Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: fdmcPec7U7u2ZekUJcq0mwQk2yg8ehZH/i7bJ4VAOr8=
Subject key identifier: F1:26:C7:8B:BB:4E:2A:18:01:7D:11:D0:A2:F3:C8:95:8F:B0:4E:15
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 01974E8E59ACEC102FEB07459CFC30E538C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 08:00:41 +0000
Manifest this update: Sun 08 Jun 2025 08:00:41 +0000
Manifest next update: Mon 09 Jun 2025 08:00:41 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: 7xJQyeGJmsiMgPo1Z19XD7aMRi8WItNBJi55OhzdL/4=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:59:ac:ec:10:2f:eb:07:45:9c:fc:30:e5:38:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Jun 8 08:00:41 2025 GMT
Not After : Jun 9 08:00:41 2025 GMT
Subject: CN=f126c78bbb4e2a18017d11d0a2f3c8958fb04e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:e4:c3:32:d6:22:1f:15:38:1c:e8:bd:df:
9c:fe:19:97:0a:b6:a1:24:3a:dc:6b:4f:85:24:a3:
6e:e6:f8:0b:f4:a7:1a:77:66:a0:38:26:15:1a:53:
34:0d:eb:53:cd:73:d9:a5:e1:a1:40:6f:ba:3c:f4:
40:de:03:3d:b6:87:2b:3e:a0:36:b0:c6:85:9e:f8:
32:d6:3c:d2:a9:d9:f4:c6:a0:7e:3c:aa:61:53:90:
a0:a6:d6:ec:b5:14:c9:2d:44:a8:e0:f2:c4:0b:3e:
d8:71:c9:7f:80:da:ae:49:bb:23:4d:8c:a8:25:ce:
5d:da:54:22:07:7e:58:a2:d9:a0:b1:c8:6a:49:30:
ce:bb:61:59:56:0e:ce:6b:41:2b:f9:2e:85:cc:80:
07:91:7c:81:e7:ad:b3:43:74:a2:5a:c9:cb:1c:77:
68:9a:3f:34:ee:dd:b0:49:60:42:59:fd:9a:66:bd:
ac:a5:f0:2b:48:48:f9:61:5a:8c:e0:da:d9:8b:ef:
38:6a:d3:4d:20:64:26:69:f0:ce:a2:22:90:da:72:
4c:e9:c6:53:fa:9a:11:3e:d5:2e:e3:40:eb:53:39:
c8:be:dc:d0:71:8e:98:ff:27:4f:da:b6:00:58:9e:
42:73:da:47:ed:24:66:c9:d9:85:c2:65:44:35:57:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:C7:8B:BB:4E:2A:18:01:7D:11:D0:A2:F3:C8:95:8F:B0:4E:15
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5a:df:02:65:40:f0:87:b1:a0:9d:07:4f:74:12:88:39:5e:
e1:e1:1a:10:23:e8:b1:a8:c2:80:e0:28:f4:b8:9b:fb:73:e3:
e0:cf:e9:b4:c2:94:1d:23:ac:f9:ea:ff:36:04:aa:02:a9:3b:
2d:c4:e8:bb:79:f7:e5:84:07:23:fe:d8:91:14:0c:ff:04:d8:
fe:d5:b8:88:fb:70:cd:0b:0a:63:1f:24:15:2e:7d:10:ae:fd:
8a:da:11:a5:97:04:37:18:e7:50:90:c1:b8:a6:89:e9:7a:94:
f8:f3:53:bb:c6:95:38:77:c6:25:56:32:97:a4:15:c0:d5:85:
57:99:ea:8c:1a:08:7f:22:6b:6b:a6:63:17:31:3f:a3:ca:bd:
75:d2:60:31:8d:e5:ef:35:f1:0f:c2:28:dd:1b:b8:e1:60:64:
f3:41:47:ae:e3:0a:94:0f:dd:06:2f:33:3c:e0:26:c4:90:29:
ff:1a:80:10:af:c4:3f:0d:76:fa:a3:a1:f2:f3:0a:f2:7c:e4:
a4:3a:fa:a6:02:6e:f9:b6:b9:62:a6:4b:a8:07:c9:ab:f4:af:
e6:eb:b8:20:a7:65:77:31:9a:48:b8:e7:71:64:45:2b:f4:84:
a6:b4:e6:23:89:f8:47:bf:ca:64:0a:32:12:f5:02:15:da:12:
7d:f9:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:29 2025 by rpki-client