Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: BkuIyvJMwOx1ejRYAaTqhwiDFtT5NpRO2iHInUbDPLY=
Subject key identifier: 35:37:7F:96:6F:DE:23:94:F6:2F:CB:A5:C1:86:99:CF:36:5A:B0:52
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019748FA77D9D5256F20C6447CC65C768A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:01:03 +0000
Manifest this update: Sat 07 Jun 2025 06:01:03 +0000
Manifest next update: Sun 08 Jun 2025 06:01:03 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: Ssu9tTU5gWW/l8JW6yxc4wfXJzY4Prh91QsfBtFHYcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:77:d9:d5:25:6f:20:c6:44:7c:c6:5c:76:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Jun 7 06:01:03 2025 GMT
Not After : Jun 8 06:01:03 2025 GMT
Subject: CN=35377f966fde2394f62fcba5c18699cf365ab052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:0f:51:1c:02:2f:d6:ba:93:d4:67:9f:8c:
19:7f:e4:fd:f8:b2:0d:f1:15:89:8f:62:c8:74:f2:
b3:b1:0b:91:61:01:7b:1d:99:16:28:94:70:74:ff:
0e:7a:6d:55:b4:32:73:3c:0e:c2:e9:44:78:21:83:
68:9f:93:c4:2f:f1:b3:22:c0:14:a0:bf:53:08:05:
fb:a5:a8:ec:62:55:9a:3d:49:fb:c8:f8:13:30:d5:
0f:18:4b:03:39:70:4a:31:5b:2e:60:c6:14:d1:e7:
2d:0b:9b:31:5e:bd:a0:39:0a:1f:51:9b:3e:3a:49:
f3:b4:85:c5:f3:23:99:6d:eb:b2:22:83:79:80:35:
4f:9c:a7:07:d3:26:9e:f8:1c:36:17:1d:90:b1:4c:
d2:84:4d:27:b2:da:9a:21:0f:ca:c9:96:97:0c:ce:
73:c8:a4:35:a2:06:f4:fb:61:90:91:69:91:db:93:
67:7d:8f:3b:cf:88:d1:a7:e3:4e:d6:5f:4b:b5:21:
a0:27:c2:d7:e1:49:b2:f2:0f:30:a7:ea:0b:9f:a7:
1f:70:17:8c:05:0b:3b:9f:88:2b:35:a7:55:43:55:
34:f2:f3:43:86:a4:73:b4:3f:fd:a7:24:8d:31:66:
b1:a2:0d:64:ce:ba:a0:48:f4:29:1d:08:ea:f7:1f:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:7F:96:6F:DE:23:94:F6:2F:CB:A5:C1:86:99:CF:36:5A:B0:52
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e1:c0:c1:58:a2:d7:43:f0:2c:f9:cb:4e:af:bf:6f:35:14:
94:ea:a7:e3:e8:db:fa:48:d6:7d:f4:5d:c7:6b:a7:ee:a4:8b:
85:25:2d:3b:85:d0:e6:65:e2:40:e3:05:43:95:86:46:27:7f:
d6:4e:c0:2d:d8:88:41:7e:2c:b1:a7:06:2f:e5:42:f0:95:76:
ce:73:49:02:8d:9a:9f:47:6e:36:c3:d4:16:37:0f:37:7b:51:
1e:bd:3a:2f:c5:0b:85:80:3c:0d:a8:52:22:0a:40:34:53:1d:
8d:8f:3b:ab:61:c9:b8:f3:a5:7e:1f:37:9c:fd:d1:b7:34:2b:
bd:28:c4:39:65:c3:29:66:f4:e7:e5:7e:ae:34:73:55:ff:14:
0d:e5:0e:da:62:42:19:9f:24:e6:d7:ce:72:70:00:59:c2:ac:
cf:6f:03:ba:a6:0e:a8:51:9f:a7:10:00:8d:8b:0f:3b:ec:07:
3a:d8:fd:c3:ee:95:33:e7:3b:32:15:d5:3d:22:93:90:f7:89:
73:4d:ae:ee:b7:45:88:c7:aa:91:59:94:d0:f5:af:0f:de:b9:
68:6b:8a:e3:16:24:b9:a1:a9:c5:58:f0:86:f3:a3:95:99:8e:
6b:5e:c9:16:15:91:f9:4a:57:a2:fb:56:31:02:a4:2c:74:4c:
a0:4d:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:59:54 2025 by rpki-client