Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: Rkz6BRLidO9kkhLnxbr6nGIcaHRos5Jj0u8IiH7vP2I=
Subject key identifier: 85:ED:AC:DC:B6:B4:D3:5E:F4:3F:1F:90:11:6C:EA:C3:98:6C:33:B6
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 01974F6A53A44084206BCD6F6DCBA129426B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0D35
Signing time: Sun 08 Jun 2025 12:00:57 +0000
Manifest this update: Sun 08 Jun 2025 12:00:57 +0000
Manifest next update: Mon 09 Jun 2025 12:00:57 +0000
Files and hashes: 1: CSSEySfg-kMM1glbJN0lrihqMrE.roa (hash: i80/t4BIajLc8cgICSb9zNCBrmIiB9z2e81bg2ShuPY=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: FSWz4FVJ5OzXbvnU5YGVjTVLb6Fcne9bDo9LcPqsCgM=)
3: Q-Q316aVXjaSDF_zXdBAZDqfQi8.roa (hash: pbIGWJtvDyC8Gs/UzFer1NbNeCFqgi6grLGP2phHoj4=)
4: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:53:a4:40:84:20:6b:cd:6f:6d:cb:a1:29:42:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jun 8 12:00:57 2025 GMT
Not After : Jun 9 12:00:57 2025 GMT
Subject: CN=85edacdcb6b4d35ef43f1f90116ceac3986c33b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:c1:47:59:39:40:8b:43:39:09:60:12:06:
30:7e:e9:64:51:bb:8b:16:7e:88:4f:8c:94:54:48:
f5:1d:bc:29:cc:67:d0:53:0f:22:b8:9b:c6:86:4f:
17:34:69:95:01:a9:ad:8d:17:d7:41:ed:97:3f:50:
23:f3:f4:ab:7a:40:19:72:6f:e6:15:a1:bf:82:0a:
fe:cf:38:ee:e7:3f:42:b5:0a:f6:85:93:b8:05:87:
cb:24:19:aa:4f:d5:dc:c3:8c:e7:be:26:01:55:9b:
e5:30:a0:19:a1:45:a4:be:cf:07:06:a8:93:0b:30:
63:8c:23:69:1a:18:01:35:7c:87:42:23:cd:61:4c:
51:c6:ed:15:5d:b7:1d:72:ea:bb:1c:47:94:b5:49:
79:60:b8:af:a2:54:19:a6:99:e3:b9:ed:a8:6c:59:
03:79:86:b6:63:31:f0:2d:ec:1c:57:f1:38:74:80:
93:01:71:fb:fd:e3:a8:9f:4e:00:99:b0:7c:17:c6:
bf:26:a1:75:10:c8:03:24:ab:83:1a:78:85:25:5a:
37:2b:a0:df:cc:3d:6d:35:46:22:b9:22:0e:b4:29:
32:c1:e7:30:a7:20:21:51:44:40:e1:67:92:12:2e:
92:10:06:f4:4d:6b:e5:02:da:40:25:4f:d6:02:96:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:AC:DC:B6:B4:D3:5E:F4:3F:1F:90:11:6C:EA:C3:98:6C:33:B6
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:44:8d:03:c7:5f:4a:70:ff:24:26:4c:2b:f8:dc:1e:55:2e:
74:61:5a:05:c4:09:d7:6a:b1:03:9d:bc:f7:ae:8b:94:44:b1:
7b:b2:ef:ae:a1:93:ed:d3:e9:56:f9:78:12:19:2d:dd:5b:27:
f8:56:5b:48:9e:14:de:d3:d3:6b:85:27:37:1a:76:62:1f:fd:
ee:0b:c5:f9:b0:f8:e7:de:f9:d8:6b:34:80:d0:3b:34:70:b6:
f5:6c:87:50:7a:52:6a:3c:92:61:89:32:ea:bc:61:dd:72:27:
fc:54:cf:31:66:33:10:80:ab:9b:89:d1:da:01:a5:c9:e7:38:
62:3e:5a:c1:95:9d:57:76:ad:bb:a9:bd:6f:56:54:24:9b:91:
f1:d5:1c:3a:93:e8:b9:5d:d2:59:ac:8d:34:97:99:5a:bc:c1:
09:93:d6:a4:26:06:d8:13:fb:4a:a6:3e:93:7e:60:d4:d0:2e:
d0:5c:5c:a6:d6:5a:3c:17:0f:84:29:9a:90:c9:1c:4a:ed:1d:
cb:98:a0:1c:cc:81:d2:d4:5c:8d:dd:e9:9f:01:d4:0f:b5:e8:
05:0e:03:33:b8:22:62:7f:5f:0e:0b:4f:62:cc:3d:dc:35:39:
fe:dc:a9:f4:6c:3b:cc:86:8c:81:5e:f6:0b:df:43:ec:a3:7f:
af:1e:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:36:49 2025 by rpki-client