Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: dihhjP7xFaMmcC5U+oub2XEnAhf5oqWjA5nx1yob8pE=
Subject key identifier: 42:79:FE:85:37:78:72:51:41:35:C1:CD:82:DB:2E:75:A6:15:D4:6F
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 0198D6CDF1900FA746CCC218F1A579E35C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0D3D
Signing time: Sat 23 Aug 2025 12:01:17 +0000
Manifest this update: Sat 23 Aug 2025 12:01:17 +0000
Manifest next update: Sun 24 Aug 2025 12:01:17 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: L47Uxtes/uQf8eKaqJQwweE2lE88qM62gn24wBG2b/w=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:f1:90:0f:a7:46:cc:c2:18:f1:a5:79:e3:5c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Aug 23 12:01:17 2025 GMT
Not After : Aug 24 12:01:17 2025 GMT
Subject: CN=4279fe85377872514135c1cd82db2e75a615d46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:29:c2:9e:17:d3:f5:bb:ff:c5:83:42:e9:
5e:4f:95:31:07:6b:26:ed:e6:22:3e:27:5d:7e:2f:
e2:bb:d1:35:d6:73:52:e4:eb:1d:50:35:88:ec:4b:
b7:27:c1:d5:aa:3c:f4:f2:4b:f8:65:65:e1:ea:18:
1c:e4:27:c2:36:a2:2c:aa:ee:4f:b4:4f:57:cc:4b:
39:a3:87:79:68:90:9f:86:ec:29:da:59:4e:a5:fe:
a5:48:08:3c:9f:e2:cf:7b:40:46:52:bc:94:0b:75:
68:3f:0a:c2:ec:11:56:56:d9:e4:34:27:88:86:24:
bb:15:16:ef:55:13:b2:31:dc:3a:6f:0c:da:46:6a:
5f:25:da:18:73:63:8f:f6:a3:b7:c0:eb:89:f1:3c:
9b:c7:62:fa:6c:f1:5b:8f:81:d1:18:fd:df:40:fd:
58:fd:97:24:c1:e2:7e:f8:65:55:09:44:54:08:e7:
4a:d4:fd:88:53:b7:5d:66:75:22:58:de:5c:c9:31:
1d:ed:ce:bc:88:a5:44:5d:c6:50:15:1b:44:75:b9:
fd:5c:1b:a1:94:4f:05:6f:81:ec:47:05:19:96:1c:
db:c3:e6:55:80:3f:fb:35:83:b0:b6:8b:a3:86:19:
18:4a:d7:94:dd:27:27:39:0a:b5:29:33:2b:58:d1:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:FE:85:37:78:72:51:41:35:C1:CD:82:DB:2E:75:A6:15:D4:6F
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:1c:2a:7a:68:64:b2:ce:b2:58:5f:df:8f:d6:c7:fb:d9:
69:ca:ee:f8:c0:f2:83:4e:de:cd:32:5e:28:96:ea:44:5b:16:
ea:ca:1d:01:56:5c:d7:85:a0:dc:96:37:42:b5:87:8c:f3:15:
5d:bc:09:c4:8e:1a:38:fc:22:15:1e:a3:bb:75:a2:07:b7:78:
2c:59:95:7f:90:1a:73:56:ff:e3:07:4c:a5:80:31:f9:d8:55:
69:ef:94:4d:3a:4c:78:34:da:5f:d5:0c:51:a5:3a:c6:a5:7f:
4d:73:f1:fa:2a:ef:76:a5:c1:3f:4d:58:9f:d6:f8:9a:53:87:
67:e5:ba:7a:25:49:af:22:fb:fe:8e:e6:9e:9a:ad:9c:75:25:
55:50:ec:c7:63:f2:88:26:f5:14:07:87:84:82:e8:a3:6d:55:
79:b8:ab:34:8e:df:60:d0:7b:66:da:79:b4:d8:3c:39:16:07:
8c:c7:32:2f:6c:af:a4:8d:89:be:08:91:0a:cf:a0:a4:08:2a:
b2:96:60:fb:1a:27:07:d3:c8:75:8c:27:b3:3e:93:eb:a0:b9:
ee:1d:93:a4:d0:8b:73:30:94:9c:83:eb:ae:60:b5:cf:97:51:
35:6b:f9:f0:d6:3e:8f:40:25:19:83:10:14:0a:41:e4:1c:fa:
15:04:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:55:58 2025 by rpki-client