Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: 4FFg4LqvWk78GPgnTTG5nKpM0jEqR5aK+Wr08EGIgYc=
Subject key identifier: 31:DB:29:B8:7D:5E:69:7A:59:0C:03:85:B7:33:48:9E:FB:60:EA:A8
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 0197499F372AA472CB3E9D255D3F99DB2F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 09:01:00 +0000
Manifest this update: Sat 07 Jun 2025 09:01:00 +0000
Manifest next update: Sun 08 Jun 2025 09:01:00 +0000
Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=)
2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=)
3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: jammoAi3mOXi0F6XHRSb5XqmcFc148/m+qjHAHazzQI=)
4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:37:2a:a4:72:cb:3e:9d:25:5d:3f:99:db:2f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Jun 7 09:01:00 2025 GMT
Not After : Jun 8 09:01:00 2025 GMT
Subject: CN=31db29b87d5e697a590c0385b733489efb60eaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:51:48:a5:e0:e4:40:c6:ab:56:18:b2:4d:
e7:ba:07:65:22:d3:fe:e8:ff:4a:52:e4:75:a1:9a:
ff:1a:7a:91:0e:6e:30:73:16:f7:38:90:dc:67:d0:
99:5c:8d:f9:cd:54:6e:46:5c:11:2c:2b:02:f4:6a:
c9:89:4e:d6:c8:f2:ea:24:d6:53:64:bf:26:f2:ea:
31:99:71:db:8a:91:fd:8b:86:5d:95:0f:58:11:70:
d3:af:d9:0e:23:21:09:3c:ff:03:22:39:cb:69:23:
d8:78:bb:a9:6c:3f:37:63:1d:fb:90:b5:89:13:5a:
dc:00:14:53:21:92:95:5f:c1:bc:c3:f2:4e:33:d4:
a3:c0:4f:65:53:cb:1d:3e:40:dc:1d:dd:58:2b:5f:
e0:69:41:71:af:0e:26:b8:21:27:06:72:72:df:4f:
58:f8:71:2b:87:61:9a:90:d5:5a:8b:01:ef:32:17:
1f:12:0d:65:e2:b9:4d:4c:3f:d2:3c:7d:69:04:f2:
a7:37:51:0f:75:9b:43:7c:d1:3b:a4:1d:48:63:e1:
5a:a3:03:c2:9d:34:7d:5c:f4:fa:1c:bf:39:0f:20:
4e:df:c2:b5:2e:42:16:2a:7d:dc:09:02:ba:dc:41:
9c:e3:ea:dd:58:b3:df:f8:90:3a:42:78:64:7a:cc:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DB:29:B8:7D:5E:69:7A:59:0C:03:85:B7:33:48:9E:FB:60:EA:A8
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:48:d5:92:f5:44:de:b8:70:dd:09:28:bd:e0:d5:11:6a:56:
84:83:52:8b:7a:28:5d:d8:f9:c7:47:21:26:aa:f1:e2:56:ab:
01:e2:73:bf:1a:1d:56:bb:84:83:1e:8c:5c:fb:f0:82:ba:4c:
f9:2b:4d:6e:c4:49:05:3f:ea:99:a4:89:00:fe:c6:79:4a:4a:
94:92:f0:fd:81:0f:b3:a7:2b:7e:f7:80:39:45:fe:44:51:0f:
d0:61:37:f8:53:f1:e0:aa:58:52:1e:55:f5:66:6d:85:e1:ad:
66:12:8b:8a:bb:e3:cf:47:c2:50:63:d2:33:70:aa:fc:df:48:
a3:23:45:af:26:44:91:49:80:2c:52:d9:9f:5f:1d:71:f7:b7:
fd:72:af:87:dc:b2:30:6b:86:75:8e:cb:15:62:c4:33:1a:e2:
ea:69:67:dd:e6:bd:64:71:d0:60:8e:8c:0d:4d:ba:3a:d3:e6:
4c:71:64:b4:48:15:70:17:87:cb:66:a4:2f:49:b9:a2:c0:85:
6c:d5:0c:f5:f3:35:be:b7:47:d3:12:b3:0e:2d:f2:7a:9b:cf:
e1:17:aa:ef:3e:8e:24:6b:ca:d9:3a:b8:f6:5e:1a:01:96:69:
98:4b:82:c6:cc:4f:12:9f:7f:4b:94:0a:e2:81:ba:4f:d3:61:
dc:85:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:24 2025 by rpki-client