Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: PlDoEQ+G0tCjgJWuv/yeyGdtDKxetKS0fmgejCWdK/E=
Subject key identifier: E2:CC:7D:C9:5B:FE:F7:D2:2B:0E:68:BA:B9:3F:0F:05:4D:A6:89:02
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 0198D5F1501BBAE74438D2BA46E280D7006C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0BB4
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=)
2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: 6d1G6JtI98TGK7mkDPm4MtZsjpHWcQMk4THmbJHki7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:50:1b:ba:e7:44:38:d2:ba:46:e2:80:d7:00:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=e2cc7dc95bfef7d22b0e68bab93f0f054da68902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:05:27:53:5b:a1:9f:6e:d8:2f:e6:ec:fe:
cc:56:fd:f1:8a:04:5c:36:b8:03:d0:cf:c5:30:6d:
41:bd:96:6d:57:17:01:b5:fa:8c:70:cc:79:9a:22:
cb:8e:85:63:64:03:97:80:7a:a0:0f:c7:56:62:de:
5f:08:72:84:37:41:4d:ff:d8:70:19:2f:f7:9c:db:
a3:57:d7:b0:17:82:74:8f:3c:a8:b0:8a:d8:82:be:
28:71:61:df:e4:86:fe:91:b2:49:7b:45:ad:21:6a:
6b:e2:c6:7b:43:c7:a3:f5:56:95:78:db:81:a0:00:
1c:98:43:63:fb:9e:02:ef:3b:a6:91:a3:87:72:4a:
2e:82:6f:63:73:e4:00:05:91:80:f5:06:bb:46:44:
3e:49:88:45:6d:85:08:36:86:4b:00:5b:b3:4c:91:
97:61:e9:dd:dc:34:6d:44:a9:5b:17:82:9b:5c:b5:
98:5b:e8:c1:7f:79:9a:6d:68:d6:d1:04:4d:d2:ee:
4d:4c:a1:45:18:09:a1:c3:0e:36:56:95:af:ea:c6:
07:6f:43:f0:24:91:64:02:c2:38:41:17:37:b4:80:
66:0e:41:77:12:71:c5:61:b2:16:c1:c4:7a:6b:aa:
11:9b:4f:54:68:c7:8d:78:2f:90:6a:e8:d6:c3:f7:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:7D:C9:5B:FE:F7:D2:2B:0E:68:BA:B9:3F:0F:05:4D:A6:89:02
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:24:0d:65:32:16:48:3f:f9:70:b8:8f:13:70:fc:dc:2d:15:
1e:10:9e:9c:77:3c:1f:73:44:94:e9:d6:ee:40:97:3c:1b:5a:
22:bf:cb:91:83:bd:53:c7:09:14:97:7d:9c:9a:aa:10:36:8b:
40:08:00:e8:47:0e:06:34:bb:4a:31:41:fd:80:66:90:e1:48:
3e:5a:55:0a:06:10:4f:fc:a6:d4:bd:bd:ad:28:d9:08:79:9b:
3c:f5:63:e4:f0:17:4c:2d:50:52:8e:5d:90:73:f2:7a:74:5e:
a6:59:04:e1:b7:4b:09:05:bd:01:19:2e:73:72:07:64:01:df:
8f:f2:24:5f:36:0e:d9:eb:be:ce:62:81:aa:56:b3:ac:99:c5:
38:2e:87:4b:b5:7f:59:94:c4:e1:85:70:8e:c9:07:60:51:e8:
10:49:ea:cc:05:5d:d5:b9:4d:51:83:4c:a3:2a:3b:ec:71:51:
9e:a8:6b:07:dd:63:c9:6c:85:35:43:05:c4:d9:39:d5:cb:a8:
f5:0f:38:f7:91:93:82:c1:51:9d:4a:71:48:33:2b:5a:80:dc:
9f:c9:34:15:45:55:bc:fb:fc:b3:d7:3f:f2:22:1a:1a:f2:7e:
e3:43:c3:77:f7:db:0e:46:ac:41:8b:e1:c4:b6:c8:0e:08:e8:
45:89:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:50 2025 by rpki-client