Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: N4UZa02XbeUEusAB2CaKn0My+zaAucPKxe6J7KIzCVQ=
Subject key identifier: 80:F8:7A:A0:96:41:B7:F8:CC:65:40:B1:A9:16:4C:5E:5B:BA:4A:D8
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 01974EFC145B62C05CAD0673752F0797584F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 04D0
Signing time: Sun 08 Jun 2025 10:00:32 +0000
Manifest this update: Sun 08 Jun 2025 10:00:32 +0000
Manifest next update: Mon 09 Jun 2025 10:00:32 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: 7c6J5ucCh8SsdoYUaJ0A2SucjiJqTZ6vUFB20drUiT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:14:5b:62:c0:5c:ad:06:73:75:2f:07:97:58:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Jun 8 10:00:32 2025 GMT
Not After : Jun 9 10:00:32 2025 GMT
Subject: CN=80f87aa09641b7f8cc6540b1a9164c5e5bba4ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:5c:c5:ff:80:4f:11:ca:d0:fc:e7:6c:2b:
79:e3:b8:15:6d:8e:57:9e:47:02:4e:c8:21:96:7f:
b5:ce:6f:15:dc:e7:b2:0c:1f:22:4d:2b:06:70:a2:
bf:b5:1b:30:cd:21:a2:59:ec:d2:25:fe:6a:44:70:
ab:53:5d:58:df:e1:54:77:ac:09:cb:46:fa:5e:02:
d9:e3:96:6c:72:8c:61:ea:a6:6e:c1:03:db:6c:a4:
62:c2:05:c4:36:32:75:bf:91:b7:31:a8:e9:24:f2:
3a:ae:37:fe:c8:00:07:cd:c0:a2:00:5a:bb:4d:7b:
6f:a7:97:19:78:db:39:e2:6c:2c:7f:c3:4d:ea:67:
28:2b:34:ac:b9:fb:bb:52:48:ed:e2:d7:93:78:b6:
47:93:66:48:0f:02:6a:3a:25:61:98:49:86:bf:4d:
58:fd:25:65:37:42:2c:36:af:c2:53:32:b8:4b:85:
cc:2b:c6:48:1a:8a:d9:12:ee:13:25:40:3d:28:da:
23:ae:ba:96:14:a4:a9:35:4e:e7:05:7c:53:b9:5c:
66:d5:26:97:d8:5d:9a:90:6f:79:d1:8c:bb:c5:27:
71:72:6f:1d:6a:a0:67:f1:80:3f:f2:ef:53:a7:76:
06:b0:17:fc:41:2d:8c:bf:6c:eb:59:a6:51:1b:82:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:7A:A0:96:41:B7:F8:CC:65:40:B1:A9:16:4C:5E:5B:BA:4A:D8
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fb:1b:17:e0:6e:f4:6f:35:7a:8e:93:f6:8d:6b:88:47:c0:
96:33:e5:1a:83:b3:58:86:f2:5a:ac:c2:17:63:e5:39:e5:3f:
ec:db:b1:50:b5:e0:09:cd:05:90:91:32:5d:f2:56:47:c7:1e:
4f:d9:db:38:2c:0e:79:3f:20:23:2f:fa:8f:d0:d0:97:c8:31:
cc:08:f5:6c:53:a1:91:94:c8:84:8d:cd:47:d7:c9:a5:cc:39:
07:29:7b:6f:15:3a:58:b6:66:59:9d:2c:27:c5:82:74:bd:12:
26:dd:87:69:5f:bc:a6:27:1f:d2:20:f8:a9:03:48:15:36:8d:
8b:a3:cd:6d:d7:66:07:83:00:a0:23:8f:96:72:32:80:09:88:
f7:1d:39:48:ee:db:85:c7:b6:55:90:6f:68:a9:06:cf:75:08:
61:a4:b3:00:3c:13:c2:7b:ed:63:52:0c:c9:40:01:3b:f1:64:
a9:30:74:19:0e:ea:8b:1f:89:54:25:f8:2f:ce:15:03:51:7a:
bb:3d:eb:9e:ec:1b:46:e7:fc:47:ba:45:50:18:9e:9c:d8:10:
2e:7a:63:f6:15:d3:6d:f9:9a:26:e3:19:fc:8d:65:83:3c:c8:
ac:d8:bb:40:bd:e1:34:4e:00:4f:11:c6:81:4f:7f:7f:8b:54:
5d:a9:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:37:19 2025 by rpki-client