Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: N7uQ7QJO0KuM3MtY97T/NpAhWfrWj8QpH6GkBDeUsDA=
Subject key identifier: A2:E2:50:1A:FE:96:15:26:89:5E:E7:68:8F:91:E4:98:5F:E8:37:33
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 01976929AD334D95E3B7C184C2627AB45212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 1464
Signing time: Fri 13 Jun 2025 12:00:28 +0000
Manifest this update: Fri 13 Jun 2025 12:00:28 +0000
Manifest next update: Sat 14 Jun 2025 12:00:28 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: ddj06N2H0WpQL929HfNKv8dP8yfhrPgzFryCxUD/c9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:ad:33:4d:95:e3:b7:c1:84:c2:62:7a:b4:52:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Jun 13 12:00:28 2025 GMT
Not After : Jun 14 12:00:28 2025 GMT
Subject: CN=a2e2501afe961526895ee7688f91e4985fe83733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:44:b5:7d:96:b3:81:49:00:c2:1d:9f:99:
ed:25:d4:ac:c7:93:cd:cc:d1:4e:e2:21:ed:a5:34:
69:51:92:de:57:90:f7:6f:11:9f:d1:57:51:78:5b:
40:0d:83:32:d4:05:22:65:af:68:ed:ad:f7:3f:fb:
27:82:a1:44:ab:d2:81:c8:84:92:c2:be:20:a2:df:
92:fe:34:ed:8b:e9:5d:2f:6f:b0:89:e1:ef:77:55:
9c:58:b9:db:8a:18:78:fa:fc:2d:35:31:94:27:3a:
07:94:c1:a4:44:7a:b0:29:b9:6e:ad:f0:81:81:e2:
f3:a5:81:28:05:98:43:32:09:b9:c2:5e:fa:1b:d3:
6d:27:93:1a:d4:77:0c:63:40:a8:9f:d0:5b:a5:8b:
1d:87:d4:38:7a:6f:e9:c1:35:f1:a2:68:7a:83:f0:
99:83:5d:3c:fa:3f:ff:3b:05:a1:21:13:8b:9d:61:
3d:44:a4:11:13:64:5e:12:33:5e:84:d1:db:dd:94:
fd:4f:77:77:31:63:53:f1:4c:e5:56:82:a0:5b:87:
a4:ea:97:c2:bb:f4:0a:03:75:5f:02:cc:0c:c9:db:
49:6a:9c:99:03:95:39:63:91:59:6d:1f:fb:83:1e:
ea:77:8d:8b:44:de:c2:ba:de:de:7b:8b:00:ae:c7:
36:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:50:1A:FE:96:15:26:89:5E:E7:68:8F:91:E4:98:5F:E8:37:33
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:be:c1:f1:d2:66:2a:bf:cb:34:c4:1d:bc:dd:30:bd:96:11:
4b:17:0a:07:2f:f7:6b:4b:af:29:8a:f4:c2:cf:08:f9:28:d5:
e1:1a:5e:d8:14:fd:28:6a:ca:01:6d:b4:5b:5c:9f:cd:28:01:
bf:84:f6:93:59:a9:30:62:03:65:9c:47:72:df:cd:41:f0:a6:
0c:cc:7b:b4:0d:bf:78:7b:34:8f:bd:8d:09:9d:58:92:40:77:
2c:af:ed:d2:ed:5a:3d:7d:a0:5c:7b:80:74:03:9d:95:c9:2d:
fe:b4:f8:8f:e0:ed:e1:2d:65:90:79:65:94:9f:7d:39:c4:b3:
eb:40:cd:d3:52:7b:4a:3b:32:0d:ed:0d:1e:d5:69:f2:ab:54:
82:7a:3d:51:a5:3c:52:ee:ef:6e:b5:db:a6:c8:cf:3a:90:4e:
94:50:8b:44:39:bd:af:e7:c2:aa:98:50:84:90:b4:50:82:4f:
6a:6d:a2:1c:72:05:e9:50:44:e6:58:79:7f:9b:df:03:e3:b6:
ba:08:fa:12:2f:1c:08:39:af:b5:15:bb:d9:4f:30:7b:07:ae:
bb:c6:ca:00:9e:11:25:0f:94:76:dc:6c:f0:2e:f4:30:35:68:
89:46:fd:5b:41:8a:10:ac:8f:f2:c8:76:e0:90:8b:e6:10:17:
3d:36:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:15:21 2025 by rpki-client