Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: ZdexUSTmBxOEvi1mQJdIfwBnkz6VwbVyn6G+aOJmNJA=
Subject key identifier: 5C:EB:24:37:C0:70:09:7D:C9:A5:78:56:24:3D:E6:F1:D9:71:41:33
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 01975BDBD3B46B4DCD7E6B5E055A644566F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 07A9
Signing time: Tue 10 Jun 2025 22:00:22 +0000
Manifest this update: Tue 10 Jun 2025 22:00:22 +0000
Manifest next update: Wed 11 Jun 2025 22:00:22 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: UQeQKablzdsiunnw3OQq0/QCL3gVJB4X+3VUsHaU7/g=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:db:d3:b4:6b:4d:cd:7e:6b:5e:05:5a:64:45:66:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jun 10 22:00:22 2025 GMT
Not After : Jun 11 22:00:22 2025 GMT
Subject: CN=5ceb2437c070097dc9a57856243de6f1d9714133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:69:47:aa:f4:d4:85:77:80:16:f3:19:83:
0e:ff:93:d1:44:75:33:61:4c:32:59:b3:d8:b2:0b:
cc:fa:f0:e4:9a:30:b1:d7:b3:c4:8a:e9:fe:ac:d1:
ee:1c:da:35:69:69:5d:e8:3e:1c:52:46:d3:50:50:
58:dd:0f:d9:e8:e5:bb:ec:d3:22:9a:0b:90:bb:94:
d4:ad:7b:38:5a:81:ea:bc:3a:21:b4:23:ba:e8:c6:
59:16:44:f7:5b:a7:15:b0:f5:63:3a:fd:c0:f5:71:
27:57:44:fa:13:79:67:9d:fd:04:f3:2a:b1:b6:5d:
37:1a:d9:b5:bf:5e:ba:9e:03:8f:29:5a:51:d6:6d:
39:12:04:03:8c:bc:a5:38:fd:ee:ff:52:e7:54:fc:
27:91:ce:93:07:0a:85:58:60:59:ff:b5:3a:0f:55:
4a:fb:9e:5d:b1:b9:d4:f6:a4:8a:9f:08:72:71:21:
50:6c:01:75:87:15:19:2f:fa:94:81:82:9a:28:6b:
8c:b1:79:92:f0:b2:64:6d:cd:e3:22:13:f2:0e:9c:
93:dd:ae:af:d3:4c:af:10:55:8f:e7:a8:85:70:61:
e1:f8:0e:2e:83:29:d4:ee:73:4e:11:39:62:8c:45:
05:31:d3:c9:8e:4e:6e:38:78:22:f2:3c:5b:47:1b:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:24:37:C0:70:09:7D:C9:A5:78:56:24:3D:E6:F1:D9:71:41:33
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cd:50:5c:3d:d6:a9:c2:76:39:d0:54:04:8e:f9:f6:df:79:
eb:d5:04:3e:30:39:54:3c:1b:bb:c5:4e:49:98:9e:40:e3:c4:
fc:4a:5a:3a:d1:4f:23:93:11:b1:26:21:92:98:94:cb:95:52:
a0:37:8b:fa:f2:e0:3f:e8:78:cc:23:21:fb:ce:c5:db:da:21:
e9:00:11:d7:d5:fb:42:78:65:0d:a6:b5:83:b3:2b:3d:90:e3:
44:e2:b7:1f:73:66:d5:68:cd:2a:36:f6:8b:72:a2:2c:b9:a2:
88:73:c3:1a:ce:39:4d:e5:59:2d:b9:6f:23:02:81:e0:5f:a6:
58:e2:ea:e0:88:8c:79:ed:54:42:b0:c9:6c:8a:44:40:76:80:
dd:e3:19:cd:2d:43:2c:95:6c:2b:b1:14:74:d2:5a:5c:6e:cf:
8a:33:3b:df:d7:a5:b8:17:8e:f0:41:f8:db:d0:38:97:f9:a2:
ed:ff:89:6f:75:78:f9:9b:15:83:9f:d7:4f:d1:77:da:0a:b5:
8f:11:f8:75:d6:6c:0d:f6:48:f8:b7:ee:6a:5d:34:b2:e1:5d:
45:e2:ca:3c:bc:02:c2:f6:45:90:0b:38:cb:da:ad:e1:3a:99:
50:88:45:3c:39:65:8a:9a:c2:01:f7:a2:3f:34:09:30:2f:39:
16:c7:0a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:22 2025 by rpki-client