Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: QdHnLuBQigi0lufVbHFBx3Y2eZJpNciV/g9AEjB3DOg=
Subject key identifier: 92:01:9D:03:D4:AD:47:9B:23:24:B4:37:B9:49:33:41:5C:37:F2:71
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 019752350C2C3519E57B4991EB0610290B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 01:01:37 +0000
Manifest this update: Mon 09 Jun 2025 01:01:37 +0000
Manifest next update: Tue 10 Jun 2025 01:01:37 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: /IBKWZ22RKbk0vVo6GHrczZ+nRrpKTvmUW8eErHFn8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:35:0c:2c:35:19:e5:7b:49:91:eb:06:10:29:0b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Jun 9 01:01:37 2025 GMT
Not After : Jun 10 01:01:37 2025 GMT
Subject: CN=92019d03d4ad479b2324b437b94933415c37f271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:5e:50:9f:ad:04:df:aa:28:77:e7:f6:8d:
02:67:78:04:91:60:e4:a2:f9:8b:a8:de:71:19:cf:
2a:2d:20:c1:a3:b6:a5:c6:dc:e1:84:38:53:8d:ec:
d2:be:ca:dc:04:17:1d:96:17:4e:de:fe:93:5e:f6:
67:c6:87:a8:5c:c6:91:1a:bf:45:d4:14:7f:7b:6f:
95:df:1d:db:76:bb:00:43:5e:c5:65:fd:fa:84:1b:
90:af:d2:67:c1:9f:c4:4c:6d:fd:6d:8e:d6:68:ea:
ff:50:46:a0:ee:1f:4c:f6:9b:65:1f:71:97:6d:21:
6b:71:62:d2:5c:c9:50:9c:1c:be:f7:b5:3b:af:3f:
19:a9:8d:d5:5e:e5:21:de:4c:22:4a:38:39:7c:c1:
56:ff:31:40:48:34:ca:6f:49:6a:3b:b2:66:db:48:
91:6e:b3:4a:b3:aa:af:e3:09:02:e8:ef:5d:40:22:
f0:78:dc:aa:62:2d:b0:29:e0:de:f8:8d:cf:ee:2c:
46:5b:1a:8d:a0:98:1e:70:bd:c1:ef:70:20:8b:b5:
89:68:86:0c:62:da:d8:60:c7:b8:c1:e5:25:0d:93:
3d:9d:c6:d3:47:6b:5a:dc:02:e3:8c:d9:bc:12:d5:
ea:b7:96:fd:33:31:ea:93:75:b3:04:56:71:c3:c3:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:9D:03:D4:AD:47:9B:23:24:B4:37:B9:49:33:41:5C:37:F2:71
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:37:c9:27:01:07:84:7d:b8:6a:0a:12:9a:bc:be:b7:a1:d2:
c2:25:b6:9c:44:bc:b2:ba:c9:d2:d9:3d:83:64:5b:b5:74:64:
df:1b:2e:20:21:34:3e:c0:9f:85:1d:65:6c:5b:b4:b0:c1:b1:
0c:02:a1:e2:96:96:93:13:17:e2:d4:63:e5:6f:eb:aa:05:e3:
eb:52:7f:f6:18:7a:67:22:09:be:40:41:10:bc:d3:c6:77:7b:
b3:2b:00:2a:12:43:45:86:ab:dd:18:71:e5:75:dc:5f:ca:74:
01:67:65:e6:d2:b3:b6:20:09:22:fc:a3:a2:8f:6c:a1:06:d0:
37:86:e2:2f:40:2d:c8:4d:50:64:bc:18:f6:d5:66:94:f7:7d:
06:4f:a7:ea:37:f6:44:07:59:b0:97:25:93:2a:f6:4b:67:d1:
be:e6:33:d7:d2:05:05:b2:b2:1f:ad:43:a4:19:63:09:de:d5:
d6:7c:0c:12:f3:69:0b:b2:40:f3:36:ea:17:58:52:d3:f3:c6:
42:a9:e2:49:37:56:db:b5:b9:2e:6f:5a:c5:e2:3e:4a:3e:0c:
a5:fd:69:0a:7d:f9:81:d0:c8:ea:fa:2f:a0:93:78:99:80:e1:
53:5f:4f:c4:b0:34:3a:44:6b:ce:fa:30:46:eb:35:ea:60:58:
a0:4b:e2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:27:08 2025 by rpki-client