Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: 2feNLWf7/FdvCiWGA5wbPoq61JdEdcl/4ndR5BvP5Ks=
Subject key identifier: F1:61:D5:E7:EB:A7:D9:8D:4C:4A:BD:B9:D1:DE:AF:EF:CE:F9:1B:D8
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 0197499F32763D33CF4272D21BDB5F932BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 09:00:59 +0000
Manifest this update: Sat 07 Jun 2025 09:00:59 +0000
Manifest next update: Sun 08 Jun 2025 09:00:59 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: FaFzHzuwaq3J/2km+T4ozlWK/hvt+tUak+LBW7LSqt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:32:76:3d:33:cf:42:72:d2:1b:db:5f:93:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jun 7 09:00:59 2025 GMT
Not After : Jun 8 09:00:59 2025 GMT
Subject: CN=f161d5e7eba7d98d4c4abdb9d1deafefcef91bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:83:bf:8d:68:b2:59:bc:b7:31:df:89:96:
65:5d:f8:b5:29:41:e0:50:35:12:06:ee:3e:c9:1c:
32:dc:93:2c:94:f7:41:24:51:14:41:87:46:da:80:
aa:0c:30:32:b8:5f:d3:ee:9f:dc:89:cf:7f:dd:70:
33:d9:e9:d9:ac:9e:92:ac:7a:c1:f3:41:ff:0e:0a:
99:9a:2c:70:e1:fc:97:7e:e5:40:85:39:65:78:49:
74:15:e3:fb:0b:a4:8d:7b:77:7b:23:74:72:a3:27:
3e:29:1b:f6:b9:f6:bd:b8:9a:92:87:29:62:66:4a:
22:94:5f:4b:39:d3:6e:54:8c:21:f0:1c:42:93:2f:
6d:fe:40:27:7c:43:a5:9c:7b:38:2d:e0:de:8d:11:
7f:e1:f5:e4:a6:77:ef:b8:81:ff:58:14:9a:19:f5:
59:7a:a5:3e:91:a8:4f:0a:86:a6:fb:ae:2a:d0:e2:
fd:a9:4b:01:e1:49:05:68:80:ce:8f:67:19:57:a2:
aa:bb:55:b1:ea:89:61:e1:c7:e1:df:fa:00:b1:ee:
0c:08:73:29:7a:8d:bb:f1:1a:fe:c5:bc:aa:1f:45:
04:c8:af:2f:b3:71:91:65:21:da:09:dc:85:74:15:
d2:6a:b5:a5:02:d4:58:52:0b:63:70:57:02:b9:bf:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:61:D5:E7:EB:A7:D9:8D:4C:4A:BD:B9:D1:DE:AF:EF:CE:F9:1B:D8
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:ce:1f:eb:47:df:6b:a3:1c:66:f5:9b:54:03:a3:6f:fe:
16:1f:38:2f:6b:8d:6c:73:99:bf:32:50:cd:99:11:e8:aa:b6:
18:b0:34:16:d4:a6:bf:7b:c2:81:dd:f9:2d:bd:33:db:39:e9:
57:fb:d5:e1:25:2e:ed:a8:1b:3c:05:be:8f:df:bf:81:a7:de:
f7:44:a7:2c:9f:cd:b5:94:75:c6:fd:97:a5:32:99:f8:5b:42:
61:2b:44:e2:ec:ef:1d:20:fb:39:d8:3f:82:89:e9:83:33:c5:
36:6d:4f:b4:4c:9c:e9:1b:69:19:f2:a2:5f:1d:eb:fd:f0:a7:
f5:5e:40:5a:c3:7e:a2:7b:33:7f:87:ea:a1:5f:7a:43:1e:0f:
37:ad:9a:75:b9:39:68:71:f3:49:3e:89:df:06:4a:b1:54:82:
66:a3:de:a7:6b:b7:44:87:fa:8b:4d:b3:7e:8d:a8:69:d5:3d:
a4:fa:48:c7:cd:0f:52:c0:25:a1:19:4f:85:83:97:08:27:71:
d4:fb:24:17:9f:9c:37:7b:c4:a8:2f:f0:ce:11:f5:97:c6:bf:
70:11:45:c2:3b:f9:3c:dc:79:ae:43:74:d0:9b:3d:04:5f:cc:
1e:4f:58:73:62:b5:2f:3b:9a:4e:d8:95:50:02:74:9b:eb:c6:
c0:49:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:17 2025 by rpki-client