Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: A27a3WK9baPbmaM0t47e+g+Ph1dLTusxHElcO09v8og=
Subject key identifier: 1D:75:8E:2B:60:73:72:FD:02:18:CC:A4:D9:AE:91:2C:16:05:DE:4E
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 0198D4E0ADDAFE6B4FD8BB885E89B3A07890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 1602
Signing time: Sat 23 Aug 2025 03:02:30 +0000
Manifest this update: Sat 23 Aug 2025 03:02:30 +0000
Manifest next update: Sun 24 Aug 2025 03:02:30 +0000
Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
2: QsA63htkLwfYnYHs-Kq4o8mj9CE.roa (hash: rn3uqwJBUFxLOERoWp4bxdCoGJiytcYNcQK3zAQq29M=)
3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: aJsM38kV/aUE67F8JZRaOF43r0R1cVsTr0so6zMA/u0=)
7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ad:da:fe:6b:4f:d8:bb:88:5e:89:b3:a0:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Aug 23 03:02:30 2025 GMT
Not After : Aug 24 03:02:30 2025 GMT
Subject: CN=1d758e2b607372fd0218cca4d9ae912c1605de4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:8f:db:67:24:ed:6a:12:2d:6d:c2:0c:48:
f5:72:35:e7:84:22:af:26:53:68:ea:7a:f3:f2:a1:
fd:8c:e5:c5:7a:36:22:20:ce:a2:39:4f:af:13:2d:
99:4d:37:9b:2a:b1:90:41:91:d0:20:a8:4a:6a:b4:
ac:7e:61:b9:d9:0a:37:b5:49:6c:4e:9f:1b:b1:7d:
03:1d:5a:8a:68:e0:6c:7c:8f:3a:c4:17:62:b0:e8:
24:cd:fb:c1:2c:fd:17:8a:c5:c4:75:19:62:16:cf:
02:91:6a:87:68:31:7b:42:17:95:bb:3a:cd:d3:eb:
7e:6e:bb:ee:f4:a7:e4:a5:b4:5a:31:21:4b:9c:20:
8e:a7:d8:76:46:a2:9e:7e:ee:63:6e:82:1d:66:70:
09:46:bc:02:a9:29:73:91:4b:6f:7d:f3:4e:58:c3:
69:81:2e:76:df:28:ed:9d:dc:04:50:8d:3c:51:c2:
1b:03:36:58:af:a6:2f:c4:4a:8d:e0:c1:89:2e:d6:
c1:06:52:5b:53:1c:9d:d5:a8:49:76:4c:c4:f2:ae:
c1:52:7b:6a:b9:6b:fb:28:02:50:49:21:87:c1:39:
68:3b:98:73:42:61:b5:db:6a:a0:5e:28:92:77:3e:
ec:ed:5f:fd:72:db:1a:aa:4f:ca:4c:a4:a1:7f:0a:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:8E:2B:60:73:72:FD:02:18:CC:A4:D9:AE:91:2C:16:05:DE:4E
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fa:3a:b1:f4:07:9f:97:73:08:35:ee:0c:05:83:3f:d6:f0:
8f:7b:50:5a:39:92:50:05:fb:9f:f0:82:e2:38:53:af:25:23:
92:f7:3d:6e:0b:24:3b:51:69:92:7a:bd:c0:ac:42:c2:fa:6d:
de:07:a4:e2:c1:6b:07:96:77:8e:53:9a:ac:65:ed:78:4a:65:
0e:8d:e2:8e:c5:22:cc:3c:90:11:fb:b2:de:19:a8:fc:9d:58:
17:c3:1b:c5:0a:07:f8:9e:d7:35:ed:01:32:80:3a:23:de:ed:
98:8a:00:a9:db:b7:1a:f6:0c:33:a0:4b:28:e1:bc:d6:98:7c:
c5:8c:0a:3e:a3:3b:ae:de:e4:60:68:0d:04:3b:35:7e:74:00:
4a:14:de:18:a7:86:5f:c4:a4:4d:e5:b5:b3:f5:0b:c6:30:85:
ac:fb:9f:e7:78:68:3f:92:c2:29:4b:a6:68:d6:9e:c0:02:98:
3c:11:fb:eb:cb:93:91:4b:0b:e9:90:4a:96:5d:06:7a:81:bb:
b0:0a:b3:f6:cd:ea:cb:21:f3:1e:9d:0b:e8:d4:98:bf:99:7e:
54:b4:b1:41:71:b5:4c:48:b1:de:cc:cf:f8:64:3b:f7:09:bd:
e2:81:0b:38:ba:d3:31:75:12:fc:e4:f9:cb:54:79:b7:0f:71:
81:e2:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:16 2025 by rpki-client