Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: PNKPiN65i1epGpparaPYOcD4seG1DXuNYqvHhrQBJZ0=
Subject key identifier: A1:64:70:0D:2F:F3:84:60:0E:D3:74:75:2E:E8:3F:C4:F3:E7:83:1A
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 019746D493AF9B60334ED9774013A1A85123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 109C
Signing time: Fri 06 Jun 2025 20:00:25 +0000
Manifest this update: Fri 06 Jun 2025 20:00:25 +0000
Manifest next update: Sat 07 Jun 2025 20:00:25 +0000
Files and hashes: 1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: dIDRf9LjRJlRs+Ua73wNg4cfV74hilhnL4VuMT3KESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:93:af:9b:60:33:4e:d9:77:40:13:a1:a8:51:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Jun 6 20:00:25 2025 GMT
Not After : Jun 7 20:00:25 2025 GMT
Subject: CN=a164700d2ff384600ed374752ee83fc4f3e7831a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:61:a9:27:41:90:d2:c5:26:6c:86:cb:3f:
5f:59:3b:81:3c:d7:9e:ab:f8:90:9f:80:f3:60:5d:
18:f9:9c:e3:38:e8:6e:da:1a:56:23:3b:1e:16:c2:
8a:2f:ae:7f:92:2b:ce:56:ab:42:62:31:09:9e:25:
88:9f:34:be:bb:58:1a:ee:ad:bc:3c:66:f9:fa:82:
dd:21:cb:58:ca:9f:b0:df:7e:fd:2c:89:47:36:a5:
93:b9:8f:f8:d3:97:ee:7e:74:c1:f6:0d:66:43:aa:
23:d4:1a:e8:74:2f:0c:91:37:8d:e9:f0:0e:0e:fa:
07:72:4b:03:0c:cc:b7:4b:83:c4:4f:fb:97:91:a0:
41:95:13:c3:b3:3d:37:32:4e:e6:db:a2:e5:ae:7c:
27:27:ee:76:6a:0b:9f:93:44:01:ea:02:bf:da:c3:
ba:c6:e1:d2:ce:87:1b:6f:b1:42:37:8e:d1:69:a4:
11:19:b6:4a:7c:9f:c3:a7:99:3a:65:00:fe:1a:2b:
39:09:6f:b8:ec:21:7b:6d:67:3f:32:30:84:ef:9b:
47:42:76:1f:51:1d:72:84:ff:5e:1f:5d:ee:10:3b:
ea:3c:2c:ce:24:48:48:2e:5a:d8:00:8c:a6:cb:82:
b8:f4:66:e5:47:07:78:37:67:b5:7e:82:8e:af:9b:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:70:0D:2F:F3:84:60:0E:D3:74:75:2E:E8:3F:C4:F3:E7:83:1A
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:85:92:2b:10:9c:3d:0b:94:60:3b:a2:c1:1e:e8:8b:cb:43:
be:92:51:f2:46:c9:d6:21:08:b2:51:16:25:f5:63:89:93:a1:
41:89:12:db:3a:0d:b0:a8:90:f2:e2:35:5c:29:85:51:34:e7:
cf:23:f7:a3:a3:87:a8:45:a2:de:c6:f9:d8:4e:8a:c6:38:1e:
21:f9:a4:7d:ad:49:50:c3:7e:36:77:f6:95:78:dd:cb:90:26:
cc:22:95:1f:5e:21:a5:45:5e:96:b1:07:9a:e9:9e:4c:58:74:
81:e6:01:3c:54:1a:e1:0a:d4:09:f6:c6:f7:eb:9f:ad:a6:d8:
be:8f:b8:ce:41:5d:a4:f7:ed:a3:47:39:66:d2:ee:dd:3a:53:
ea:c6:be:6f:19:ed:70:48:8b:54:30:a5:08:1b:44:ac:89:e0:
72:c1:bc:c3:e7:67:1d:b0:b6:10:d2:a0:74:b7:32:d1:84:41:
52:c9:40:82:95:fa:26:29:f8:c9:1b:48:e8:46:3e:9c:59:63:
50:4f:a9:4d:d5:52:33:52:1b:ae:f2:52:e9:c1:f3:77:b6:38:
a1:33:d5:4e:39:a7:f1:24:8f:19:9e:76:5f:7e:74:54:e3:15:
13:58:50:78:e0:e0:c4:21:79:74:d7:c4:b6:7b:d0:4d:44:e7:
ed:73:b9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:28 2025 by rpki-client