Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: wLqLQz1hxNkb/H8/irBcN3bIgp1tkFtmCsKlwIbp4HY=
Subject key identifier: 84:17:1F:CC:D4:5C:59:D7:8A:08:95:A9:DF:0F:0D:D7:4D:C7:F4:6A
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 01974A7AA73B73152914E8F679533FF74310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 154A
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: IYn5GIC61IgyMcJw/zpF33cRyucRYSbRpMhaTKM6aeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a7:3b:73:15:29:14:e8:f6:79:53:3f:f7:43:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=84171fccd45c59d78a0895a9df0f0dd74dc7f46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:30:55:98:e8:f0:a8:28:6b:8e:09:62:25:
d7:38:75:aa:bf:ec:37:2c:06:27:95:88:31:1a:cf:
8e:40:6f:10:06:41:98:4c:d4:93:17:75:71:17:9b:
3c:31:88:91:af:99:30:e6:41:6a:46:12:4f:6b:3a:
75:6f:0a:37:1b:11:e7:63:7d:7a:50:78:73:91:56:
10:34:a8:cc:3d:8a:1c:49:45:50:f7:21:00:5d:a9:
ac:14:af:3f:0a:70:53:77:b8:d2:03:74:d5:4c:08:
50:f0:47:54:da:07:43:1a:45:25:30:07:53:41:12:
33:6e:6b:3b:de:70:88:83:f6:15:71:f3:67:b0:a7:
40:16:1b:54:79:c1:60:fb:6d:ed:72:e6:a0:de:03:
8a:4c:c8:67:9c:b3:d5:29:cf:c8:79:28:28:5d:a9:
e4:9f:96:30:ff:a3:4a:bc:74:da:45:c1:2d:f5:60:
e1:85:7c:3c:97:0d:2d:d4:35:eb:fd:e1:0d:d2:f0:
68:a4:8f:1b:55:86:54:c8:a1:0d:e2:03:76:27:2b:
3a:a1:15:c8:13:5e:c1:82:13:e9:13:f9:ed:d3:87:
67:55:63:27:68:44:a9:6e:51:5d:de:4f:42:4f:54:
3d:b1:e1:16:20:17:df:24:f4:a0:82:9b:c1:8b:a2:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:17:1F:CC:D4:5C:59:D7:8A:08:95:A9:DF:0F:0D:D7:4D:C7:F4:6A
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7b:98:06:70:71:b1:48:54:53:78:a0:77:db:42:83:67:c4:
de:04:67:13:5a:ed:d0:43:96:6b:34:5e:bf:ec:54:95:d8:e6:
69:d6:a3:9f:74:2c:d3:6f:14:87:5d:87:50:e0:e0:42:b5:b8:
f9:9b:19:4d:42:f2:0e:74:7b:fc:5d:6b:3d:28:99:b8:1a:9a:
cc:65:3e:55:09:8d:f6:16:7c:ac:57:73:c6:9b:63:e6:1e:f0:
3b:e0:36:a3:20:49:53:ee:2c:70:87:c0:0d:f4:48:4a:d3:c0:
39:ea:8a:ab:37:2b:a0:f8:9d:3c:05:f8:ee:d7:4c:86:16:73:
41:e8:89:2b:ab:c3:06:09:73:e7:e5:a6:a3:e7:8c:91:7a:6d:
30:e0:a8:76:a9:41:7d:cc:be:58:d3:94:ae:20:c3:61:b8:3b:
cf:c2:31:ce:a1:8b:6b:ec:bf:61:46:ad:43:69:06:a4:d0:12:
5c:d0:cc:d6:02:32:11:d7:67:bf:e3:57:6b:be:df:80:c0:96:
8a:64:3f:f4:cd:24:07:24:0e:86:33:ed:74:2a:31:c3:27:fe:
6e:9f:d5:04:17:82:bc:d3:2b:c7:7a:e8:2a:24:86:78:4e:8c:
41:24:49:c4:bc:31:f3:2b:b0:e7:3e:4c:e1:23:3a:bc:83:d9:
3d:00:7a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:43 2025 by rpki-client