Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: 3BwUAkJ0f0f/hH2uMhb6hv0Sxk9EdzdvnCRUopc1cRY=
Subject key identifier: 3C:7E:A1:AE:99:15:EE:23:53:EC:29:8D:A0:56:64:BF:90:65:20:A6
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 01974C6966862156519CB793BA54527E7E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 0E13
Signing time: Sat 07 Jun 2025 22:01:05 +0000
Manifest this update: Sat 07 Jun 2025 22:01:05 +0000
Manifest next update: Sun 08 Jun 2025 22:01:05 +0000
Files and hashes: 1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: GZ6SV12YmoitQdPzM/Wqfr3nuq5i2yeMQoeBzEyNXJE=)
2: ZdLIbn9HJxp8pdvNeDczvn0TQ4Q.roa (hash: rg+IefpKLZ6BZTDP0ZlvyqCjjEypkuxTFlnDiZulEgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:66:86:21:56:51:9c:b7:93:ba:54:52:7e:7e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Jun 7 22:01:05 2025 GMT
Not After : Jun 8 22:01:05 2025 GMT
Subject: CN=3c7ea1ae9915ee2353ec298da05664bf906520a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:bd:64:17:e1:bf:77:bb:e8:f2:56:12:bf:
6f:38:41:5a:28:dc:cf:44:dc:0d:dd:32:d7:6f:f9:
01:c9:98:e9:94:27:0b:98:90:cc:b0:2c:84:5c:d6:
d4:0c:f3:fe:76:d4:b4:72:43:90:5f:77:1c:87:f0:
15:8d:42:fe:de:4f:de:a0:dd:7a:43:95:90:67:11:
58:e2:00:49:db:cf:f2:e0:a3:75:36:59:f7:12:68:
e1:ad:68:97:cf:8f:eb:24:57:e8:22:34:22:9b:92:
f0:f5:08:10:33:3a:8f:09:04:55:fa:bc:67:e9:f5:
b6:68:e0:33:43:3b:f4:e2:62:7d:62:72:5f:38:78:
80:ef:f5:2a:36:9c:44:bc:16:4b:dc:b2:c0:79:8b:
b5:c9:25:4f:f4:bf:e6:b8:65:0c:3a:d2:1b:c4:f9:
f9:72:d9:be:89:74:9f:35:8d:a7:10:e4:20:2b:2d:
01:0f:35:81:a5:48:6c:2f:ad:97:5b:d2:aa:c5:28:
89:e2:38:dd:fb:07:f9:05:48:1e:62:ad:34:6a:dd:
aa:10:0c:79:30:d0:66:b3:55:5f:0f:54:d9:c8:d7:
5d:fa:32:7f:3f:56:ab:fe:13:8c:4f:62:c4:b1:1e:
13:a4:a3:8f:36:61:35:cc:d9:2b:5d:bc:04:56:5a:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:A1:AE:99:15:EE:23:53:EC:29:8D:A0:56:64:BF:90:65:20:A6
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c4:1e:f7:ef:c4:ab:6e:86:79:db:fc:1b:d9:c1:7b:29:86:
6d:de:8c:c7:4c:f4:c6:06:6e:53:11:62:eb:b7:b5:c8:cc:9a:
7a:aa:25:b2:40:29:c4:77:81:a4:51:78:95:6f:48:73:3a:5d:
d5:b6:ee:f3:1b:99:80:f1:22:4d:7c:7c:2b:aa:f6:9c:50:79:
4f:24:44:46:7b:4e:50:33:09:6c:16:11:1f:ec:af:bf:b9:27:
b5:44:a0:30:c7:14:f4:65:f2:f8:91:0d:d7:ec:d4:b4:85:c4:
39:99:97:13:34:2c:cd:92:f7:88:1d:b7:38:79:f4:fc:bb:62:
9f:a9:81:94:c7:90:96:f2:3a:d7:cd:a3:fd:4f:3d:b8:ae:2b:
f1:28:78:3f:21:4a:a7:cb:87:a7:2c:d7:a1:b9:9d:39:6c:3e:
28:8c:82:d6:f0:c2:c8:5a:88:aa:ab:a2:cc:ee:65:ae:77:1c:
db:5e:cf:6a:49:a8:de:35:b0:8a:30:67:6a:79:7a:44:c3:09:
ad:ec:7d:5d:ff:b3:39:52:32:ca:f0:8e:fc:a1:fb:49:e0:05:
d4:10:78:59:2b:3b:66:90:5f:f7:09:1e:16:27:c4:28:0f:52:
8e:ad:51:c0:3f:12:7b:73:8d:63:9b:ac:4f:85:26:29:20:0a:
d2:a8:1e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:04 2025 by rpki-client