Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier: oYGpoo+HYm5ISBZ30N6+RZoGRjLCZcxkdTBMIZLfdBw=
Subject key identifier: 20:F7:40:DE:BC:CD:83:20:11:78:5E:8D:70:45:6A:F7:08:52:7B:30
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 019748FAC3C3402AB6ADDB4EBD56FE167DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number: 06DA
Signing time: Sat 07 Jun 2025 06:01:23 +0000
Manifest this update: Sat 07 Jun 2025 06:01:23 +0000
Manifest next update: Sun 08 Jun 2025 06:01:23 +0000
Files and hashes: 1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: JGPk4oeE8/ms9aHqARSoBelpdBQYCyMr2ROHRz/yZK8=)
2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:c3:c3:40:2a:b6:ad:db:4e:bd:56:fe:16:7d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Jun 7 06:01:23 2025 GMT
Not After : Jun 8 06:01:23 2025 GMT
Subject: CN=20f740debccd832011785e8d70456af708527b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:cc:c3:37:f7:ad:28:ec:da:44:20:e3:31:
93:24:a9:cf:27:56:f4:3e:37:18:9f:91:d1:29:56:
78:20:43:6f:45:4f:66:42:d8:5c:1b:5a:8f:90:b4:
2f:c3:f1:2a:fd:7a:2f:18:6a:f9:e7:67:43:5c:4b:
d4:b1:86:a0:3e:70:ff:99:c1:73:e4:5f:ff:78:34:
80:6a:d0:e0:13:2f:0d:d2:23:79:89:a7:05:15:67:
91:b2:77:fd:01:47:72:44:5b:58:85:ab:7c:0e:fa:
ee:4a:f1:a5:90:28:4b:64:cf:a5:11:d7:92:08:51:
de:95:8e:84:e9:fd:ed:a2:2f:4a:3a:4f:f0:5f:48:
1a:e5:94:df:5b:d8:a9:58:94:51:58:d9:6f:0b:dc:
01:13:e8:10:f7:51:d2:41:1a:85:13:8a:8d:05:f7:
f6:f1:46:a8:55:d4:8f:27:de:d8:47:be:b8:c3:4b:
bd:cb:a5:33:c9:53:e8:df:b3:21:b9:fa:c6:59:2f:
ef:72:81:03:10:0a:4d:cf:35:43:bc:77:52:b4:8f:
30:ae:d7:0f:0b:9b:b8:80:7f:da:10:6d:ca:00:d3:
03:7c:fd:e2:c6:bc:85:6b:4c:fe:49:b3:ac:0d:91:
89:d6:29:2b:cf:c8:0a:a3:cc:9c:40:5b:bc:a7:9a:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:40:DE:BC:CD:83:20:11:78:5E:8D:70:45:6A:F7:08:52:7B:30
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d7:71:61:79:ee:d7:70:cd:81:df:0c:c1:23:6b:6f:f6:56:
58:c6:df:7c:57:47:68:d4:19:27:8e:62:5f:5c:66:f4:e4:64:
96:17:3f:42:72:12:8e:9e:d2:7f:ad:a5:f9:f4:a0:17:8f:e7:
38:06:e8:e3:89:88:8f:5e:f3:23:dd:1e:63:06:58:a7:45:d4:
6d:fa:ed:d6:38:5c:38:36:74:ef:2e:24:8e:bb:d5:45:e1:b8:
03:6f:67:c7:17:ab:62:7d:e7:6f:82:0e:99:ef:42:7e:49:d8:
2a:f3:32:72:54:6d:12:8f:52:b7:67:03:ff:46:0c:e8:2a:31:
16:45:e2:4b:49:c9:73:27:d9:61:15:a2:8e:8f:2f:62:4a:69:
72:f0:08:ed:2e:cf:31:16:b9:18:f9:7a:70:1d:e9:1d:4d:ea:
1e:c0:d2:48:d7:1c:9f:c3:82:89:e4:9e:23:45:8c:a7:db:a5:
ef:af:73:45:93:85:68:80:fb:71:e9:66:aa:3e:30:96:cf:cc:
16:c8:69:b4:18:4a:7e:d4:62:17:fd:57:bf:59:81:60:97:5f:
a2:a6:ce:b0:91:39:e1:71:d5:11:d9:b9:27:34:63:c0:3d:ae:
6b:df:5f:07:da:8c:f4:0a:95:31:8d:af:9b:61:c5:ff:df:19:
be:3e:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:29:13 2025 by rpki-client