Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: yCr2Ba+SmMOr1tp1Ej3M7BalbVWgNio0zAx53ZtHPnA=
Subject key identifier: 96:6A:25:64:AA:F4:B0:49:29:89:66:0B:58:A1:8B:93:5F:89:0E:94
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019745F8EC7344B9171F96952402A73ABD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 11ED
Signing time: Fri 06 Jun 2025 16:00:30 +0000
Manifest this update: Fri 06 Jun 2025 16:00:30 +0000
Manifest next update: Sat 07 Jun 2025 16:00:30 +0000
Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=)
2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: hL2G6ySTxwkPaaIyPcp0hCD/xM0PPrLYBKi7lycFwv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:ec:73:44:b9:17:1f:96:95:24:02:a7:3a:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Jun 6 16:00:30 2025 GMT
Not After : Jun 7 16:00:30 2025 GMT
Subject: CN=966a2564aaf4b0492989660b58a18b935f890e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:f5:b4:8c:52:2b:05:1f:89:db:f0:53:91:
89:14:6a:e1:1b:59:d6:b5:1d:59:82:25:53:0f:c6:
ae:e8:c0:00:0e:34:c6:f4:f0:61:2a:d3:38:11:fa:
e4:d0:f2:21:ea:e6:c2:5d:eb:fd:a4:96:69:6c:c0:
49:4d:d2:05:eb:07:ef:ff:00:fd:bd:c4:a4:6e:82:
2f:b1:c1:ec:f3:81:45:35:e1:c9:a9:4c:cb:20:95:
4b:98:8f:7c:00:52:dc:b6:28:20:21:e9:18:31:54:
a7:e0:2b:06:19:44:1b:28:ae:ea:e4:0f:49:bd:cf:
a5:90:bf:88:c4:d5:32:64:87:a2:d2:d5:57:ad:dd:
72:55:49:64:6b:1e:8d:60:87:27:42:d6:ec:0c:3b:
40:9e:1f:78:72:ed:fb:c5:a0:ba:aa:b6:13:d4:c9:
66:94:34:d0:d0:73:8c:68:d7:0d:b2:e9:81:6c:75:
d7:f4:f3:1d:95:36:04:5e:bd:3e:5f:3e:1b:9e:df:
f7:b6:ea:78:30:d1:32:83:fc:a8:22:00:a9:0a:84:
23:55:1f:d2:75:0e:12:48:a4:40:70:41:ac:e9:ee:
20:70:dd:8b:3b:77:21:da:a2:54:62:10:c8:1e:1f:
fc:4a:39:60:e1:20:61:dd:b7:14:8c:5e:e2:61:92:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:25:64:AA:F4:B0:49:29:89:66:0B:58:A1:8B:93:5F:89:0E:94
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:be:8f:a9:06:0b:59:f2:08:97:a1:84:d5:32:da:53:a8:db:
98:38:d3:ef:f8:25:71:be:a9:48:aa:8a:0c:32:d3:2e:59:ea:
e2:7c:88:65:10:11:d1:72:15:09:55:31:f1:63:2d:a1:8d:21:
1b:dc:82:7d:99:ec:d1:4c:86:60:e4:61:ae:bb:f9:c5:ac:9b:
9b:9d:4a:81:3d:9c:34:5d:c6:f4:4d:d3:94:83:32:6b:1e:ed:
12:3c:2d:72:32:4a:a1:70:08:d8:cf:96:51:e1:38:6d:b7:66:
e3:c8:38:89:8a:16:c5:a4:ac:90:3c:4b:10:6f:96:75:9f:7b:
54:94:8a:12:af:58:ae:e4:04:f0:5d:54:5f:e8:da:fb:f0:9c:
ef:83:a4:62:56:43:c6:e7:fc:e7:6c:0c:b7:57:dc:a5:a2:b0:
66:d4:f5:5b:56:d6:d1:41:18:a8:09:d7:2e:8c:cd:91:e8:21:
93:24:99:83:e9:22:99:e1:0a:59:09:d1:8e:01:02:58:2a:5f:
01:71:e0:5f:8d:4f:a3:15:70:a9:86:b2:d3:58:04:14:3d:18:
b1:77:94:28:77:87:e3:9a:38:b7:9d:10:a9:20:07:af:32:ed:
5b:86:67:3e:13:29:4e:ac:9e:26:10:8b:d8:c3:e6:03:f5:5e:
b2:ac:c3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:35 2025 by rpki-client