Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: 9XTXU0VI9xEBUtgLWjIiYKL4xTfHe8wMi3C8FXuc7Is=
Subject key identifier: B3:C4:73:E0:00:E2:06:67:43:E3:FC:92:BB:6C:62:4D:40:EE:28:1E
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 0197602777F480B34DA6468F8E974E3A34A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 0540
Signing time: Wed 11 Jun 2025 18:01:28 +0000
Manifest this update: Wed 11 Jun 2025 18:01:28 +0000
Manifest next update: Thu 12 Jun 2025 18:01:28 +0000
Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: +SJHTQSvr+mz7vkCMm3INoftPMz6PG4bEfSJ/sCFvFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:27:77:f4:80:b3:4d:a6:46:8f:8e:97:4e:3a:34:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Jun 11 18:01:28 2025 GMT
Not After : Jun 12 18:01:28 2025 GMT
Subject: CN=b3c473e000e2066743e3fc92bb6c624d40ee281e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:43:e5:46:08:2b:84:3f:c7:53:c3:3f:a7:
d9:ef:d5:3d:b8:54:0d:a3:e7:f0:00:af:ab:7b:4b:
89:fc:2d:50:07:99:1a:e9:d0:61:de:19:e5:98:d1:
c1:5d:3f:1a:8f:5c:c5:9f:b2:ca:59:1c:46:2a:25:
ca:b3:9a:ba:bf:a5:3d:95:0c:46:2c:81:a9:a3:b4:
63:5c:e2:27:38:8e:a9:8d:11:9a:59:24:eb:55:7a:
95:f6:e5:5e:56:12:25:f0:0c:e9:2b:4b:2f:27:9e:
fc:52:e9:d8:6d:c9:6f:8c:72:cd:b9:a9:f8:94:11:
a3:ae:28:ce:84:cb:c9:24:17:f1:7c:a5:c1:3a:30:
f3:8b:ba:28:ed:20:ef:fd:a3:57:4e:52:a7:a3:9a:
05:45:93:ab:f4:2e:63:c1:e6:3e:a5:ae:95:7c:a6:
32:30:65:aa:e0:39:7b:f5:d0:15:c6:f9:12:04:58:
5d:a9:17:56:56:d6:a5:22:25:82:6a:77:83:8b:fa:
28:e3:ca:fa:03:ec:3e:8f:4c:7d:d0:12:db:41:a5:
be:bb:92:45:6b:23:03:09:35:f7:ac:16:00:c9:fd:
36:45:c5:3c:e5:e6:d2:e2:12:c8:33:70:ca:75:f1:
4c:3e:e4:bc:4b:d2:eb:7b:d4:22:0d:8e:ac:a0:39:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:73:E0:00:E2:06:67:43:E3:FC:92:BB:6C:62:4D:40:EE:28:1E
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c3:10:27:ba:a1:9b:5c:c3:26:d1:6c:22:40:7f:78:af:a2:
09:55:41:3f:94:c1:de:cc:a4:8c:87:e6:7e:cf:b9:2d:01:66:
d4:3d:15:89:0a:85:26:33:99:12:7a:c8:c1:d7:b8:84:73:1e:
b1:45:4d:d0:3a:5f:3c:19:4d:f8:f2:98:3b:9e:26:0b:19:ce:
ae:8a:18:03:c1:b8:0c:d4:b9:c3:ef:32:40:7c:f5:75:47:9b:
8a:1b:0f:17:51:bb:ef:b3:4c:09:66:f7:2b:74:8f:30:01:31:
ac:0f:c3:e3:bd:f3:5f:59:c8:98:73:c2:27:a3:6f:fc:3a:33:
b5:1b:ba:57:ef:c3:4c:8c:13:13:39:bd:4b:5b:d5:2d:17:f9:
13:0d:13:6d:89:35:a4:6b:cc:ba:8a:50:03:8e:c6:95:43:1a:
3c:6e:c9:6d:0d:8b:af:25:09:5f:f0:e6:14:c4:cb:b8:a5:cc:
cc:47:19:32:99:a0:7e:34:1c:a3:d0:dd:cd:01:52:3c:be:c7:
e5:ea:6c:96:36:a6:60:6f:5d:fd:c9:7a:04:23:0a:3b:bb:e7:
2c:e4:ac:4c:bb:00:dc:2a:88:b2:42:e1:a6:2e:41:39:0c:95:
1e:60:db:7b:46:2a:47:e1:37:c6:ae:57:e3:9e:6d:b3:94:fd:
d3:97:7a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:25 2025 by rpki-client