Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier: xloAKUvyTXNhQ9iJMJce4vOFkgtqhaUbnMC4AKiHmiY=
Subject key identifier: CC:86:06:B8:1E:71:58:68:95:DF:FB:EC:B4:50:C0:8E:3A:D1:AC:97
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 0197C5A600167A932EDD923961AB9E747A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number: 0DFF
Signing time: Tue 01 Jul 2025 11:01:19 +0000
Manifest this update: Tue 01 Jul 2025 11:01:19 +0000
Manifest next update: Wed 02 Jul 2025 11:01:19 +0000
Files and hashes: 1: LGI_BMqz48rF1CAQFBrnzf381U0.roa (hash: eJvU6iSIuiB2ZVQ2ar/OXbcHw5p8L+QuWzmrOM6M7qg=)
2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: JcwHvyU9hBLHS5wL+To2NLnmwiA7wyJBB0FD9hanR6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a6:00:16:7a:93:2e:dd:92:39:61:ab:9e:74:7a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Jul 1 11:01:19 2025 GMT
Not After : Jul 2 11:01:19 2025 GMT
Subject: CN=cc8606b81e71586895dffbecb450c08e3ad1ac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:49:61:d0:de:90:4d:af:61:ad:09:44:98:
e5:05:24:a1:1b:e6:5b:4b:56:7e:35:3a:2c:2a:f1:
37:fe:65:93:50:9a:5d:dd:36:2d:8c:ea:35:47:d5:
26:86:ee:d1:eb:48:05:4c:8f:6b:12:b5:ec:07:fd:
11:14:ab:e6:36:51:cf:e3:e4:2d:93:07:e2:50:82:
d8:c4:5a:48:87:f5:d7:1a:28:93:c8:25:55:96:ab:
61:5f:79:ac:92:20:f8:9c:64:cb:f5:cd:75:cd:d2:
14:59:2c:1b:dc:b4:52:7d:9e:97:ae:11:82:8e:58:
b0:7f:20:4f:db:17:84:49:e7:7f:d0:6e:b5:32:3a:
24:4b:34:eb:65:d9:c4:67:80:55:3e:f3:8d:64:61:
9f:52:a1:70:88:36:3c:dc:c2:90:88:0a:93:f2:e0:
01:55:16:ee:df:80:9d:8a:4e:6b:a9:f7:b9:66:30:
0a:1d:72:b0:f3:ed:db:09:a9:d1:d2:2d:33:f6:fd:
dd:f0:00:b7:2c:04:8d:02:c7:77:db:0c:ec:16:5a:
d5:8b:4b:e3:f4:15:6f:aa:b7:df:00:ac:8a:71:bd:
7f:2f:04:fc:ae:94:1e:aa:82:4d:ff:eb:78:14:79:
39:41:ec:9b:06:ca:20:32:87:06:a2:4e:36:2d:7e:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:06:B8:1E:71:58:68:95:DF:FB:EC:B4:50:C0:8E:3A:D1:AC:97
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2a:ec:cb:07:b0:93:66:5d:22:38:cd:f7:96:cf:e6:4f:5d:
eb:a1:45:05:d4:f2:e9:84:4b:ba:09:21:07:4f:8a:1e:81:21:
2d:dc:1d:99:70:88:d5:3e:bf:58:e4:15:80:bb:4a:d1:85:1c:
c7:56:50:25:5e:09:7b:02:67:21:b5:16:22:4c:ca:26:c5:5d:
83:03:f0:24:e2:d2:82:68:ea:5f:85:9a:6a:62:63:16:87:aa:
c1:5c:ad:73:d4:bb:e9:00:ec:7c:5f:27:cb:70:ff:e6:b7:9b:
eb:7b:f4:10:90:2f:99:01:4d:c9:73:0e:4e:43:58:53:19:20:
b4:07:af:9f:73:dd:16:28:88:69:1b:5b:9c:07:05:89:32:f4:
8d:ca:fd:ac:5e:66:b7:9a:32:c7:dd:e5:e8:70:4f:b8:2c:68:
14:c4:9d:72:b6:9e:49:87:8c:56:13:70:6d:a6:ed:a0:9b:92:
29:67:36:d1:77:d3:c0:ab:aa:c0:b7:6e:d5:bc:e2:0d:e7:dd:
e9:a1:98:b6:b0:4a:a5:30:2f:b6:7c:cd:2f:9e:5c:7f:93:50:
a7:b6:00:2b:af:7c:17:43:08:1d:29:9d:07:81:8a:20:f7:ae:
e9:5d:a5:14:c1:07:73:72:f8:11:09:cb:c1:02:fc:4a:2f:23:
4f:af:04:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:12:18 2025 by rpki-client