Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
File: GtXRdMu0aq-GVVuA4XczMbhwtWg.mft (raw, json)
Hash identifier: eXF1wxmFdELrNgnwGOva+V3WMk4sWZBkCjxtSDu9EkY=
Subject key identifier: 2F:87:22:4E:C9:58:21:2B:35:75:3F:F6:A3:7C:46:A4:51:3D:00:C6
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Certificate issuer: /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial: 01974F330DAF554315E31819C008AAB99E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
Manifest number: 043A
Signing time: Sun 08 Jun 2025 11:00:35 +0000
Manifest this update: Sun 08 Jun 2025 11:00:35 +0000
Manifest next update: Mon 09 Jun 2025 11:00:35 +0000
Files and hashes: 1: 9dcg4kop7SgWnE6_RqxuTw6E4S0.roa (hash: 0Gyw3aRec61kP8ssDusbhrk3Tfc+FxYebdPIc+4lPH0=)
2: BCx9uHR447EqnUAT6LDXDmc-U64.roa (hash: uKePdL/bKCVHy8Q2jDMnzQQFWnYFjJHWmlJeT5g86S8=)
3: GtXRdMu0aq-GVVuA4XczMbhwtWg.crl (hash: JWH6mqeMZJAerk1FxpXjQXVLKOQKN8sKGpvVdgqUC4U=)
4: XUhnIv1VyzEH-O2IlJPEOJmVv7s.roa (hash: ia3ApPA9xBWk3etwJmYP71gyRoYwwrPnhqVB0ZSnJZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:0d:af:55:43:15:e3:18:19:c0:08:aa:b9:9e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Validity
Not Before: Jun 8 11:00:35 2025 GMT
Not After : Jun 9 11:00:35 2025 GMT
Subject: CN=2f87224ec958212b35753ff6a37c46a4513d00c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:86:aa:bb:b3:42:f2:46:45:9f:b7:5f:e3:
03:dd:55:38:21:a9:c5:91:2a:5c:d0:3b:3b:37:92:
d9:bf:c6:71:cb:62:a1:ba:1c:51:ba:83:c8:23:29:
b3:5f:d5:22:2f:7e:76:f0:8b:5e:93:a4:47:0f:89:
fd:aa:b6:60:6e:f0:24:5a:a3:6c:ec:9a:b9:3d:76:
ec:4d:92:2d:01:b1:1b:78:b4:0f:a2:6d:7a:16:1d:
b8:83:5f:aa:d1:5b:ab:ae:55:69:62:86:85:a7:62:
19:23:32:f1:08:d4:c6:0c:1a:ae:61:52:9f:0e:65:
38:c4:0c:9f:c3:3d:eb:cf:30:3d:cb:88:2f:a0:64:
aa:0c:bf:0a:d4:a6:60:9c:01:dd:65:6d:7f:8b:24:
77:00:64:1f:f5:fb:af:aa:fe:09:ca:a7:5f:25:94:
be:73:3d:dc:44:e5:29:7d:50:2a:83:cb:8e:da:73:
be:d8:de:bb:cd:0d:1a:90:a2:fe:a3:de:0e:8f:f1:
87:6d:b0:42:8a:b2:29:1d:4e:aa:ea:51:a9:f7:2c:
df:96:9b:b0:0f:dc:c0:1f:25:9b:8d:3b:e3:cc:82:
85:e1:01:2a:6f:ae:ed:4f:67:a2:31:d2:94:30:ef:
5b:37:93:60:b8:9c:ca:dd:a3:c8:fe:7d:ef:7e:36:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:22:4E:C9:58:21:2B:35:75:3F:F6:A3:7C:46:A4:51:3D:00:C6
X509v3 Authority Key Identifier:
keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1f:47:6b:d4:79:89:99:c0:ed:52:e7:5e:38:f6:ee:a6:4f:
b6:61:f2:ed:b0:33:05:cf:77:42:e4:1e:d3:21:a2:b9:84:e2:
e9:ec:32:21:93:9c:ba:e5:55:2e:c2:4b:b3:58:80:aa:37:ef:
5e:c8:80:2e:eb:f3:a6:36:ca:b9:42:cc:20:bf:50:c3:16:98:
c8:86:80:d6:bd:65:32:a6:31:b7:92:7a:73:75:4d:3e:d3:b7:
7e:d6:7e:b7:20:1a:a3:11:09:72:5f:d9:40:a7:e5:83:38:50:
42:8b:0a:e5:56:45:95:43:d1:a4:1c:26:a0:3d:80:fd:97:09:
fb:5f:f2:80:e5:78:36:39:b3:8c:27:f4:46:fc:b7:e6:2c:b8:
eb:ba:33:a3:a3:58:b0:83:d9:07:e5:40:1a:9f:ff:96:d6:1d:
3f:3c:7f:cf:1c:9f:dd:58:f2:da:d7:46:5e:5f:89:a4:77:a4:
20:99:01:e7:29:54:7d:29:79:a0:70:ee:91:00:a0:eb:f0:b8:
85:20:f3:68:44:f1:eb:72:15:de:42:4a:d0:1f:4e:a3:f8:11:
6e:f0:6b:d3:e4:cf:6b:aa:93:9d:93:26:db:2f:68:3f:e7:4b:
ac:9f:fe:b2:e6:83:60:33:b2:0a:2f:ae:3e:9a:5d:c8:61:31:
bc:20:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:46 2025 by rpki-client