Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: 5VrZBqiPM7mzEGGT2BUDlfSFOWs1ICSFhQe5ObzoS7M=
Subject key identifier: 40:E5:B0:E8:4B:C9:48:43:CF:65:A8:BE:66:7D:62:C6:D8:7A:0B:1B
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019750B374B552E3A8EA0D25028A43BAF75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 18:00:27 +0000
Manifest this update: Sun 08 Jun 2025 18:00:27 +0000
Manifest next update: Mon 09 Jun 2025 18:00:27 +0000
Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=)
2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: nCyRgjJRMCrP+PXYlmUkaW+mlFnxvqk4/lWvvdU1UII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:74:b5:52:e3:a8:ea:0d:25:02:8a:43:ba:f7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Jun 8 18:00:27 2025 GMT
Not After : Jun 9 18:00:27 2025 GMT
Subject: CN=40e5b0e84bc94843cf65a8be667d62c6d87a0b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:85:f8:86:c0:31:c1:fa:67:1b:51:0d:98:
36:a2:4e:6f:e3:a2:8b:f4:5d:79:98:2d:25:28:bf:
4c:a1:0d:26:83:c4:de:c8:d1:21:2a:dd:4a:09:0a:
ba:16:d8:d1:6b:5b:bc:96:8d:0e:79:c6:fb:39:35:
19:ef:93:9a:40:da:84:75:68:d0:b7:58:26:23:e7:
a9:4c:91:7f:53:e4:71:87:c3:4d:8b:b7:f3:c5:62:
1d:ba:3f:4f:07:84:6e:cd:8a:0c:e7:1c:5b:c4:e5:
a4:c3:f4:f4:6a:3e:7b:e3:b6:41:1c:5b:1a:92:7c:
c2:82:f5:a7:66:58:54:00:db:a6:4e:26:aa:5f:c0:
b1:33:a7:52:62:f5:42:91:1a:c8:fb:6c:13:d9:fb:
ba:86:c4:42:be:63:91:da:d8:09:1a:ca:57:f6:3b:
c6:44:c0:1c:93:18:bf:1c:aa:9e:12:7d:f0:61:49:
85:88:e0:bb:75:5d:80:40:7a:43:1a:bc:81:97:d2:
0a:7a:49:59:83:13:a1:fb:9a:21:8e:a2:f4:42:b7:
b6:f6:e1:49:34:f1:69:4d:04:8c:e4:d2:85:e3:9a:
7a:09:69:d4:49:f7:7f:65:01:70:fc:52:44:2e:8b:
62:07:62:72:e7:5d:59:e3:af:6c:2a:a8:3e:82:66:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E5:B0:E8:4B:C9:48:43:CF:65:A8:BE:66:7D:62:C6:D8:7A:0B:1B
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a0:b7:a8:21:53:38:03:53:0b:4b:15:79:c8:7b:81:f6:d7:
11:6d:4d:e3:f7:68:b6:b4:4f:a6:05:1e:69:84:27:a8:18:34:
0b:63:90:5e:c6:7a:c3:2f:ad:b6:87:63:45:4f:a9:92:b3:19:
68:16:77:6c:b8:1f:c7:5a:bc:94:b0:98:21:bd:40:dd:8b:f3:
11:3c:db:9d:ad:ab:81:04:5e:bd:4d:d1:6a:71:fb:e2:8a:5b:
90:12:26:80:b2:43:18:32:d6:a2:a6:58:00:f9:e3:88:5d:13:
40:06:3d:be:b3:02:dd:e8:21:b7:a2:9a:45:6e:e9:fa:fa:d3:
14:46:4c:ce:c7:1c:d2:31:74:ab:ce:12:d4:b1:42:40:db:e1:
ed:3f:31:9f:8a:6e:a2:94:11:e2:a2:64:e2:be:bc:93:9f:4e:
2d:3e:50:e7:c9:52:ff:4f:1c:6f:1d:fe:b2:b1:0f:d3:8b:5b:
ed:1e:d5:69:6c:30:ad:bb:72:76:91:05:95:d4:9b:2f:da:62:
d5:7d:12:76:19:c8:ab:8b:de:00:41:c8:4c:ef:d6:d5:82:40:
1a:aa:20:bc:e7:43:45:83:1f:4b:04:3b:6b:6c:93:fd:fa:5c:
41:d5:40:db:cf:63:9c:17:fd:0d:7a:45:f7:1c:be:b9:0e:53:
ab:f9:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:05:13 2025 by rpki-client