Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: K0UPN2livf7rM5jMNVvgKuJOQBl7cJy2ehi9CrVCv1g=
Subject key identifier: 6E:1C:9A:51:E0:12:4C:E2:6C:CA:A0:66:82:4A:78:11:03:AC:52:34
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 0199FBEAAAF634CF84B7456A41DDE1FB993F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0DC8
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: RJDQvFeN1jXmYA7pXfPrhTdzNQ5/Uhl/XmTCcozrZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:aa:f6:34:cf:84:b7:45:6a:41:dd:e1:fb:99:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=6e1c9a51e0124ce26ccaa066824a781103ac5234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:fd:54:db:14:7a:77:e4:ab:81:56:45:0f:
84:f1:74:43:6b:3a:77:bd:2f:86:5b:d9:1d:39:77:
a5:6d:f0:73:30:fb:8c:97:93:24:89:4b:7e:df:a8:
dc:cf:f8:dc:8b:35:f4:a3:06:f3:f1:8f:99:5b:2d:
95:47:15:e3:dc:55:bf:10:c9:57:8b:45:d5:fc:d5:
91:3d:83:e5:df:cb:a2:89:9f:d0:bd:53:32:6b:22:
50:c4:5f:73:da:47:69:f1:ee:18:de:14:52:90:2c:
20:7c:e7:ad:93:eb:ee:f4:ba:29:18:89:89:30:b9:
f6:b2:62:80:b8:1a:27:d4:18:a9:6b:79:70:67:3f:
d6:cc:1d:0e:7c:15:c7:02:a2:34:10:69:cf:f5:4e:
64:85:02:cb:e2:ce:30:e6:67:7e:43:57:0f:14:6e:
5b:a2:c9:74:f6:21:23:8d:67:8b:aa:e5:8b:40:94:
e9:4e:71:f8:7a:1f:f9:c1:01:14:c0:d4:5e:3b:05:
e6:d1:b3:69:da:40:52:88:f9:c4:d4:2e:90:66:99:
d7:5f:e7:c6:bd:34:80:43:ef:37:bd:44:60:1f:ee:
d0:73:c7:34:8a:52:18:6d:73:06:24:fd:21:7d:8e:
e3:8a:6d:d2:03:58:78:12:87:78:77:b9:a3:12:42:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1C:9A:51:E0:12:4C:E2:6C:CA:A0:66:82:4A:78:11:03:AC:52:34
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0f:71:42:51:69:1d:e4:9f:f7:d7:bb:8f:b9:14:2f:24:7c:
f5:bd:6c:1a:31:89:d1:b2:63:24:9a:32:b5:37:b1:c0:74:55:
d7:24:29:34:eb:ad:be:8f:f8:82:c3:99:d3:93:f0:5d:e7:4d:
12:40:c5:c0:d6:a1:25:d6:f9:9a:c5:f4:b7:eb:37:14:b5:e5:
b8:39:b3:1d:3a:54:55:d1:52:b7:11:65:71:d2:1a:a0:14:c0:
50:32:a2:43:c1:68:6e:1a:31:26:8a:4d:e1:7c:da:d9:54:01:
3c:2a:61:da:44:b5:78:ed:55:15:10:78:37:0e:81:b3:fb:c6:
16:05:99:8a:0c:c4:ec:f6:52:77:f1:0f:f0:33:e6:96:0b:80:
62:47:0b:8d:c9:a1:2e:60:96:ef:76:90:f0:87:ba:a5:78:90:
13:5c:a1:94:81:34:36:d9:63:39:21:e6:28:a3:50:9e:0d:ce:
6f:79:4e:a1:1a:74:59:64:c0:61:bd:eb:d6:85:3d:c5:59:3c:
97:a3:0d:b8:e3:be:a8:be:c4:68:48:dd:ba:48:7d:d1:36:6b:
74:ff:9a:d5:99:36:26:4f:41:6a:52:4f:dc:41:29:cd:8e:f6:
6a:6c:e7:21:71:ef:98:2c:44:b6:6b:6c:a7:9e:dc:7c:56:b3:
59:7f:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:41 2025 by rpki-client