Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: TLJKGYxm8tUGz7+CfZgxYm/RQTI4UUocYyu+6zhHBno=
Subject key identifier: 50:1C:B2:5E:3B:38:A2:9B:DA:0D:95:41:FE:5B:36:8A:DD:C8:26:29
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 0197586D15881082AD16DA612A31C589544F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: AC
Signing time: Tue 10 Jun 2025 06:00:33 +0000
Manifest this update: Tue 10 Jun 2025 06:00:33 +0000
Manifest next update: Wed 11 Jun 2025 06:00:33 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: /fop3Ax2OtG//xIY8EAD5tet1xThk0c3CbGOyS7dWXI=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:15:88:10:82:ad:16:da:61:2a:31:c5:89:54:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Jun 10 06:00:33 2025 GMT
Not After : Jun 11 06:00:33 2025 GMT
Subject: CN=501cb25e3b38a29bda0d9541fe5b368addc82629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:18:07:9b:6b:5e:7d:0b:34:0e:77:23:e6:
c4:4a:95:0d:7e:53:b2:80:fc:2f:23:51:31:43:01:
63:eb:81:d5:97:af:04:51:d2:3b:19:e9:0b:1c:6d:
1e:5b:2c:09:5b:b5:7a:3a:93:96:54:8c:83:fb:e7:
66:70:38:39:98:be:42:92:60:67:2f:5f:8c:39:d9:
95:e9:fe:11:40:a8:e9:8b:6b:ba:b4:95:2f:d4:05:
a6:2d:c2:a2:db:a8:61:f8:5b:b4:14:ee:5e:11:56:
08:b4:0c:f2:3f:81:b0:d2:4d:f6:1f:fa:3e:97:d4:
35:0d:b9:05:1a:48:c8:50:36:8b:ee:0d:2b:f4:c0:
1c:76:32:97:8d:01:1e:6c:14:14:11:34:23:dc:3f:
7d:db:d5:2f:6f:06:cb:9e:c0:52:f5:a4:80:26:6a:
f2:50:17:e3:95:f0:33:db:64:d4:fe:f4:ac:1b:a5:
c5:d6:ca:72:e9:10:b9:1a:f8:3c:2a:bd:e6:c4:6a:
a6:8c:32:0b:a3:28:d2:f1:d0:93:ad:09:02:93:f4:
5a:ec:28:4b:35:aa:90:46:3e:11:29:8f:4f:15:ac:
15:fd:47:8d:47:66:d8:fc:48:73:e2:e2:10:a7:11:
23:93:bf:d0:73:7a:18:3e:10:0a:ed:d6:90:8b:8a:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:B2:5E:3B:38:A2:9B:DA:0D:95:41:FE:5B:36:8A:DD:C8:26:29
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fa:a0:58:97:84:84:37:2d:36:34:dd:a4:29:82:82:ea:a2:
5a:1d:e2:85:e2:0a:27:dc:ec:3a:4e:47:b5:d7:bb:5e:fe:a8:
77:b9:4e:0c:fb:4e:a0:11:5a:41:d9:1f:43:f4:52:1e:4c:a4:
5a:28:8f:79:e3:d7:9b:d5:f6:27:f9:20:20:f4:d7:c9:6c:29:
89:95:54:5d:84:08:d1:ef:b2:11:3f:8b:61:d4:e6:06:0d:d7:
95:75:23:3a:6e:8f:7b:2e:4f:57:dd:2a:0a:a3:e9:3a:c4:7e:
18:c1:58:a5:97:e1:a6:64:1b:de:44:35:2b:ef:a1:e4:a5:96:
16:33:c2:9f:cc:47:e9:eb:4b:77:6d:64:0f:b5:c8:df:47:9f:
f3:b4:ab:3c:3a:c1:8e:1c:1c:bf:54:cb:aa:98:91:65:6b:57:
75:5c:f6:ca:30:1b:5b:74:ff:5c:a6:cb:c0:b8:03:b8:ec:0a:
08:af:fc:f6:40:3b:e8:ba:83:01:cf:c8:bc:f3:95:2e:d8:98:
bb:e9:ce:cd:be:6c:ed:a3:2f:1b:e6:c6:42:6e:ca:70:3d:09:
01:21:3f:54:83:0e:ba:79:d4:4b:29:52:5c:fe:0a:77:10:98:
4c:76:d7:d2:d2:21:08:93:23:19:01:2e:92:1e:9f:a9:d3:f8:
f1:78:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:22:44 2025 by rpki-client