:b9:0f:d5:65:19:df:7a:8b:2c:90:
62:87:e9:84:98:54:7d:fe:23:27:93:f2:69:9e:49:1d:38:ae:
89:d5:07:10:41:69:9f:7e:ae:c1:c7:91:c0:80:f6:27:b7:2b:
7c:e0:b4:a3:4f:6a:21:fa:a0:3f:48:f2:43:8a:af:d2:3e:bf:
fa:3f:16:a0:dd:ca:08:c8:45:3e:dd:59:7f:93:36:73:88:b7:
b5:57:b6:9a:e3:b5:73:1c:41:45:f9:88:f0:c2:ac:10:b4:bb:
e9:19:dd:48:cb:35:82:70:f1:bc:43:09:26:71:1e:69:ec:f8:
a1:7d:b1:c6:ed:04:da:94:51:03:da:18:2f:6b:75:82:08:a6:
87:91:eb:3f:be:41:cd:f5:7d:68:56:0a:e4:3a:d1:80:cd:20:
41:07:87:b7:90:b0:84:c9:bb:0a:31:2e:de:b9:28:86:06:1c:
73:1b:18:e8:4a:e3:ea:1a:88:f0:d2:cb:be:a1:cc:62:e6:6a:
ab:80:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:37 2025 by rpki-client