Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier: vU+KSLtv6pRwEUFn1yLFuu1kUVIcoSE4gVdeOoBLeH4=
Subject key identifier: B9:EE:1E:C6:5C:AF:C9:D2:9B:49:31:62:1D:D3:37:8F:BD:A3:5C:61
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 0198537BB38F824DC31B652CE18FEE179F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number: 0589
Signing time: Tue 29 Jul 2025 00:01:12 +0000
Manifest this update: Tue 29 Jul 2025 00:01:12 +0000
Manifest next update: Wed 30 Jul 2025 00:01:12 +0000
Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: eC39Qml3GM9Ko5N9KsGnO5CchU11pbuJmhlLdV+WNps=)
2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=)
3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=)
4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:b3:8f:82:4d:c3:1b:65:2c:e1:8f:ee:17:9f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: Jul 29 00:01:12 2025 GMT
Not After : Jul 30 00:01:12 2025 GMT
Subject: CN=b9ee1ec65cafc9d29b4931621dd3378fbda35c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:27:29:70:1b:09:57:78:38:f1:d7:a6:91:
8f:85:65:ea:7f:2e:71:da:dc:6e:36:c1:a1:50:58:
5c:c8:c6:ad:d3:f3:ff:a4:34:f5:eb:cd:f8:f2:b4:
98:f2:8b:ea:3f:a2:50:83:93:85:28:c0:ad:5e:c8:
77:fb:1f:65:e8:be:af:2d:bb:0b:cd:2d:b8:36:cc:
af:00:73:95:df:23:b8:33:3b:35:81:78:73:fb:0c:
a7:77:8a:9d:b8:f4:75:6c:6a:47:ba:76:07:cc:78:
98:39:87:5c:bc:19:89:5b:4f:cb:ff:31:cb:be:6f:
5a:ac:a0:78:67:58:fa:bb:ba:85:86:d0:9f:7a:4c:
f8:ca:58:2c:0a:49:33:40:4c:2e:70:b8:83:d7:42:
74:42:ff:ea:40:52:32:33:77:9f:0b:0f:74:83:b0:
07:cd:33:b8:2f:f8:0f:1e:5a:93:e2:8b:95:d4:a3:
0b:14:e3:26:2a:55:54:bf:de:fe:5b:1b:b7:c9:e0:
5b:89:1b:d6:0f:83:71:da:5e:b6:d2:7b:67:c4:eb:
18:e0:6d:48:b7:54:64:0b:7b:01:56:fc:13:c2:7b:
96:c3:32:79:f1:7d:72:55:4d:f9:6e:b9:1e:5b:fe:
d8:6b:07:1e:f1:0b:82:3c:5d:07:2e:b8:b8:cb:af:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:1E:C6:5C:AF:C9:D2:9B:49:31:62:1D:D3:37:8F:BD:A3:5C:61
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e1:b9:c0:49:5d:6d:19:a1:2a:a9:d3:63:dd:3d:3e:86:a9:
48:01:27:df:2a:8d:b2:ea:0a:68:6e:f9:87:fc:34:9c:fa:8c:
bc:13:03:4e:43:66:44:13:4b:c2:74:cb:bc:41:47:0a:58:d0:
7e:87:15:c7:29:26:61:19:f2:bf:ee:aa:9e:d6:88:4e:e8:da:
ec:20:e6:b9:fd:ee:79:1c:df:3d:21:46:7b:1c:2c:75:0c:2d:
02:35:d1:d7:35:a2:91:f0:b3:33:e7:39:71:05:3d:af:7e:30:
32:61:dc:70:c3:02:96:22:bb:54:66:eb:e2:55:c9:c5:3c:1f:
2e:89:d0:9c:1c:d5:fe:f2:81:ce:10:d0:18:30:09:e5:38:97:
18:ac:9c:d0:6b:c4:6a:88:b0:79:99:5f:24:54:58:ca:ba:c6:
dc:57:a8:0e:c8:d3:df:71:fa:31:9b:be:e4:36:4d:36:6d:bb:
e0:58:30:0d:70:ed:f0:89:99:e8:90:5e:e5:69:ab:12:bc:96:
60:45:19:1f:04:b2:23:00:c3:70:18:f2:6b:d4:f4:97:05:74:
65:ad:5f:a4:4e:53:5d:80:a9:7d:62:85:e4:1e:5b:c8:61:e7:
1d:35:4f:7a:02:4e:9c:f7:41:69:0c:70:7c:72:d5:eb:cd:4c:
59:1f:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:24:03 2025 by rpki-client