Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json)
Hash identifier: Pbyu/7R2xdSYFgwLJnP9UsqEnuUMI6UYfspSa8+IxRo=
Subject key identifier: 9E:E6:DD:40:DF:15:CB:7B:79:62:17:7C:49:5D:13:BA:E0:60:8F:D8
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 019735E13384F4A5139D5385B2F363C9B0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
Manifest number: E7
Signing time: Tue 03 Jun 2025 13:00:40 +0000
Manifest this update: Tue 03 Jun 2025 13:00:40 +0000
Manifest next update: Wed 04 Jun 2025 13:00:40 +0000
Files and hashes: 1: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: /ow2hvP/7U11BXcCDEzw261J3lvnUDACZSnnFpFSXyk=)
2: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=)
3: gD3woXUC-WqortYqBWCfUTbN-6s.roa (hash: 4m9GD86eXZHIDuKu5606dRxx8eCf4kOZ5e1eJk9t9m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:e1:33:84:f4:a5:13:9d:53:85:b2:f3:63:c9:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jun 3 13:00:40 2025 GMT
Not After : Jun 4 13:00:40 2025 GMT
Subject: CN=9ee6dd40df15cb7b7962177c495d13bae0608fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:96:d3:e1:a2:ab:f3:7f:e5:58:54:24:5c:
14:60:9e:30:4c:01:00:ba:4e:44:fa:1a:4d:eb:aa:
22:28:6b:bd:2d:f7:83:ad:8d:57:fc:47:63:d7:69:
ee:fc:9d:0a:b3:a2:e0:2a:11:09:5b:16:7e:98:a7:
ad:05:a7:a3:4f:b8:e3:ab:3f:c7:72:bb:bd:27:ee:
13:ea:a2:5b:88:6f:36:29:4b:b8:6d:12:38:eb:14:
bf:95:b1:b4:f4:ad:56:7f:7e:c3:f3:ba:23:3e:28:
1f:db:43:68:dd:b9:89:2d:2f:6a:20:6b:f6:77:23:
10:25:81:5c:78:d1:63:e6:13:f8:4d:e1:88:d5:47:
05:16:0d:b4:3f:f1:26:48:1c:3d:d2:76:66:37:60:
52:7a:9f:74:46:f8:c4:ec:0b:d2:97:6e:9a:39:95:
09:8a:92:79:c8:89:ae:ac:97:6a:20:f3:08:c1:65:
62:25:ba:94:f6:ae:5f:44:11:6b:6a:63:52:95:17:
2c:c2:a7:fd:fa:82:20:b8:d1:4d:a3:c3:be:54:7f:
6f:88:50:59:8f:18:1f:70:a6:48:f9:90:70:d4:c1:
51:ff:09:d1:9d:9b:b4:2a:a7:3b:46:0b:1e:c2:f4:
fb:0d:12:d4:15:1e:94:66:a7:3e:88:f2:8e:a1:33:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:DD:40:DF:15:CB:7B:79:62:17:7C:49:5D:13:BA:E0:60:8F:D8
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a6:95:75:ee:41:a5:3c:39:40:eb:f4:2d:27:fb:5f:d6:9d:
74:01:87:70:29:90:e4:da:ec:8d:b3:13:2d:f9:65:de:ee:3d:
5b:0c:67:b4:d4:0f:5a:c8:a6:50:b6:24:5c:b6:02:f9:e4:4a:
36:9d:57:ab:d2:1c:58:d0:7a:f3:b4:a0:f6:24:f2:32:55:08:
63:2b:a6:4c:7a:1d:1c:2e:0f:44:ed:f6:72:ed:3a:81:2e:50:
ab:a9:a7:16:60:c6:d1:97:7d:c9:e0:a7:38:7c:27:ee:e2:26:
16:dd:a8:f1:37:15:fd:86:2b:fc:b8:2e:ef:76:a0:cd:29:d6:
39:9b:67:db:34:02:81:6f:97:3d:14:eb:92:b9:ae:ca:35:0c:
7f:9b:f5:fb:f2:fa:7a:ab:a2:e8:a6:fe:a2:8f:20:c7:58:32:
d9:4a:4f:9e:99:71:9f:9b:cd:42:59:70:37:f5:a9:67:49:c6:
3d:d7:52:6f:2e:9a:8a:43:38:9d:12:52:78:0f:f9:c5:5b:40:
e8:47:a0:c0:5b:fa:33:87:e7:b2:52:3e:71:1d:15:4b:7c:f1:
68:d6:23:7b:01:bc:eb:90:00:c0:7b:39:90:19:58:e3:b8:73:
b6:89:41:64:d1:ec:05:12:5a:42:95:b4:6f:0d:13:c2:75:e4:
4b:20:43:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:17:45 2025 by rpki-client