Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier: rh6u17GIYZzkh/YQosF8kYUaehmLFE1ClFdhHCm7SiI=
Subject key identifier: 2A:96:A2:6A:F4:E2:5E:F5:DB:F8:47:C9:5B:6B:1A:87:95:83:35:C8
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 0198D65F14D80834F2AF558BB92179F2F56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number: 06D0
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: IsMOQBum5zHKNJChroxIsFO4HeXBHzBcuosvCjufbec=)
2: puvubvKJAYg7r6mXBIAyb_AGzB8.roa (hash: GM5+sjVJG/v0mBOXZh/kGPDkPN3npBN1lUlwDZuz3ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:14:d8:08:34:f2:af:55:8b:b9:21:79:f2:f5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=2a96a26af4e25ef5dbf847c95b6b1a87958335c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:0b:fc:28:2e:5f:d4:1b:2a:7b:95:fa:bd:
98:89:bb:2a:fb:f3:88:81:6b:8f:5c:3f:0f:07:1f:
0f:4d:9d:bd:06:7f:d5:bd:36:44:2e:da:3e:ba:5a:
b1:94:eb:37:ba:75:0c:0d:64:2b:87:7a:d8:7f:29:
9a:85:21:6d:6d:a4:4d:ca:cd:ba:dd:d2:f4:0b:83:
7d:f4:53:0e:08:84:6a:b9:c4:db:74:43:06:8b:46:
aa:03:04:6c:49:16:f3:58:02:97:47:5b:22:7c:43:
8d:ce:78:44:6e:27:a9:21:8a:e9:17:90:67:c1:b9:
be:e0:99:c1:d9:9b:d9:0e:1f:7a:3a:a7:7f:f3:0a:
a3:8c:e8:d6:a5:a3:fd:5a:20:90:11:a5:36:ee:40:
47:de:7b:53:5a:c8:cb:6c:01:a4:0f:e0:64:39:66:
38:a7:f4:40:f7:2d:c5:41:39:38:86:7c:fe:63:b9:
d0:52:e4:dc:20:75:43:6d:76:9c:f6:f0:37:6d:62:
95:92:19:50:6b:0b:9f:f7:ab:b5:87:f1:bd:74:9a:
0d:24:db:a2:8b:ad:cf:a2:aa:5f:d3:d9:de:27:2d:
e2:0f:08:7b:93:38:ac:f1:1c:d4:25:31:ad:3f:fb:
98:67:52:49:37:cb:52:ad:41:bc:ff:a9:80:54:10:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:A2:6A:F4:E2:5E:F5:DB:F8:47:C9:5B:6B:1A:87:95:83:35:C8
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:77:ad:d2:6b:0a:dd:03:29:94:ea:2e:ee:21:54:72:c0:b2:
a7:8c:2a:34:de:d6:da:86:35:04:33:40:14:21:1d:e2:81:7a:
87:0e:14:cc:fa:85:e2:bf:90:6c:54:18:32:da:3b:71:db:31:
41:fb:5c:be:ec:e0:38:18:ca:13:dc:06:30:97:27:3e:71:72:
9e:28:74:ff:18:43:24:fe:ff:d8:71:79:21:2d:d1:ea:75:e5:
31:1f:89:c1:69:63:84:f9:de:08:0b:79:49:96:9f:0e:d5:d3:
05:a0:30:de:0f:d0:d1:d7:32:51:60:b6:2f:54:63:0a:26:3f:
e2:33:91:8c:fe:22:ae:d6:5d:64:38:1f:78:8c:c8:56:20:5e:
68:8b:51:aa:d2:b1:50:ab:22:e4:d4:af:34:05:4f:22:c5:ac:
25:bb:40:5e:ee:3c:db:ba:e0:fa:0d:2a:12:55:e3:84:9e:ed:
0a:8f:cf:b7:9b:46:9c:77:15:9d:c6:96:42:3d:a6:a3:3e:cb:
96:ed:5e:3e:04:39:6a:7d:ae:12:98:79:b5:79:6f:dc:30:63:
47:5f:6e:04:fd:5b:99:27:86:b0:ec:93:37:b5:56:81:57:7c:
51:f9:d5:38:99:6c:4c:df:f2:73:11:f5:85:72:de:ca:3c:3e:
f1:84:98:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXxTYCDTyr1WLuSF58vVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl
MWJjNDkwHhcNMjUwODIzMTAwMDEyWhcNMjUwODI0MTAwMDEyWjAzMTEwLwYDVQQD
EygyYTk2YTI2YWY0ZTI1ZWY1ZGJmODQ3Yzk1YjZiMWE4Nzk1ODMzNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1kL/CguX9QbKnuV+r2Yibsq+/OI
gWuPXD8PBx8PTZ29Bn/VvTZELto+ulqxlOs3unUMDWQrh3rYfymahSFtbaRNys26
3dL0C4N99FMOCIRqucTbdEMGi0aqAwRsSRbzWAKXR1sifEONznhEbiepIYrpF5Bn
wbm+4JnB2ZvZDh96Oqd/8wqjjOjWpaP9WiCQEaU27kBH3ntTWsjLbAGkD+BkOWY4
p/RA9y3FQTk4hnz+Y7nQUuTcIHVDbXac9vA3bWKVkhlQawuf96u1h/G9dJoNJNui
i63Poqpf09neJy3iDwh7kzis8RzUJTGtP/uYZ1JJN8tSrUG8/6mAVBDlewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqWomr04l712/hHyVtrGoeVgzXIMB8GA1UdIwQY
MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt
MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm
LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3et0msK
3QMplOou7iFUcsCyp4wqNN7W2oY1BDNAFCEd4oF6hw4UzPqF4r+QbFQYMto7cdsx
QftcvuzgOBjKE9wGMJcnPnFynih0/xhDJP7/2HF5IS3R6nXlMR+JwWljhPneCAt5
SZafDtXTBaAw3g/Q0dcyUWC2L1RjCiY/4jORjP4irtZdZDgfeIzIViBeaItRqtKx
UKsi5NSvNAVPIsWsJbtAXu4827rg+g0qElXjhJ7tCo/Pt5tGnHcVncaWQj2moz7L
lu1ePgQ5an2uEph5tXlv3DBjR19uBP1bmSeGsOyTN7VWgVd8UfnVOJlsTN/ycxH1
hXLeyjw+8YSYuQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:50 2025 by rpki-client