Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: TjX731TKYq+5tc7dCOEdCVH0yLeacn7DEkgVMRThBEE=
Subject key identifier: 6C:01:88:05:03:65:CE:7D:60:72:00:6E:26:F8:AF:A9:0B:E9:54:F0
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019747E72E7D3AC6162AC5EFBF807C45DFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0CAC
Signing time: Sat 07 Jun 2025 01:00:22 +0000
Manifest this update: Sat 07 Jun 2025 01:00:22 +0000
Manifest next update: Sun 08 Jun 2025 01:00:22 +0000
Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: I08Pj1bF3QAIy8YXqnQiNz7LCdt/UT4NrH9QUNy5lMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:2e:7d:3a:c6:16:2a:c5:ef:bf:80:7c:45:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Jun 7 01:00:22 2025 GMT
Not After : Jun 8 01:00:22 2025 GMT
Subject: CN=6c0188050365ce7d6072006e26f8afa90be954f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:6b:db:1e:5b:d2:04:21:02:fd:bc:3c:8c:
37:40:73:48:1c:63:3a:78:3e:db:37:6f:08:6a:31:
32:a5:b8:16:2a:be:f4:78:13:a5:fa:74:28:99:03:
a7:62:12:77:07:11:74:84:88:23:f1:ce:83:68:d4:
d4:65:a3:96:25:7d:19:8b:e1:db:b9:4a:bb:08:d5:
8c:cc:7e:a5:df:a9:4a:ad:32:11:39:30:7f:04:a3:
2d:eb:a1:a6:16:7d:ab:88:b1:a7:ab:dc:48:b2:5a:
2b:c5:f2:a1:91:33:b2:17:37:af:b1:80:84:c6:2f:
f8:a5:09:46:ab:44:e2:e6:b5:39:23:f2:e2:87:de:
1d:c2:8b:57:b4:a0:25:d7:0d:f5:68:cc:67:34:3b:
19:34:04:a5:53:99:dc:03:21:26:85:99:57:66:b9:
b0:9b:67:66:15:b9:1a:3d:fd:c0:01:87:78:40:5a:
50:15:d3:a8:81:0d:1f:34:80:8b:78:25:dd:27:f7:
70:4b:b9:24:e4:26:dd:8d:fa:f8:2c:9e:19:1b:ec:
2d:4a:ff:57:0a:c8:cc:25:e5:04:92:b2:ef:a5:48:
1c:98:ea:7a:99:9a:35:fd:51:d0:69:2f:25:bd:25:
b9:d2:14:c0:fa:65:59:df:95:57:70:c5:26:a9:77:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:88:05:03:65:CE:7D:60:72:00:6E:26:F8:AF:A9:0B:E9:54:F0
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:12:88:ea:08:6c:e9:7b:6b:af:cd:20:ff:e9:a4:95:0d:ae:
7a:c1:15:fd:cd:51:65:d1:31:61:18:a2:04:03:28:09:43:55:
ec:0f:05:23:61:b4:66:97:8d:a1:13:a4:64:dc:41:bc:f3:a4:
66:45:ec:8b:84:c1:16:25:13:d6:18:c0:e3:1c:9b:f9:74:16:
ae:16:d4:4e:0d:c4:de:8f:07:53:8a:fc:b5:e8:53:d0:99:c3:
4d:07:63:c4:f6:51:9c:e6:16:d0:8c:37:4a:ad:5f:51:50:f7:
1d:48:cd:12:ad:33:bf:62:92:c7:6a:09:49:e5:f4:74:88:ed:
11:90:07:7a:2d:2e:21:90:c4:31:f9:7a:aa:1a:8e:9a:5b:e7:
74:22:fd:15:53:72:41:9a:60:67:88:40:22:24:ce:49:19:c3:
88:63:4a:76:19:03:2a:45:57:ac:5e:37:11:50:1e:7d:de:53:
d7:8a:c2:be:6f:8f:27:53:54:81:02:6b:3d:46:a5:39:2b:1d:
33:26:72:07:8d:7a:39:1b:4c:00:69:d3:dd:c7:9d:8a:96:ed:
c5:36:10:05:b4:fa:f2:95:cd:5c:e4:71:f7:76:86:29:fe:ad:
13:1b:2a:f4:38:7e:a9:6e:dd:e6:bb:5f:a0:0c:f6:7f:ce:c8:
bf:6b:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:15:04 2025 by rpki-client