Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: dbZKpzBZj9ju5GIQ5NlnZAreEqZRFoeb/S6WlCAPAFY=
Subject key identifier: 17:35:F3:DA:EB:80:36:4A:BD:08:2E:F6:1C:71:21:B9:6E:0E:18:99
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 0197B6D73DA312323DC3B38B5A7DF346E9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 1275
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: cXUVInGNZoaXN3i2qLaRTPmJ9Vhtp9u/oRuYO4RGgq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3d:a3:12:32:3d:c3:b3:8b:5a:7d:f3:46:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=1735f3daeb80364abd082ef61c7121b96e0e1899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:aa:7e:f7:37:41:aa:93:02:fd:d4:29:80:
6b:19:73:76:23:4a:e1:57:f9:81:aa:4c:84:1b:4e:
03:e1:00:3a:1f:42:1a:9a:0d:25:2f:ae:e2:47:2c:
91:f3:72:d7:6d:77:22:4e:7e:8e:71:32:fd:8d:4f:
18:f2:06:3a:34:d9:ab:84:fa:9c:4b:06:14:74:d3:
dd:8e:95:0c:0d:de:b8:76:8b:c5:b3:82:06:1c:63:
5f:aa:fc:9f:4f:2d:b1:73:3e:07:32:e0:9b:9d:1d:
db:b6:b2:f8:bb:53:bd:c8:dd:b9:70:4c:20:2e:5e:
46:6b:9b:15:c2:73:02:c6:6d:1d:15:73:20:29:8a:
13:ed:95:4e:ff:ea:b8:e3:55:5f:f3:d8:58:dc:b1:
16:4f:f8:a5:ec:2a:cd:67:23:fb:be:32:44:11:35:
c1:8c:20:a8:30:ae:a9:2e:a4:0d:32:7e:8f:35:cb:
c0:1d:3f:06:2c:85:b0:c2:57:97:f4:26:84:92:94:
a2:09:09:b1:de:11:01:e4:a8:03:92:15:40:03:42:
83:4e:6f:5a:4e:67:e7:02:bc:87:8a:5e:47:ee:2b:
6d:f6:ce:3d:54:cd:dd:8a:c2:f7:69:fb:ca:9f:66:
ad:7d:e6:fd:bc:11:bb:bd:ba:6b:b3:7f:f9:5c:51:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:F3:DA:EB:80:36:4A:BD:08:2E:F6:1C:71:21:B9:6E:0E:18:99
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b6:b8:1a:c3:bc:a7:37:92:b8:4f:90:33:62:a9:51:70:2b:
fc:4e:77:0f:8c:a5:ea:c3:01:c8:dc:2e:e0:22:41:fa:e0:d6:
e0:7a:df:45:61:70:5c:76:99:6b:8b:c8:88:79:de:93:f2:23:
88:c7:de:4a:8d:6d:56:c3:1a:14:34:40:e3:89:e3:86:c0:24:
e9:e1:d9:ed:16:87:40:72:26:a9:77:0d:93:49:80:0c:92:d4:
18:0d:0e:70:1c:45:8f:70:a7:1f:8d:e4:5f:7c:2f:cd:17:73:
9f:62:9a:9a:fe:b4:51:af:ad:c8:98:fb:65:83:43:41:d0:ca:
ef:9b:49:c0:d2:e0:07:42:57:65:4f:35:39:da:45:88:77:65:
b6:f5:08:4a:4f:5c:0e:3d:45:75:bc:ff:8a:33:06:a2:5f:96:
1c:8e:43:52:22:e9:8d:a2:b7:22:c5:a3:d1:75:e4:6a:96:2c:
a6:06:80:98:12:c8:9f:36:83:ff:14:4f:af:61:0f:61:3e:8c:
45:d3:2f:eb:38:04:01:eb:d4:31:f6:2e:e2:5d:80:d1:32:cd:
3d:cd:0e:9b:4d:d7:da:ca:18:66:46:43:ad:be:47:55:d8:88:
c0:92:98:5c:cc:87:fc:54:f4:7c:c3:5b:86:fe:de:a8:ab:3b:
36:3b:8a:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21z2jEjI9w7OLWn3zRunzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzJjMDdmYWEyMmZlYjU5NjlmZjFmM2I0OTA1ZDFlYTFl
NGRlZWIwHhcNMjUwNjI4MTQwMDQ4WhcNMjUwNjI5MTQwMDQ4WjAzMTEwLwYDVQQD
EygxNzM1ZjNkYWViODAzNjRhYmQwODJlZjYxYzcxMjFiOTZlMGUxODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQCqfvc3QaqTAv3UKYBrGXN2I0rh
V/mBqkyEG04D4QA6H0Iamg0lL67iRyyR83LXbXciTn6OcTL9jU8Y8gY6NNmrhPqc
SwYUdNPdjpUMDd64dovFs4IGHGNfqvyfTy2xcz4HMuCbnR3btrL4u1O9yN25cEwg
Ll5Ga5sVwnMCxm0dFXMgKYoT7ZVO/+q441Vf89hY3LEWT/il7CrNZyP7vjJEETXB
jCCoMK6pLqQNMn6PNcvAHT8GLIWwwleX9CaEkpSiCQmx3hEB5KgDkhVAA0KDTm9a
TmfnAryHil5H7itt9s49VM3disL3afvKn2atfeb9vBG7vbprs3/5XFE22QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc189rrgDZKvQgu9hxxIbluDhiZMB8GA1UdIwQY
MBaAFIAywH+qIv61lp/x87SQXR6h5N7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUt
ODcwY2M1ZjQzY2Q1LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUtODcwY2M1ZjQzY2Q1
LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhra4GsO8
pzeSuE+QM2KpUXAr/E53D4yl6sMByNwu4CJB+uDW4HrfRWFwXHaZa4vIiHnek/Ij
iMfeSo1tVsMaFDRA44njhsAk6eHZ7RaHQHImqXcNk0mADJLUGA0OcBxFj3CnH43k
X3wvzRdzn2Kamv60Ua+tyJj7ZYNDQdDK75tJwNLgB0JXZU81OdpFiHdltvUISk9c
Dj1Fdbz/ijMGol+WHI5DUiLpjaK3IsWj0XXkapYspgaAmBLInzaD/xRPr2EPYT6M
RdMv6zgEAevUMfYu4l2A0TLNPc0Om03X2soYZkZDrb5HVdiIwJKYXMyH/FT0fMNb
hv7eqKs7NjuK2A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:04 2025 by rpki-client