Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: Ayt6Pht++FRkba8LRROLIFb/nPOiHcCGTapIu/omPeg=
Subject key identifier: 77:24:B6:D5:61:B6:8D:CE:3F:F7:47:8D:20:B0:95:61:6D:06:C9:D2
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 01974289EE329E05DC605A7D7A751227B7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 00:00:25 +0000
Manifest this update: Fri 06 Jun 2025 00:00:25 +0000
Manifest next update: Sat 07 Jun 2025 00:00:25 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: bidceSm+abnXqqz0d11tpL1KuzibSXaqoxYvWM8O/UI=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:89:ee:32:9e:05:dc:60:5a:7d:7a:75:12:27:b7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Jun 6 00:00:25 2025 GMT
Not After : Jun 7 00:00:25 2025 GMT
Subject: CN=7724b6d561b68dce3ff7478d20b095616d06c9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:6c:48:c4:95:ab:75:bb:bc:85:d0:22:aa:
79:9f:69:b0:67:a6:54:5b:84:46:31:c2:82:43:84:
59:0e:5b:fd:92:51:3c:4c:f0:75:b2:9d:ad:8a:9c:
84:95:75:01:8e:af:58:c5:1f:54:68:98:21:d2:53:
a1:ab:10:8d:b5:8a:8e:4e:31:81:60:b3:d6:3b:8d:
22:0d:30:87:15:1a:a8:f0:ec:10:d0:3b:c2:eb:8c:
26:4f:13:d1:04:86:13:88:6a:a2:73:6c:f0:9b:4c:
80:a6:01:bc:7b:9d:fd:2e:57:6a:68:58:d3:13:27:
7f:14:00:44:e5:e6:c8:d7:25:04:10:9f:61:7b:71:
65:2f:67:b1:70:7d:4f:65:86:7e:b0:63:08:2b:f1:
3a:4d:bb:4b:cd:79:61:28:3c:79:9b:9d:50:f8:58:
f6:4d:e6:e6:52:a3:80:3f:2e:60:0d:c9:cd:af:5b:
0b:fe:20:f8:58:da:e9:63:61:72:06:d8:85:5d:f1:
80:13:a3:fc:6a:37:c7:9e:de:98:cb:f7:6c:cc:09:
1a:fc:18:6b:df:35:71:96:59:b8:c8:51:a5:f4:59:
8e:7d:3b:2d:ad:80:2f:ca:90:e7:b2:87:ce:fc:38:
50:b9:33:7f:30:bd:ff:26:a6:08:b5:34:e3:04:76:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:24:B6:D5:61:B6:8D:CE:3F:F7:47:8D:20:B0:95:61:6D:06:C9:D2
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:9a:af:fa:c6:34:63:4d:1e:05:e6:70:bc:9c:db:f6:df:cd:
ea:0e:d7:0d:1a:1c:77:95:dd:a0:3e:dd:d4:f8:52:31:50:29:
d8:3c:78:01:e6:be:78:e9:26:40:90:ec:5b:f5:e2:a4:01:0b:
cf:77:b0:15:ef:8c:58:6a:2b:a5:2a:57:a6:31:8c:27:19:96:
f3:11:6a:5a:8a:c4:4f:d3:2b:9b:aa:f3:35:40:d2:69:15:91:
43:01:f0:c2:0b:0c:99:9e:3f:93:24:20:d1:8f:51:9c:58:50:
34:dd:4e:23:88:4a:29:7c:d3:c3:bc:00:52:34:09:fa:fa:ac:
ca:fa:a3:78:8a:8b:20:a4:06:07:c7:24:2f:c1:45:1f:76:20:
a1:4a:c4:23:8c:57:b8:39:89:ec:3e:bf:54:f9:4d:a1:bc:66:
23:97:41:1f:94:10:37:5d:73:1f:84:60:4e:b3:13:8d:1b:06:
3e:f4:f6:e8:07:93:91:f2:1f:27:4e:15:00:3a:4d:5f:33:8b:
61:31:15:4e:51:e7:3b:95:11:03:41:f9:9b:76:9c:7e:82:45:
be:c8:92:9e:81:3a:d2:6d:8c:ad:35:ad:11:01:f6:64:90:26:
d4:ab:1c:c1:88:6a:98:9e:8a:ab:f8:e8:04:d5:1e:e9:18:fe:
e2:47:ac:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:19:09 2025 by rpki-client