Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: 14VqVSgjHSzBhhzLHT6oJkJpNXKxld2LKGO/O89cC3A=
Subject key identifier: B5:DC:04:BC:A4:B1:D4:71:48:73:76:35:D1:8F:CC:EA:94:C0:65:BE
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 019750B37D892556F220A82AF45F996A33B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 1555
Signing time: Sun 08 Jun 2025 18:00:29 +0000
Manifest this update: Sun 08 Jun 2025 18:00:29 +0000
Manifest next update: Mon 09 Jun 2025 18:00:29 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: eFoVjdN+c1Ay/VKi/QFQnu0cueoqTRoteg+teO9fWag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:7d:89:25:56:f2:20:a8:2a:f4:5f:99:6a:33:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Jun 8 18:00:29 2025 GMT
Not After : Jun 9 18:00:29 2025 GMT
Subject: CN=b5dc04bca4b1d47148737635d18fccea94c065be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:03:9c:ab:16:2e:1f:7d:56:79:d6:a9:22:
bd:5f:58:72:a9:28:cb:97:cd:98:b6:29:d9:a7:39:
45:12:c2:a0:06:03:3e:a9:05:e2:a0:19:16:b8:76:
d7:21:bd:97:3a:d7:b4:72:a2:88:b2:c5:22:a9:31:
61:f4:44:ec:d7:27:23:7c:82:e5:82:d1:2d:78:fd:
cd:a0:45:c3:83:93:d7:30:36:6d:c6:23:69:2c:02:
05:51:28:c7:32:f4:5f:a0:b9:ed:a6:35:9c:86:4f:
77:a2:5f:78:c5:e3:eb:be:2c:83:17:00:a4:4a:35:
ad:65:79:92:90:c8:6f:be:e0:7d:fe:52:b1:8a:9c:
38:f5:2a:90:96:04:91:7b:d2:6d:bd:ad:99:8c:b2:
57:a9:0b:a3:ea:82:98:ef:42:ea:b6:ec:04:25:fc:
d4:fe:97:3b:59:4c:a0:e6:df:4f:7d:d2:a7:1a:8e:
8e:61:b2:55:dc:04:bd:b7:fb:6b:b2:8e:2c:15:31:
09:a8:18:ca:9e:4c:79:a3:f9:ee:ae:35:a8:d1:e2:
39:26:11:fa:16:48:30:41:ef:6a:2a:f8:00:34:c2:
37:da:b6:25:5c:20:0b:da:e2:50:ba:34:b3:86:29:
e2:65:fa:40:75:72:b1:a1:1c:8b:0d:47:df:be:da:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DC:04:BC:A4:B1:D4:71:48:73:76:35:D1:8F:CC:EA:94:C0:65:BE
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e9:84:b1:96:0a:70:9a:1f:38:86:de:87:81:fa:23:17:44:
bc:61:8c:9c:bd:05:9f:62:66:45:a3:60:9a:87:09:8c:cb:c2:
3b:23:a6:e1:54:a3:da:3f:48:9a:86:ad:19:42:89:7c:62:a1:
61:16:a4:a4:d8:60:cc:9c:5a:ae:58:b3:55:22:44:80:08:18:
5a:18:e5:7a:ad:78:6e:7f:84:54:7c:30:43:b1:50:c2:ef:e3:
de:a3:bb:a0:6a:7f:f2:8d:ed:4b:01:6d:04:99:a1:61:61:2a:
89:54:97:21:b6:f0:49:d3:8a:1b:45:43:26:25:35:67:ad:c6:
4a:14:f6:1c:5e:0d:50:7a:b5:68:90:50:9e:d5:70:ff:02:7d:
ee:d6:1d:08:7b:32:5a:5c:f6:b2:2f:97:af:3f:2d:2f:cd:8b:
3d:9e:d9:9f:23:6d:77:33:a5:15:59:50:5c:2c:42:d8:23:64:
1c:d4:7d:01:df:d6:2a:ec:f6:d6:cd:93:82:69:ef:b4:38:62:
6b:e5:5e:58:d2:a5:fe:50:cd:14:05:7f:65:fa:cb:e5:39:bc:
b1:d5:c3:0d:36:c8:de:ff:67:87:58:24:be:ba:ab:b8:f2:f6:
58:f8:5c:8a:ad:dc:30:93:1f:30:7c:b9:24:cf:78:f2:74:4e:
2f:19:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:11 2025 by rpki-client