Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier: w1LmdDkhbTyyNdXMPgcV+xeu1VilILE8aSAM3wIveAA=
Subject key identifier: F1:F4:D8:3F:46:36:95:5E:C8:65:EF:57:BA:ED:EA:F7:D5:CD:39:38
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 0197BFDA86571ECABA32D538DDE2301F794F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number: 0D41
Signing time: Mon 30 Jun 2025 08:00:58 +0000
Manifest this update: Mon 30 Jun 2025 08:00:58 +0000
Manifest next update: Tue 01 Jul 2025 08:00:58 +0000
Files and hashes: 1: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (hash: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=)
2: ClDShRWVAJsP6NoIbSAj2Ahd24Q.roa (hash: vntq+Z6Tbd8s/QqwS6T999xv/EcabW8VhdgxR1iSPhU=)
3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: XOqq/jHRNboA47JLhzFa+SwjsvoN/PHWneTtKrScxKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:86:57:1e:ca:ba:32:d5:38:dd:e2:30:1f:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Jun 30 08:00:58 2025 GMT
Not After : Jul 1 08:00:58 2025 GMT
Subject: CN=f1f4d83f4636955ec865ef57baedeaf7d5cd3938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:b2:ae:72:76:42:7e:4e:b5:bd:29:02:de:
2b:6f:e3:75:c8:af:d8:c6:c5:4a:b6:03:9f:2b:6c:
0f:23:e1:61:30:6c:8f:19:79:f2:f2:b3:e2:cb:b2:
c7:03:22:1f:96:49:c4:95:9e:73:a9:26:77:9e:3c:
69:fa:7e:60:0a:4c:79:c0:90:10:c6:3f:f9:cf:44:
85:99:51:0a:8b:0a:a4:38:ba:94:fc:54:34:95:b4:
e7:81:13:52:b9:fd:fb:5f:1d:a9:60:74:d5:fd:1e:
be:8b:50:ce:1a:d5:e6:8d:df:ab:a0:e6:34:c8:c1:
42:58:f0:4a:bc:c7:bd:0b:89:4a:60:fd:98:43:07:
aa:b7:64:ef:ff:ad:ac:3f:24:44:2d:d9:c0:89:13:
0b:99:eb:cd:38:ef:11:37:76:20:4a:2d:70:96:d0:
77:d1:70:f8:ae:ea:7f:64:85:da:8b:35:c1:98:83:
d3:32:d5:5e:ff:7d:aa:bd:6b:ce:4e:4e:0f:62:87:
d1:37:bc:9a:1e:51:d8:eb:65:78:5f:b1:ae:01:60:
ee:4b:39:e7:17:aa:3a:70:2f:e4:8d:08:6c:d4:16:
49:08:26:c2:ab:2c:1c:29:79:7a:fd:5e:05:c0:58:
70:5f:86:eb:e4:92:7e:bf:eb:d1:8d:86:dc:e6:a3:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:D8:3F:46:36:95:5E:C8:65:EF:57:BA:ED:EA:F7:D5:CD:39:38
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d8:d6:c4:34:6c:c3:88:2c:37:3d:3d:08:34:92:17:b2:9a:
80:26:0b:36:f5:49:b1:db:b2:34:69:b0:bb:78:a1:b3:8e:17:
4e:2e:b7:56:39:b3:d7:8a:ad:d1:78:c6:74:d9:7e:73:c3:3c:
68:f5:f5:0c:6d:cf:1d:6b:bf:31:9f:47:13:ca:5b:a2:06:5b:
e1:6e:8f:09:a2:35:b1:d1:15:c0:7c:73:ec:fa:8c:f4:46:7a:
4d:14:9a:43:ec:22:f7:b9:c6:2a:24:bb:b7:d0:e7:40:3c:e2:
63:48:bc:13:09:ef:f2:a7:a2:29:43:c4:d4:09:05:79:7c:35:
0a:2c:a6:bf:bd:73:45:93:78:7c:55:2f:35:e5:23:e8:94:d6:
9d:de:65:1b:34:1b:31:b9:97:e8:71:3f:73:f3:5f:6a:2f:fc:
6a:c0:00:42:ca:3f:a9:aa:36:b0:c9:d1:be:d0:22:bc:3c:0f:
7f:47:1c:77:58:ca:c4:ce:ea:3c:59:04:f0:0c:b3:04:b0:58:
fe:22:40:dd:9f:fd:80:e9:f1:f7:dc:c3:76:df:11:7c:42:a5:
73:20:ce:1b:0a:f1:33:1f:59:f5:fb:ab:df:a7:0c:d5:c8:8d:
f8:ff:01:69:9d:4f:95:96:e3:ff:4f:c4:b7:b6:97:6e:3e:9b:
34:84:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:04:06 2025 by rpki-client