Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: FTjGOgscPgEhdzyZj/5wf8Fo9DdFltwrbFLwdFbx2A8=
Subject key identifier: C9:8F:ED:F5:E4:FE:8C:C1:39:64:A4:0D:36:2E:4F:BE:42:3E:87:1D
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 0197499ED37DEC1CCCC2F5E6E7F990575E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 0657
Signing time: Sat 07 Jun 2025 09:00:34 +0000
Manifest this update: Sat 07 Jun 2025 09:00:34 +0000
Manifest next update: Sun 08 Jun 2025 09:00:34 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: AlowD/JNoFowA2CxBlTM5O5BkXzd5pk4+EYTsPCryIw=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d3:7d:ec:1c:cc:c2:f5:e6:e7:f9:90:57:5e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Jun 7 09:00:34 2025 GMT
Not After : Jun 8 09:00:34 2025 GMT
Subject: CN=c98fedf5e4fe8cc13964a40d362e4fbe423e871d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:39:25:23:16:f7:fa:f5:b0:18:65:6a:88:
ab:0f:90:7a:68:e0:0e:38:91:12:c0:2b:bb:5e:e2:
6f:cd:ed:f2:3e:78:41:df:ee:72:f6:e8:0d:2a:73:
70:7d:e4:14:e5:a6:16:3f:9c:33:6f:35:fb:03:4b:
87:72:f5:15:09:90:20:d8:1c:ec:1b:0a:f4:20:9a:
f4:c2:c7:7d:68:04:f2:3f:ae:5d:85:5a:5d:cb:b7:
3f:17:ae:cf:3f:80:44:06:b1:3c:14:fa:2f:83:e4:
e2:56:98:99:51:b8:54:5b:38:85:54:ce:28:bc:08:
5a:b0:15:52:e3:7d:21:cc:c9:41:6b:7c:05:08:86:
80:43:ec:d6:6d:46:25:3d:19:f8:7f:0e:69:cd:e8:
f0:31:94:02:a3:c7:f4:61:5a:0b:50:be:90:00:e8:
aa:a9:85:17:cc:4d:72:66:11:e5:82:b0:52:a8:4a:
19:ea:04:5f:c4:80:55:70:12:2a:14:50:ca:22:51:
99:7e:04:eb:df:bf:2c:8b:45:19:57:c2:f3:18:fa:
43:4c:84:6b:e1:32:2c:3f:5e:90:a4:ae:9e:64:b6:
97:ca:42:88:ed:49:b9:6e:34:b9:47:51:01:04:92:
55:0b:31:6e:e2:6b:ee:8c:de:bd:26:6a:1d:98:d5:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:ED:F5:E4:FE:8C:C1:39:64:A4:0D:36:2E:4F:BE:42:3E:87:1D
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4f:b7:d7:5e:61:14:5b:50:3d:9d:a3:51:68:4b:a4:99:74:
d0:d1:2c:1a:81:50:fc:c7:2c:54:97:a4:4b:7f:1c:c3:3d:10:
59:1a:6a:2d:cb:2a:21:b9:76:54:a0:58:fc:bd:4f:c5:57:d4:
1e:24:13:65:67:9d:e3:5a:06:4f:30:6d:c9:2c:a2:93:79:99:
51:2b:86:3a:85:59:39:22:33:f8:a2:c3:7d:74:d9:df:37:90:
1d:4b:26:4d:a5:b3:9d:7c:3a:8c:bb:23:c3:e1:c4:e6:4f:ad:
6d:29:04:85:71:f0:53:c2:17:22:ca:96:77:ad:2e:15:69:1b:
fa:b6:84:52:48:ad:cd:0b:19:d1:e8:4e:57:6d:aa:be:43:f9:
2f:e9:6c:4a:29:88:3a:f7:7a:4a:90:25:19:f9:38:30:b9:e8:
dc:df:1b:bf:2b:2e:63:04:09:e7:44:78:81:45:28:bc:33:7f:
fb:d1:9c:39:96:ae:5b:26:50:17:95:ed:dc:05:70:be:37:0a:
c6:35:34:19:30:b7:c5:64:53:88:81:38:ce:1c:93:77:8a:8d:
20:de:60:d1:8f:c0:1a:4f:af:f2:c5:03:00:d4:fd:c4:f7:34:
52:e7:10:14:11:f1:54:31:2c:79:83:98:fa:c3:42:ce:0d:70:
ce:48:af:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:02:51 2025 by rpki-client