Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: 6qifD6mdpT139CD9BwEtKHnr9ML2fLx9eazcL3VYT8w=
Subject key identifier: E3:19:48:92:FD:5F:AF:A6:44:01:6B:DF:17:55:B5:61:FC:F9:AC:C3
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 01976772E9419AD3358D03B0BCC342CD183B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 07AF
Signing time: Fri 13 Jun 2025 04:01:13 +0000
Manifest this update: Fri 13 Jun 2025 04:01:13 +0000
Manifest next update: Sat 14 Jun 2025 04:01:13 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: QTqkTrJl55ersq3KBSMS84YIecTXQlKeF2mmC0wTPmc=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:e9:41:9a:d3:35:8d:03:b0:bc:c3:42:cd:18:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jun 13 04:01:13 2025 GMT
Not After : Jun 14 04:01:13 2025 GMT
Subject: CN=e3194892fd5fafa644016bdf1755b561fcf9acc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:ee:07:a7:06:ad:e5:b6:07:73:21:11:c1:
5c:72:78:27:d9:9e:f3:cf:33:3a:c3:92:ef:02:b7:
8d:5c:61:99:0f:99:0d:b4:d5:8e:0f:db:82:0d:87:
91:b6:6c:d4:71:b3:1e:e4:13:06:55:36:28:48:5e:
04:84:22:97:61:d4:07:03:62:d3:c4:84:57:0f:e2:
4e:7d:a7:8b:dc:02:9a:c7:ff:d8:e6:3c:43:8e:ae:
f7:13:f9:96:1a:d7:9d:e3:67:35:5c:97:75:b8:ed:
e7:60:dc:22:1f:9e:f9:cc:8f:0d:3b:00:06:4c:b1:
ef:d5:6b:27:c3:54:5b:21:c4:ea:93:91:c3:22:38:
76:b9:15:4e:a5:9d:a1:d5:14:34:a3:f5:6f:17:ee:
8b:cc:b8:ae:71:b7:cc:a9:07:75:fd:8e:83:63:d3:
1e:72:72:e3:09:3e:db:a2:4e:98:f7:2e:0f:b5:47:
cc:7a:bb:ef:c2:d3:3e:f6:bc:5a:91:f7:a7:22:52:
2e:0e:24:a1:f9:8e:88:30:8d:c2:1d:84:6b:bf:f5:
53:c3:1a:e9:e8:25:67:1d:f5:0f:be:34:f3:04:c7:
cc:fa:bc:14:1a:1c:85:15:30:db:ef:ea:bb:5e:87:
ec:6c:db:a2:8b:33:f2:db:b6:52:e9:2c:56:0c:71:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:48:92:FD:5F:AF:A6:44:01:6B:DF:17:55:B5:61:FC:F9:AC:C3
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d1:11:a3:d9:14:09:c0:4b:d8:da:10:7f:f7:c4:f7:d2:a5:
b2:b9:dc:74:ab:c3:c2:9e:07:53:a7:a7:fc:b8:8f:8d:d7:9f:
58:40:ca:69:5b:49:b5:9e:84:ea:b1:4c:81:c1:a8:a2:f1:55:
a4:a6:b5:6d:d6:51:41:3a:12:ae:cc:af:89:77:c5:74:74:0d:
62:17:53:9f:9e:46:15:de:93:bd:ea:a8:bc:bf:2c:07:6c:12:
4a:95:64:14:74:95:44:42:e9:6d:c0:39:5d:36:89:0b:17:2a:
5b:32:19:05:e8:02:ab:43:a8:d9:4e:a9:08:a0:79:33:d8:41:
fe:a7:d5:ee:ee:80:85:21:d4:72:df:21:e6:c5:f5:de:34:82:
47:05:88:c5:a1:7b:18:1e:46:47:9d:a0:4e:8f:8d:36:07:3a:
59:39:6f:a5:fc:a5:1e:b8:61:86:e8:6a:44:d6:b2:67:e7:40:
15:f2:1e:86:92:05:c8:5f:9a:fa:98:7f:a3:21:0c:a3:d0:90:
99:f6:20:55:83:14:58:c2:87:64:f8:b5:9a:a8:cf:a9:b2:96:
d6:f0:60:bb:53:b2:ab:00:95:b3:98:e0:cc:ce:8a:f4:a1:11:
d9:a1:e8:f6:1a:bd:43:eb:2f:5d:eb:da:2f:e7:aa:47:66:27:
d8:98:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:17:21 2025 by rpki-client