Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: phRwcxHJOYyPQm5n2eEqwN9LQdh2UfN9qC5woIXdPPw=
Subject key identifier: 21:3F:35:9E:EC:2F:16:0D:39:FE:AA:5B:E4:9B:BA:7D:D4:F7:C1:6D
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 0198D4A7FFBE14CB7CC3694F51007EC20FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 1309
Signing time: Sat 23 Aug 2025 02:00:36 +0000
Manifest this update: Sat 23 Aug 2025 02:00:36 +0000
Manifest next update: Sun 24 Aug 2025 02:00:36 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: acyBhjfrUTOA4cPJyKDrlYC4cw84hDbCK7PRiVZsSvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ff:be:14:cb:7c:c3:69:4f:51:00:7e:c2:0f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Aug 23 02:00:36 2025 GMT
Not After : Aug 24 02:00:36 2025 GMT
Subject: CN=213f359eec2f160d39feaa5be49bba7dd4f7c16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:ce:5e:8f:44:24:97:74:05:17:70:3e:84:
1d:0a:cf:5a:33:c9:c0:85:8f:eb:a7:b8:9a:13:f5:
9e:20:cf:90:0b:28:d7:f2:39:5e:a0:b6:cb:a9:57:
7b:d0:03:d7:59:c4:0e:f5:ea:46:b9:b7:56:3e:58:
7c:6b:95:6e:14:c7:d2:6e:4e:a7:18:63:2e:a2:34:
95:3c:87:4c:9b:76:c8:9b:fd:38:2b:9a:5f:d9:77:
f2:91:88:2a:23:c5:e2:13:24:d6:13:5f:85:68:bd:
32:49:65:e8:3a:2f:01:20:b7:e1:e5:94:51:27:d2:
74:d5:ec:70:db:05:28:12:07:f0:d7:2c:07:41:87:
5b:d7:2e:f5:18:52:da:d4:6a:84:73:76:9d:fe:de:
cc:48:b7:d5:53:71:d3:15:08:f7:04:77:a1:0a:5c:
c7:22:9e:5f:f7:02:ce:3f:02:24:07:87:1f:cf:cf:
f2:cc:47:96:0f:f1:29:1a:0f:ca:8b:5c:c8:37:12:
6b:15:59:c0:09:2f:47:93:88:48:95:25:44:fa:45:
03:32:a9:6b:bf:90:5b:9c:57:22:06:ce:7e:25:33:
a7:2b:ba:eb:29:b9:44:89:6c:80:2f:09:0c:61:39:
24:ef:85:f9:03:b5:86:f1:d1:18:48:2d:52:34:5d:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:35:9E:EC:2F:16:0D:39:FE:AA:5B:E4:9B:BA:7D:D4:F7:C1:6D
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1f:8e:6a:3d:bf:c5:2a:0b:f4:31:c1:0c:61:9a:1d:b5:16:
d8:10:fc:37:2d:ee:4b:f5:9d:66:07:67:01:88:34:ca:af:14:
df:85:9e:44:c3:92:3a:2e:ad:a9:43:71:03:12:04:55:45:30:
17:4f:45:ed:51:7e:ac:5b:99:eb:aa:c7:0b:f8:82:22:95:54:
29:21:e0:1a:16:d1:43:74:65:52:a9:15:ad:6f:c3:f5:ed:9e:
5c:ad:e8:9f:3a:b2:8e:73:29:4c:d5:ec:96:7b:20:f6:c0:f1:
df:39:d2:7f:ee:ea:e1:f9:b2:cb:57:e4:69:42:7f:6e:25:18:
cb:35:b6:c7:6a:8a:03:c4:a3:92:68:1a:9a:2a:c7:bc:96:46:
82:77:bb:8f:18:48:85:a7:ac:66:04:ac:7b:fd:bd:df:b8:6b:
e0:ff:bd:ee:66:55:12:f4:a3:8c:6b:03:92:53:53:b3:eb:d6:
ea:36:80:8c:f1:30:1e:af:5d:10:b7:34:8e:9d:22:70:a4:fe:
70:b9:a1:3d:d4:e0:14:a0:28:8f:37:ec:aa:1b:18:35:13:59:
a2:e1:84:ee:ec:90:3e:27:c6:e7:cd:f6:68:e6:58:3e:b9:d2:
3d:39:0e:03:d0:1c:b0:d1:67:e6:e9:49:66:4c:31:81:5d:eb:
0f:0b:63:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp/++FMt8w2lPUQB+wg/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzJjMDdmYWEyMmZlYjU5NjlmZjFmM2I0OTA1ZDFlYTFl
NGRlZWIwHhcNMjUwODIzMDIwMDM2WhcNMjUwODI0MDIwMDM2WjAzMTEwLwYDVQQD
EygyMTNmMzU5ZWVjMmYxNjBkMzlmZWFhNWJlNDliYmE3ZGQ0ZjdjMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+vOXo9EJJd0BRdwPoQdCs9aM8nA
hY/rp7iaE/WeIM+QCyjX8jleoLbLqVd70APXWcQO9epGubdWPlh8a5VuFMfSbk6n
GGMuojSVPIdMm3bIm/04K5pf2XfykYgqI8XiEyTWE1+FaL0ySWXoOi8BILfh5ZRR
J9J01exw2wUoEgfw1ywHQYdb1y71GFLa1GqEc3ad/t7MSLfVU3HTFQj3BHehClzH
Ip5f9wLOPwIkB4cfz8/yzEeWD/EpGg/Ki1zINxJrFVnACS9Hk4hIlSVE+kUDMqlr
v5BbnFciBs5+JTOnK7rrKblEiWyALwkMYTkk74X5A7WG8dEYSC1SNF2/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE/NZ7sLxYNOf6qW+Sbun3U98FtMB8GA1UdIwQY
MBaAFIAywH+qIv61lp/x87SQXR6h5N7rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUt
ODcwY2M1ZjQzY2Q1LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOTZhYzMtMzk5MC00NWFhLWI0OGUtODcwY2M1ZjQzY2Q1
LzEvZ0RMQWY2b2lfcldXbl9IenRKQmRIcUhrM3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbx+Oaj2/
xSoL9DHBDGGaHbUW2BD8Ny3uS/WdZgdnAYg0yq8U34WeRMOSOi6tqUNxAxIEVUUw
F09F7VF+rFuZ66rHC/iCIpVUKSHgGhbRQ3RlUqkVrW/D9e2eXK3onzqyjnMpTNXs
lnsg9sDx3znSf+7q4fmyy1fkaUJ/biUYyzW2x2qKA8SjkmgamirHvJZGgne7jxhI
haesZgSse/2937hr4P+97mZVEvSjjGsDklNTs+vW6jaAjPEwHq9dELc0jp0icKT+
cLmhPdTgFKAojzfsqhsYNRNZouGE7uyQPifG5832aOZYPrnSPTkOA9AcsNFn5ulJ
ZkwxgV3rDwtj3Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:10 2025 by rpki-client