Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File: gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier: fMC9TjDW13YC9oTpcZRQH3s8WYxtwa1oFyKpqGjU9cg=
Subject key identifier: B4:54:15:F0:E6:3C:75:82:17:BB:2F:CE:D1:3A:AE:56:FA:63:2C:5E
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 0198D4A80C44F462B5243FFA6242BB99F4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number: 15A5
Signing time: Sat 23 Aug 2025 02:00:39 +0000
Manifest this update: Sat 23 Aug 2025 02:00:39 +0000
Manifest next update: Sun 24 Aug 2025 02:00:39 +0000
Files and hashes: 1: 7bfhk4avMv3aXwEYlLbXhXoy75k.roa (hash: ahW1+x6JyHSj5mcCjtaoHK41xJuZSnTDOh9RfWnmSUA=)
2: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: KwdQciuPUM6sVx/JntxE9uE/idrJJLWYWzk+kZc9Lko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0c:44:f4:62:b5:24:3f:fa:62:42:bb:99:f4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: Aug 23 02:00:39 2025 GMT
Not After : Aug 24 02:00:39 2025 GMT
Subject: CN=b45415f0e63c758217bb2fced13aae56fa632c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:53:51:f3:59:44:f0:4f:ee:af:26:41:c1:
7b:26:7b:5a:c0:a7:00:5e:a1:a4:6c:b8:0f:c8:31:
ea:9d:17:f5:f2:e4:2a:a4:0c:b3:bb:40:6f:ba:2e:
35:c9:f1:af:b2:34:9f:40:c0:7c:d5:a7:b1:53:df:
b2:ff:68:7a:49:b1:a9:7d:7b:ec:0b:6b:ee:59:29:
f9:4e:7a:a2:10:0d:98:3a:55:94:a6:fc:d7:3e:82:
56:4b:d8:8e:e4:00:97:0d:78:13:af:51:35:83:d3:
ed:11:0c:cf:18:e3:7c:52:a5:bd:fd:9b:d2:7a:b5:
58:9d:8e:53:4f:22:a5:db:aa:39:5a:b1:d3:27:31:
99:d8:d6:50:f8:2f:39:5f:99:d8:30:45:3a:25:a4:
3d:5e:60:c8:9c:2d:d7:1c:bb:b3:6c:6a:c8:44:91:
dc:89:8e:f5:3f:15:3c:0a:7e:9b:fe:af:79:99:94:
29:06:c7:12:30:fd:81:67:06:eb:e2:c5:70:60:3e:
0e:e3:56:63:a4:25:99:3b:af:6c:a6:a7:de:31:30:
63:d1:cb:a2:f3:2d:a0:cb:15:e9:84:42:6d:b0:86:
2c:ff:da:60:f5:1c:0b:ce:af:c8:20:e5:73:14:d0:
57:9b:8a:44:8c:7f:32:7c:30:2d:ee:ae:57:83:7c:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:54:15:F0:E6:3C:75:82:17:BB:2F:CE:D1:3A:AE:56:FA:63:2C:5E
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6b:e7:e6:0b:5e:62:df:a7:ec:c7:5c:40:f2:13:66:0c:d4:
cb:f0:c6:79:43:96:33:d7:b2:d2:51:fd:13:9c:00:d7:b7:bb:
84:43:02:81:03:a2:37:99:1b:f9:4a:fa:0f:d9:f0:c6:a2:27:
6a:98:60:52:d2:46:f1:ac:99:3d:45:2e:e6:3a:a2:d8:e7:48:
98:a5:85:3d:11:36:77:97:87:b3:f9:42:f5:2d:6e:89:5c:c0:
52:fe:74:7d:f8:e6:72:da:62:78:22:ce:7f:77:c5:82:f1:d2:
9b:ca:a2:1c:84:44:dc:b8:52:19:d5:5a:bf:4e:2b:f8:67:98:
53:33:e4:a2:59:7f:b8:23:f6:89:1a:65:50:c7:be:95:06:a8:
20:82:2d:e1:38:ce:24:ba:29:e8:0e:6d:d4:a2:db:12:71:98:
cc:0e:eb:0c:1e:73:c6:7f:e3:9e:e7:c3:4b:ba:b5:c8:3f:e0:
4c:c4:e6:0a:ed:51:74:dd:55:4b:8b:5b:49:e6:38:63:ae:16:
38:19:00:f5:3a:8f:e7:cb:a9:68:e3:1f:cd:18:8a:24:c1:fc:
b4:60:cd:2a:6f:84:98:8e:ff:81:10:1c:2d:d6:9a:b5:c6:3e:
21:37:14:b6:10:c0:cc:42:09:54:48:54:25:e3:e4:d3:88:c5:
f4:9e:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:28 2025 by rpki-client