Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
File: GQoJUehsDePU6zKmwyaJECtyel8.mft (raw, json)
Hash identifier: I1DDAHuYXIr64i7U2L7z2byVKdIVNQcR1sHpOvecdwg=
Subject key identifier: D2:ED:F1:1B:CB:37:7F:EC:53:05:5F:B8:52:3B:DE:AF:DE:CF:53:A2
Authority key identifier: 19:0A:09:51:E8:6C:0D:E3:D4:EB:32:A6:C3:26:89:10:2B:72:7A:5F
Certificate issuer: /CN=190a0951e86c0de3d4eb32a6c32689102b727a5f
Certificate serial: 0198439A8807D99F269E4C94296324CEA44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
Manifest number: B2
Signing time: Fri 25 Jul 2025 22:00:57 +0000
Manifest this update: Fri 25 Jul 2025 22:00:57 +0000
Manifest next update: Sat 26 Jul 2025 22:00:57 +0000
Files and hashes: 1: GQoJUehsDePU6zKmwyaJECtyel8.crl (hash: v5Ve50Nh24Pbc2ogh4A77NGcoJIPTiRHDvRYDplDcHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:88:07:d9:9f:26:9e:4c:94:29:63:24:ce:a4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190a0951e86c0de3d4eb32a6c32689102b727a5f
Validity
Not Before: Jul 25 22:00:57 2025 GMT
Not After : Jul 26 22:00:57 2025 GMT
Subject: CN=d2edf11bcb377fec53055fb8523bdeafdecf53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:2f:e4:12:bd:1b:08:ca:ea:74:3a:66:76:
1d:9b:e8:2f:92:bc:90:92:8d:70:cf:98:eb:29:ac:
9e:4e:b5:df:90:c7:6b:09:bc:44:a5:0d:d8:ac:c6:
d5:6e:76:50:a0:7b:83:44:4b:70:05:98:44:58:3a:
bc:d8:81:66:96:53:6c:a6:4b:e4:21:5d:09:e0:b3:
66:bf:cf:5a:c6:59:46:cd:ad:5f:b9:31:c8:29:b4:
11:da:b4:de:b1:27:e7:16:02:2c:94:3d:73:ae:81:
e9:78:91:8c:51:4d:0c:0a:60:24:af:05:7e:f2:5a:
54:3d:15:d2:29:38:58:09:82:18:d8:f2:20:70:0d:
57:f1:61:d9:04:24:c8:8b:6f:07:e1:1c:f8:6b:e9:
90:f3:51:ee:99:d9:04:96:96:44:bf:3d:f5:70:8b:
6e:c2:73:e6:64:60:6e:46:9a:32:22:73:83:d4:c2:
79:4f:20:3e:61:dc:2a:45:de:87:69:a6:52:5f:e5:
b6:90:f0:fc:71:af:16:6e:6c:51:5f:99:66:d1:55:
30:6b:34:1a:15:d2:31:21:bb:8d:98:3c:76:81:f2:
52:3c:21:9a:45:7e:46:47:c5:37:c1:97:5c:b2:96:
bb:af:97:cb:13:d0:e5:4e:ca:87:85:ab:b0:d1:3b:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:F1:1B:CB:37:7F:EC:53:05:5F:B8:52:3B:DE:AF:DE:CF:53:A2
X509v3 Authority Key Identifier:
keyid:19:0A:09:51:E8:6C:0D:E3:D4:EB:32:A6:C3:26:89:10:2B:72:7A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:66:1a:b0:31:dc:7a:03:5e:de:b5:1d:47:5c:f3:7b:f1:07:
c7:d2:ab:83:0d:7c:3f:89:61:fe:fd:3f:6a:f2:4e:21:ee:04:
0a:b5:1d:b9:2e:00:b6:46:3a:eb:c7:98:a2:be:f1:a2:d1:c7:
61:1c:ff:5b:6d:37:a7:2d:07:0e:cf:e2:c4:0e:ed:36:f9:21:
3e:b8:fa:38:05:26:39:75:bc:e1:8b:f5:b5:93:6d:ee:72:b3:
9d:5f:f3:cd:c0:9f:66:cd:f0:2a:28:3b:6c:9d:c2:22:5a:69:
60:81:a5:9f:66:4b:e9:12:58:bd:5f:09:c6:06:01:f9:45:68:
48:75:e8:e1:de:d5:10:be:dc:e6:4c:36:95:69:c5:db:b5:0c:
d9:f0:58:e3:3b:a1:1f:04:8d:04:a5:c8:e2:8f:77:3b:e7:cd:
62:ae:80:12:73:ee:92:b2:ef:24:16:49:a5:30:e8:42:a9:bc:
a8:30:28:1d:00:c1:4f:cd:2c:1a:af:d3:5c:ff:74:c0:31:71:
de:da:bc:bf:a2:6f:fa:59:f6:73:5e:8c:72:ca:06:90:7b:5f:
11:ff:62:ed:b3:be:8a:c3:84:0a:f4:56:6f:cb:64:20:ad:de:
4d:25:84:f4:37:09:dc:db:9e:8f:46:2b:ab:2c:e7:9c:2d:9b:
aa:3b:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:37:56 2025 by rpki-client