Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: iWjAQmNd8W6R14o4Cae0iBzMrBHGTHZnmfXqe2orsfs=
Subject key identifier: 0F:6E:98:71:2C:6A:E8:FD:9E:06:2C:62:AB:FF:39:80:8B:D0:11:3A
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 0198D515D23B4320F58D5AA480B243FB66F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 05C8
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=)
2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: 44tVS6WFLHXq4w7k6e8CxZYxhK0lWErDWBQnWXEX4co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d2:3b:43:20:f5:8d:5a:a4:80:b2:43:fb:66:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=0f6e98712c6ae8fd9e062c62abff39808bd0113a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:4a:d7:36:93:16:43:a8:e5:1b:1a:61:bc:
d5:93:bc:c8:eb:46:b2:c7:cb:9b:62:67:56:33:db:
39:30:e3:eb:40:7c:51:6f:e9:6a:8e:55:b8:a9:0d:
23:c7:86:0c:24:bb:6e:83:0e:09:b0:dc:14:16:b7:
68:f7:b4:64:01:88:e9:80:d2:ef:21:88:7a:ae:8a:
50:61:30:0a:9f:f1:ec:4c:f1:8a:9e:1f:6c:20:f9:
a6:f3:d8:a0:e1:eb:c3:a5:3c:bf:c8:e8:e9:03:c5:
33:41:e8:78:16:04:7e:38:b1:8f:f6:66:2e:21:15:
5f:3b:9d:c8:e8:90:94:76:05:a2:fc:b1:8f:54:be:
f7:49:c3:41:ad:77:39:3e:20:12:75:f0:07:5d:3c:
94:86:42:ff:42:d6:5d:ec:b4:ed:2b:c7:2f:95:60:
14:ed:bd:0e:34:24:57:85:e0:c4:60:a5:ae:ce:e0:
a4:d8:c0:b1:ac:96:ef:bd:08:59:ad:87:1b:47:f0:
e2:ba:fd:bc:c3:1b:9e:7b:49:40:b8:62:56:bb:8b:
2a:7e:c8:4f:13:26:f5:09:4a:3e:8c:67:b7:c0:c4:
4a:22:85:7a:3c:c9:43:e5:22:17:df:20:c9:ab:06:
98:2d:88:0d:e0:23:2f:41:6e:31:29:a0:c2:6b:7c:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6E:98:71:2C:6A:E8:FD:9E:06:2C:62:AB:FF:39:80:8B:D0:11:3A
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:aa:dc:71:a0:e2:e1:17:4e:9c:ab:b9:c3:6e:7b:31:ae:a0:
72:18:21:fe:e5:a4:ab:a8:f1:d2:4f:44:00:c6:c1:d2:5e:d7:
be:19:1c:8a:94:50:59:72:fe:d7:8d:2b:c0:ae:f7:d7:e3:61:
bf:6d:6c:bc:85:b8:ad:4c:8d:76:8e:45:73:d4:af:2a:d6:1e:
f4:0a:7c:8b:43:51:b6:ce:6c:71:d9:27:cf:05:a8:ac:8d:19:
7b:a3:67:4b:76:21:d1:0c:04:4f:4f:5b:0d:b2:56:07:7c:c2:
ae:f3:bf:34:02:4a:93:52:31:e8:8f:4f:d0:9c:f7:48:b5:a2:
fd:16:c2:b3:48:c2:c8:d9:98:34:34:ee:1b:74:4c:de:95:5a:
4f:63:9b:09:ce:ad:65:90:25:07:f0:2c:ab:cc:8f:79:c4:c1:
f8:7b:5b:7c:93:99:88:a5:ef:ab:42:85:1d:6c:1c:30:f9:82:
6a:40:0b:cc:98:7f:96:d4:ad:c8:42:2a:09:f5:56:c2:04:99:
1a:a3:ae:0f:cf:c4:8c:05:a3:7e:8d:f7:e0:24:15:0c:7d:e4:
6f:fc:9e:10:9a:3e:99:64:2d:51:a8:48:5d:4f:87:79:98:76:
a4:bc:19:81:13:13:45:82:4b:23:56:dd:c6:99:35:af:be:ae:
a0:27:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:15 2025 by rpki-client