Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: YAtn5ogkEz8On6NxLqyPunTaqszHCYKlPiSBN/LZil4=
Subject key identifier: 64:E2:59:FB:4C:2D:1C:D4:9C:DB:BF:23:46:A6:51:64:98:6D:BE:BA
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 0198D4E01B47C3C3EB960FBC69C8B0A0B502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0BCE
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: 8mWA/TZ8CSnn75XINRMFi1OfByACPf6zVdgdZKfIYGM=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1b:47:c3:c3:eb:96:0f:bc:69:c8:b0:a0:b5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=64e259fb4c2d1cd49cdbbf2346a65164986dbeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:a0:8d:6e:21:75:80:e3:43:a5:65:96:2c:
fa:1d:f1:49:58:54:d7:fb:1a:8f:41:57:af:48:c6:
6a:67:a5:0a:b5:e7:fb:e2:10:d2:bb:9f:2b:17:d6:
1f:0b:e8:9e:52:70:3a:9d:5a:be:19:f4:fd:47:f5:
77:b3:a4:42:66:b7:92:b2:f9:66:02:ca:87:b6:65:
9b:1b:63:5d:79:1c:93:eb:24:0b:01:85:57:ee:4f:
e2:a2:bd:e0:cd:79:65:39:0a:d7:b0:c0:ee:f9:ad:
71:55:9c:aa:99:a6:d9:e2:fa:6f:ce:3e:c5:e6:a1:
19:e1:32:34:03:ab:22:88:b6:79:d2:e0:fe:0d:81:
0d:09:2a:fa:7b:57:4d:df:7f:13:f1:ad:27:3d:f5:
52:13:91:dd:8f:ee:2f:ee:75:60:8c:e8:15:ac:14:
62:34:9a:e4:93:73:09:42:f4:ba:15:73:69:ec:1e:
23:04:08:65:ca:0c:52:10:1c:e2:1f:52:ca:e6:5c:
e0:8c:21:26:4a:b4:61:1b:6d:d5:c6:b8:1f:87:e0:
89:8c:6c:83:c4:27:67:a6:e8:ab:be:0c:af:15:29:
8d:20:9e:59:e8:46:c2:8d:b0:99:d9:46:82:e8:97:
c4:64:1e:b1:d5:a1:7d:78:59:07:8a:4e:3a:c3:2b:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:59:FB:4C:2D:1C:D4:9C:DB:BF:23:46:A6:51:64:98:6D:BE:BA
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:21:38:de:8d:69:0f:6a:11:df:32:0f:f3:25:d4:7e:a7:d5:
84:94:42:7b:8f:29:6e:7b:4a:7b:cb:fd:8b:3f:78:90:ff:7d:
ce:9b:e8:d8:a2:4c:c1:02:e8:f6:ff:77:7f:21:9e:80:57:dd:
91:ad:49:5f:40:85:f4:8b:a5:a2:98:fb:63:95:a2:98:23:4d:
b4:00:61:22:4f:56:b5:18:28:42:27:8c:1e:d1:7a:f3:98:03:
fd:dc:bd:1b:5c:bd:f0:39:9b:ce:a4:90:d0:3b:81:cf:65:44:
10:7f:03:8e:1f:c0:ba:5b:1b:0c:0e:5a:30:ce:5b:9c:56:98:
d6:e9:72:0b:56:d1:e7:54:48:4a:0a:09:5c:11:d6:41:e8:7c:
6d:3d:86:7c:89:fb:d6:fd:53:8c:a2:d5:58:a9:1b:09:f9:b8:
c5:5d:2d:7d:30:4d:ea:26:dc:c3:26:af:5c:f0:9c:63:91:36:
04:26:9e:c1:52:9a:41:bf:45:56:7b:88:93:dd:51:25:16:93:
6d:1e:13:2d:63:b9:99:9b:c7:22:93:16:7f:1b:6b:5d:c7:2a:
5e:ac:83:0d:81:bc:40:12:5d:bd:a3:ee:df:35:37:c3:1d:09:
f3:00:82:ca:2d:a1:64:c0:8f:05:f5:d3:04:57:84:bf:1a:c7:
d5:fe:ec:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:29 2025 by rpki-client