Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: ucxIKmrMnVU/iXhpIxa8qsbn/+dJ/S21HkiZ4d7hyfo=
Subject key identifier: FC:29:2A:76:D0:49:42:34:C5:41:76:8E:1F:CB:A6:40:0A:02:F1:EF
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019741E5EC8D041BF8161C821A2E20ABF8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 1579
Signing time: Thu 05 Jun 2025 21:01:16 +0000
Manifest this update: Thu 05 Jun 2025 21:01:16 +0000
Manifest next update: Fri 06 Jun 2025 21:01:16 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: OVR6rukKcE1mCx6TYEZ51N7eLYHi2CTSMdOU3b5pP3Q=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:e5:ec:8d:04:1b:f8:16:1c:82:1a:2e:20:ab:f8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jun 5 21:01:16 2025 GMT
Not After : Jun 6 21:01:16 2025 GMT
Subject: CN=fc292a76d0494234c541768e1fcba6400a02f1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:ac:ba:5e:e7:bd:b4:cf:76:87:15:59:d3:
3e:4f:57:32:bb:56:62:e5:e6:83:31:49:3b:c3:13:
75:c2:aa:56:6a:ad:26:f8:a0:15:43:e2:96:7e:58:
87:a0:0c:da:ff:8f:fc:87:f3:5d:6a:e4:70:d7:0a:
5f:73:5f:de:6e:dc:68:a2:70:fb:a3:63:e2:2d:45:
b6:4c:6d:18:d0:9c:8d:46:3b:02:d7:ee:33:53:cc:
6f:c9:96:69:85:5e:69:26:3b:d3:04:d7:92:4c:06:
d7:ba:b5:cd:1e:b2:a5:f5:9c:07:9b:a9:fa:2f:83:
ea:6f:d3:9a:3f:87:01:cd:99:4d:4b:d8:48:c6:16:
e6:0d:5b:db:6d:0c:11:85:8c:3d:35:e1:70:73:9c:
9f:e1:6a:ff:e1:27:5a:46:c8:5d:5e:9a:53:d8:be:
a5:25:52:64:8d:2d:f8:8d:32:2a:73:c0:d6:b9:0e:
21:11:9a:fd:c9:a5:df:50:77:0b:f8:16:99:d5:e6:
df:b0:18:c1:75:3d:98:f9:f3:ba:5c:6a:72:51:ef:
2a:3a:4e:48:7c:9c:9b:74:d6:dc:3b:76:62:49:f3:
ac:2d:c4:c5:29:4f:ce:74:66:b4:5a:30:0a:8b:66:
e3:0f:fd:9b:b3:70:d0:28:b8:e2:c8:2a:ec:19:92:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:2A:76:D0:49:42:34:C5:41:76:8E:1F:CB:A6:40:0A:02:F1:EF
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:47:d3:8b:0e:18:c4:bd:f4:68:e0:6f:bf:7a:67:a7:a6:
a0:66:e1:7f:74:89:49:ba:e6:17:0a:0c:2d:ac:aa:5a:64:2b:
c4:15:36:06:76:b7:f8:08:80:1f:4f:20:4c:b3:df:69:43:6a:
d0:b8:3b:79:33:85:49:96:3a:b1:85:da:a1:f0:8b:5b:11:d0:
45:d6:3f:58:17:55:ac:81:11:98:32:15:61:d4:aa:6a:e3:e6:
e0:ba:fe:cd:c5:92:25:15:a2:fc:5d:3a:10:12:42:ad:c2:91:
15:b4:be:4e:e1:17:40:ee:ca:d9:f9:de:49:4d:ba:af:39:6f:
4b:f1:e1:7f:7b:86:2d:ff:3a:fa:9f:61:18:d0:cc:f2:e4:a7:
5f:57:c7:4a:f7:3a:38:bd:4e:ea:e2:0b:a4:01:10:d8:10:96:
4c:a7:77:e9:b6:38:89:9b:ad:a5:a1:9a:01:dc:4b:be:83:c7:
4d:77:45:f5:9c:47:28:62:4b:59:40:e0:2f:52:47:a1:fd:6e:
11:31:ee:34:ff:22:c3:2b:a8:4f:c4:21:51:0f:4f:93:fd:26:
ab:56:6f:00:77:64:8b:90:76:52:d8:19:7f:5c:18:80:d2:ac:
4f:94:75:de:e2:ed:e1:f9:09:13:de:1b:9a:08:37:c8:57:af:
9c:0a:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:38:37 2025 by rpki-client