
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: mndVLsYLMbzf3uNUg0I/wPEgs43VADz+Ea23TkYJIjw=
Subject key identifier: FE:59:99:01:A5:02:2E:1B:9B:CC:3F:5D:23:11:67:B6:5B:75:C7:B3
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 0198D404D864BB5CD10632525377EEC72096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 0559
Signing time: Fri 22 Aug 2025 23:02:23 +0000
Manifest this update: Fri 22 Aug 2025 23:02:23 +0000
Manifest next update: Sat 23 Aug 2025 23:02:23 +0000
Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: AixiBxlkkNORryQMVP3jFkH6DulNokznSs/Fzqv6+VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d8:64:bb:5c:d1:06:32:52:53:77:ee:c7:20:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Aug 22 23:02:23 2025 GMT
Not After : Aug 23 23:02:23 2025 GMT
Subject: CN=fe599901a5022e1b9bcc3f5d231167b65b75c7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:e0:14:93:2c:72:2c:28:8b:c6:3b:d2:8e:
80:b2:b5:eb:66:47:f0:3e:e6:db:4a:2e:73:00:77:
96:ab:b9:30:1c:65:66:59:91:d6:07:c8:7d:d8:00:
8c:58:ec:56:1b:bd:b5:d5:20:5b:dc:66:da:ed:11:
99:f2:f3:b0:6b:99:99:df:35:43:bf:0a:ad:73:b2:
17:e5:a4:8e:78:71:58:7b:0a:8f:76:63:c2:52:7b:
83:b4:9b:4c:d8:7d:5c:58:06:7b:5b:99:f4:26:a9:
3c:3f:65:87:bd:7d:d9:b1:7a:c5:10:6b:3c:2b:ef:
41:21:0a:84:19:cf:0a:4a:cf:69:1f:6b:94:10:1b:
83:c6:bd:b8:17:20:6d:86:7a:ba:48:fd:fe:8a:3f:
17:5b:5a:4b:e8:2b:f1:f8:2c:3f:b6:04:d5:ad:24:
ff:25:9a:2b:1f:de:3e:95:9c:18:b7:87:4f:0c:33:
a7:be:42:4e:8d:a3:f4:64:03:ac:1d:cf:00:7c:4f:
37:23:3f:ac:5d:44:35:61:6f:66:cf:a1:07:c5:56:
e6:be:6b:06:ba:df:f3:8b:f6:63:90:89:c7:3e:28:
51:e0:20:b2:c9:45:a1:da:53:a4:f9:e1:c8:de:11:
82:ea:45:07:33:93:66:9e:01:38:43:6c:d8:2c:9e:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:59:99:01:A5:02:2E:1B:9B:CC:3F:5D:23:11:67:B6:5B:75:C7:B3
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8a:da:8b:0e:cb:98:5d:4b:c5:92:71:d6:c0:d6:c2:f7:54:
24:20:bb:d6:82:4a:52:7d:dd:a3:14:8f:fc:74:87:b0:a6:e3:
59:9f:5f:99:ac:76:c2:41:f4:49:76:81:68:9e:17:ce:9e:6b:
57:28:88:40:80:fc:1e:35:72:30:1c:31:ce:f0:1c:9a:8a:9b:
30:2e:92:1e:23:e5:4e:e4:89:99:4b:b4:86:bd:a4:52:7d:c2:
bb:6c:cd:89:d6:4f:a6:92:ad:87:f2:56:f5:e3:7c:ce:a6:56:
25:e6:bb:df:ff:a9:3e:bc:e3:4d:35:36:66:7b:40:a1:50:3e:
ca:4c:3d:07:3c:00:11:6e:bb:de:87:5e:1b:de:2b:f8:1f:da:
df:eb:b8:7a:a1:b6:18:8a:4d:fd:f0:0a:93:45:ab:9a:75:e9:
af:07:80:d2:d8:4b:84:c7:50:ab:20:b7:7b:e4:67:30:a0:f1:
63:6c:1c:82:63:0b:cc:07:a4:76:96:3a:ca:db:b5:dd:bc:69:
6c:43:89:4b:88:dd:0a:13:31:8f:02:0f:d5:2a:48:82:b2:25:
ae:58:c0:1e:b6:b1:8d:f2:da:5f:32:c4:01:27:7a:6d:0a:2c:
55:30:68:f6:5c:f7:c5:e3:b9:4e:81:8e:5c:72:98:73:bb:61:
05:b8:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:55 2025 by rpki-client