Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File: gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier: X2yvIpVNSL6QxUknKimNloCH299+MKgTaviwT9wpLLQ=
Subject key identifier: C0:3C:22:5F:07:EC:E5:93:D7:4E:97:A4:41:A1:5E:3B:48:B0:16:BD
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 0197488C1F8AF24A25B6FAA03DEE3D5149F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number: 1511
Signing time: Sat 07 Jun 2025 04:00:31 +0000
Manifest this update: Sat 07 Jun 2025 04:00:31 +0000
Manifest next update: Sun 08 Jun 2025 04:00:31 +0000
Files and hashes: 1: HckIWldHWwqX0CJ7X-XU88JAoY8.roa (hash: 0kYehz1g3idStzqPQ6DNbC0IwoRnTc8QtqRoQ8JJZs8=)
2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: EUXWD+Nu5P4s2EujOc9ST68cjnbycnJe6AapL3jRmVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:1f:8a:f2:4a:25:b6:fa:a0:3d:ee:3d:51:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Jun 7 04:00:31 2025 GMT
Not After : Jun 8 04:00:31 2025 GMT
Subject: CN=c03c225f07ece593d74e97a441a15e3b48b016bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:a5:f7:76:cb:35:05:40:a1:d9:06:02:dd:
79:9f:a9:e3:4b:a1:4b:ef:c1:47:c9:f6:66:64:bb:
d7:e4:2e:53:b8:e4:94:8c:3b:39:4b:b0:ab:79:1d:
1e:a1:d0:0d:be:2c:e9:95:7e:44:24:3a:6c:cb:ce:
f5:77:fc:43:43:11:69:1c:74:56:37:ab:f2:a8:e1:
8e:14:ee:f1:4f:81:7c:ad:cd:0e:df:d5:1a:5c:0f:
ae:fb:37:7a:5e:5b:60:78:c1:a2:06:22:7d:f5:17:
c3:1e:cc:06:9a:95:48:67:20:d9:6a:75:65:d2:cd:
d6:79:75:3f:22:93:f9:0b:d2:d6:50:b5:e4:e8:05:
d0:32:d7:ed:3b:57:5e:33:ba:31:92:c1:60:58:01:
54:91:56:e8:73:6d:4e:5f:db:f0:99:8c:8a:9e:fc:
06:1f:2c:8d:96:cb:af:19:4c:15:43:98:e6:f5:bc:
03:c7:45:9e:12:5e:33:a1:b4:d1:ea:cd:2b:f1:b7:
1c:85:61:9e:86:04:16:3c:fb:df:b3:8d:7d:12:cf:
07:39:06:18:8e:80:b6:d3:ed:bb:c7:c9:be:53:d6:
86:e1:c9:ae:10:13:21:71:ce:95:be:58:6b:54:23:
57:c9:40:93:59:93:23:5b:7d:6e:26:c1:17:c6:da:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:22:5F:07:EC:E5:93:D7:4E:97:A4:41:A1:5E:3B:48:B0:16:BD
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c8:f7:b2:5a:e6:4f:3f:70:ee:8b:38:53:dc:1a:e4:9b:3d:
98:db:96:d3:d5:72:ce:02:fc:a6:ab:0b:33:e6:7d:02:fd:7c:
dc:9f:fb:b0:78:91:33:00:ba:c6:a1:71:a1:66:d4:33:e2:d9:
4d:59:77:e4:eb:09:bb:29:0f:ad:ff:e0:e2:06:3e:60:0b:61:
da:c6:a7:42:78:45:02:2d:39:66:dc:63:96:a5:07:a1:1b:db:
2d:53:cc:46:24:fe:37:88:af:aa:13:b4:e5:d8:92:84:39:a3:
48:26:ea:5f:84:d7:03:05:15:db:f9:03:0d:ec:cd:58:d9:41:
5c:7e:3e:05:65:d7:2a:3c:76:10:04:31:7e:c7:f6:07:a4:14:
b0:19:c7:58:13:48:5e:07:5d:89:a2:14:61:7b:c1:dc:53:08:
34:a2:3c:9c:c6:c7:fe:63:b8:7c:82:9b:ad:9d:56:49:bc:db:
c5:0c:99:84:ae:93:26:57:b5:21:60:bf:e7:cf:43:2b:3f:28:
3c:b8:e5:f8:3b:1c:cd:d5:73:d0:21:dd:1d:14:64:2e:2d:64:
7f:c0:ca:a7:6e:f5:8b:2e:41:ed:19:d5:e4:ca:55:b6:17:f6:
c5:57:27:a2:91:7c:8c:cf:eb:44:00:47:ed:ef:52:61:b0:ca:
4b:d8:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:23 2025 by rpki-client