Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: jAyjTqO2J1B0QNlL5WVW80wAe7pjvIttJbUwiPp9Uqs=
Subject key identifier: D0:E8:D4:3A:B4:12:29:AC:9F:73:BE:06:30:F0:6E:F1:29:03:1C:E6
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 0197469E09E943C1145548FF373B2D69368A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 02A3
Signing time: Fri 06 Jun 2025 19:00:51 +0000
Manifest this update: Fri 06 Jun 2025 19:00:51 +0000
Manifest next update: Sat 07 Jun 2025 19:00:51 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: hNgFIM8n/DGkh7HreFyEuwJXEbJgtHLj7kSUWLVw2g0=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:09:e9:43:c1:14:55:48:ff:37:3b:2d:69:36:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jun 6 19:00:51 2025 GMT
Not After : Jun 7 19:00:51 2025 GMT
Subject: CN=d0e8d43ab41229ac9f73be0630f06ef129031ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a3:77:a2:ae:55:1c:dc:91:f5:66:be:9e:3c:
f9:9f:52:02:62:ae:b6:69:d8:b2:2c:e4:44:5d:ab:
27:02:d2:9b:c0:59:bd:a9:d7:25:da:2a:01:45:d4:
83:d7:61:56:f2:27:be:f2:7d:c3:15:75:87:b9:dc:
e7:c9:c5:c5:e5:6b:92:7a:1e:6f:09:4f:c9:b7:97:
6f:41:c9:36:3d:a4:51:08:07:4d:81:80:e0:35:8f:
71:14:67:d3:59:43:3e:2d:4d:a8:21:7c:3d:0d:da:
ac:12:86:a7:8a:84:3d:f5:a8:11:8d:03:00:f1:64:
72:19:38:a6:21:36:9d:1b:be:15:2a:4b:cd:5d:dc:
30:cf:8a:e0:ac:3f:d0:5c:38:63:a3:cf:7c:e2:11:
33:c4:2a:f6:d2:7e:21:a6:a3:54:0c:49:78:61:d8:
5a:7e:90:c8:03:5f:6a:1e:eb:ee:d1:55:82:69:c4:
c6:88:6b:0d:6a:f2:07:d3:be:4f:61:9c:8f:d0:9d:
79:a2:20:c7:96:f9:da:56:51:dd:8e:89:c8:9f:96:
57:56:da:d5:42:03:c5:c2:27:8b:7b:7d:c9:16:d0:
bc:6a:9b:ef:47:63:23:c9:5f:43:6a:fe:96:79:f3:
e6:c4:b5:a2:cb:64:95:d0:68:d3:3d:a6:fd:ee:27:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E8:D4:3A:B4:12:29:AC:9F:73:BE:06:30:F0:6E:F1:29:03:1C:E6
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:27:41:9e:e6:b3:03:44:37:13:41:90:b5:49:e4:b2:1a:97:
a7:be:0c:8a:4f:6d:c1:12:97:9c:ae:72:6d:5e:04:17:f9:70:
b7:66:7d:fe:fb:c4:ee:27:6e:35:b0:2f:ab:f2:e1:7e:29:73:
6b:36:97:e3:5d:ff:e0:23:54:f9:f4:6e:79:74:8f:4a:72:38:
c8:45:7b:73:9f:bf:ea:10:3d:e2:b7:19:58:db:ee:f1:cf:19:
ea:e8:d8:1c:5e:af:1f:05:16:37:75:be:de:b6:1a:0e:6f:f9:
a8:46:b5:de:13:46:72:96:8f:7f:64:f5:8b:09:80:39:07:97:
5a:07:1a:e2:27:af:8d:72:60:c3:10:0f:cc:4a:4f:c2:3a:bb:
33:cb:22:63:f3:db:f5:f6:e6:39:b6:af:c9:39:69:c0:76:8f:
d3:e9:e8:47:90:12:27:0c:00:1e:e2:0f:5b:3d:d2:b9:35:3f:
76:9e:02:6c:7e:25:1e:e6:58:3f:01:15:80:f3:2f:52:a7:29:
ee:64:ec:0b:27:0f:21:fe:d0:51:f0:db:56:c8:3f:d1:d2:5e:
e2:49:87:36:65:89:53:10:b6:ac:ef:b6:18:4c:6f:bf:61:be:
f8:03:cc:39:1d:e4:eb:2c:af:8d:e1:d1:93:ba:1d:0c:81:5b:
1c:72:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:21 2025 by rpki-client