Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: iotlrgjl6utcOoTLmxSD0ttZOw0Meyb9rtcq1ZZhz2A=
Subject key identifier: 0C:C7:FC:A7:F7:F8:86:A6:F7:23:47:8F:42:5E:35:CA:9A:55:DD:8B
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 01974BFB8C3C0027F67CE0753DC36ADE3E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 0B15
Signing time: Sat 07 Jun 2025 20:01:06 +0000
Manifest this update: Sat 07 Jun 2025 20:01:06 +0000
Manifest next update: Sun 08 Jun 2025 20:01:06 +0000
Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: PDRZTv5/nJeSQ4C01nz1f3q/WVNxBHAvFlwFZZ7OJlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:8c:3c:00:27:f6:7c:e0:75:3d:c3:6a:de:3e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: Jun 7 20:01:06 2025 GMT
Not After : Jun 8 20:01:06 2025 GMT
Subject: CN=0cc7fca7f7f886a6f723478f425e35ca9a55dd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:5b:18:c5:03:55:9d:2e:f6:fe:46:ae:85:
11:aa:66:54:05:e6:34:03:73:00:8e:df:31:e9:50:
92:7c:a5:39:90:73:7b:57:10:36:77:e1:cd:b0:21:
5e:fa:e3:eb:f7:0a:f0:39:cc:bd:7f:05:e7:d1:f5:
74:74:09:a9:66:59:b8:aa:b6:31:c7:af:a0:89:ff:
54:36:78:35:e4:12:05:fe:1a:3a:3c:e9:58:0c:45:
4d:d3:5a:6f:7c:22:ac:f6:88:82:1b:e1:d9:95:c5:
b9:41:84:99:2c:46:02:91:01:eb:f2:19:b3:05:39:
b0:34:04:0d:ab:dd:69:a0:53:21:b7:70:0f:bb:c0:
b4:a5:29:5a:16:c9:a4:7b:e2:6a:a7:15:67:48:3b:
9f:ba:d6:0b:6f:18:9e:ec:8d:a7:e6:27:3a:c3:8c:
c8:28:c7:fe:bd:07:aa:fd:d6:0e:66:dd:90:b5:d6:
75:b9:31:07:72:a8:e7:ba:78:07:81:7c:a2:a1:3c:
16:48:cd:a5:bd:84:b8:b6:f9:7d:90:a9:f7:f0:62:
40:fb:d1:7f:23:a3:b5:b9:49:e8:7f:ca:49:36:ad:
eb:a7:8f:28:b2:1c:cc:46:b4:68:1a:83:28:3c:ab:
65:76:6b:6c:de:71:95:2b:6b:19:56:45:de:72:17:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C7:FC:A7:F7:F8:86:A6:F7:23:47:8F:42:5E:35:CA:9A:55:DD:8B
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:05:22:a5:bf:3a:79:0d:af:86:d6:11:d2:e9:6b:25:4d:ff:
f7:96:5a:d5:cc:11:3c:80:52:6d:e8:6b:90:32:44:99:2d:e5:
31:d4:e7:26:06:85:5d:de:fa:9e:63:dd:2f:52:31:71:2d:d8:
75:f4:bd:93:84:fb:86:81:96:85:e5:7e:33:d8:56:e8:1d:26:
3d:c4:b1:91:6f:7a:3f:86:f6:73:76:7e:ae:d1:23:3c:15:f5:
4f:05:b5:0a:2d:4b:aa:28:b9:b6:3a:bf:5e:1d:c2:6b:c3:9d:
58:27:28:b8:a3:8d:46:2e:52:0f:ba:33:64:df:fc:96:d4:41:
dd:54:16:44:a7:f5:d7:da:3a:97:a4:7b:4d:c1:61:3a:1c:47:
e3:28:74:01:87:ee:ca:0c:27:2f:77:bc:28:84:a2:4f:e6:cb:
ff:7b:21:36:88:a8:84:b6:2b:c1:83:e2:61:f1:9d:b7:81:d4:
1e:b7:db:5e:aa:a5:d1:86:8f:57:e9:87:45:b8:a6:d6:f6:93:
31:c6:84:e2:14:bb:3c:94:58:ae:90:dc:89:83:fb:26:33:6a:
c1:45:00:6c:ba:e6:b3:9e:e9:fd:6c:ed:de:9b:fe:bd:70:16:
0e:e9:a6:de:bc:ea:99:60:6b:63:28:4b:66:98:f0:40:76:dc:
8c:78:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:02 2025 by rpki-client