Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: L/l/6/2R+qKmW41S6ozY+JB6GqiN6Fg50GBavvto6y8=
Subject key identifier: 15:7B:F1:41:3E:FF:CA:F5:5C:C4:41:AC:10:0A:EF:4F:21:D8:98:C0
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 01974FA0F05A513E7776412D7702288DD2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0AE4
Signing time: Sun 08 Jun 2025 13:00:36 +0000
Manifest this update: Sun 08 Jun 2025 13:00:36 +0000
Manifest next update: Mon 09 Jun 2025 13:00:36 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: 7fjy48mTTZgh/xRa6C4jDzk7Z+b+B/6MTypl877PTxQ=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:f0:5a:51:3e:77:76:41:2d:77:02:28:8d:d2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Jun 8 13:00:36 2025 GMT
Not After : Jun 9 13:00:36 2025 GMT
Subject: CN=157bf1413effcaf55cc441ac100aef4f21d898c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:04:86:53:91:b9:7d:5c:b4:fb:58:42:03:
80:00:d4:c4:1b:45:8b:85:9b:13:13:0e:bb:d8:2e:
7a:99:af:57:23:38:bb:26:5f:8c:b0:ae:68:a4:b7:
6d:0f:f3:0b:8f:04:35:da:c6:38:ef:ce:85:80:bc:
90:4a:99:da:9e:be:45:d6:65:c1:49:c4:fb:37:c5:
43:dc:90:9e:49:8e:08:3f:62:4c:30:22:75:60:e1:
b1:75:46:a8:0f:27:94:15:e6:2e:7f:e1:19:f3:4e:
9c:32:b5:63:31:71:59:19:30:d7:ef:7c:c2:f4:4a:
fb:5b:e2:80:d2:1b:d7:66:1f:dc:4c:55:af:56:97:
5d:28:42:26:fe:55:5f:4e:53:f0:c2:42:a9:d8:02:
ff:30:40:a4:6c:ac:c1:51:9d:df:43:65:a4:79:a9:
07:e8:31:0f:d3:fd:97:19:fc:59:4c:dc:01:09:a1:
15:a0:8f:e5:f1:eb:2a:88:d6:e6:c1:01:33:c8:0d:
99:71:27:26:39:6c:f9:e3:a9:3c:61:f4:5f:e8:eb:
38:fe:66:c1:88:62:3c:db:20:d1:4d:42:82:17:bd:
d1:6b:e7:ea:79:d0:2b:d7:b2:e2:94:a2:0b:d6:19:
83:25:56:06:69:80:01:08:f2:f3:a4:e5:79:70:e9:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:F1:41:3E:FF:CA:F5:5C:C4:41:AC:10:0A:EF:4F:21:D8:98:C0
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:ab:8d:62:d9:67:0f:d4:e8:8f:0b:8e:28:99:66:82:3e:
e2:3c:a8:99:d4:af:ae:cb:6d:64:c2:ce:85:5d:85:c9:3e:d6:
8e:6b:9a:a1:52:e7:65:70:09:2f:0d:db:6c:d5:94:0d:9f:31:
57:7b:93:d8:c1:2b:c8:89:7d:5a:a6:36:5e:10:8a:4a:55:49:
7d:e5:32:fb:f4:2c:36:fa:9d:10:5c:2b:83:47:cd:a6:02:9c:
44:12:95:b2:7f:39:80:9e:02:0b:65:ee:3a:0d:ca:55:9b:48:
ea:51:ec:5d:60:e5:dc:92:ca:09:7e:0b:1d:3b:04:0b:be:7e:
1b:12:47:e1:f9:85:1a:40:f5:03:b4:50:5e:7f:d9:8d:ce:27:
60:f5:7c:20:bf:64:17:34:96:a4:b4:f6:f7:84:3d:35:0c:3c:
85:c6:1e:e6:bd:b3:98:9f:5d:09:84:20:12:34:85:49:33:3d:
90:bc:e9:a1:9f:51:ed:ba:cc:87:aa:f1:11:53:d5:29:87:1a:
f6:c2:eb:2d:b3:de:10:43:ad:71:5f:5e:51:9e:2d:d0:d2:8c:
a4:de:f1:a1:98:77:79:03:6c:c4:ba:83:c0:d4:f0:44:4a:10:
13:45:a8:da:98:df:91:20:eb:9f:8a:ce:4a:a9:b2:b6:5a:a2:
cf:d3:48:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:14 2025 by rpki-client