Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier: b0p3pUzIsX5oXkvpXQRvv1ljLjh5OrFfUW5piEMoquM=
Subject key identifier: D2:45:3D:7A:34:A0:C2:FE:5E:E3:EA:A0:D5:80:9C:36:99:87:8C:64
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 01974A7A5E7927A1A758C9350D75F1312B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number: 139C
Signing time: Sat 07 Jun 2025 13:00:22 +0000
Manifest this update: Sat 07 Jun 2025 13:00:22 +0000
Manifest next update: Sun 08 Jun 2025 13:00:22 +0000
Files and hashes: 1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: BmX2udezP9o1YZeUkT6bUhzrX5hNedweMPKO9omXx8Y=)
2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:5e:79:27:a1:a7:58:c9:35:0d:75:f1:31:2b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Jun 7 13:00:22 2025 GMT
Not After : Jun 8 13:00:22 2025 GMT
Subject: CN=d2453d7a34a0c2fe5ee3eaa0d5809c3699878c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:4c:8e:54:6e:c8:b0:12:5f:17:5e:a2:a2:
ee:ee:20:9e:c8:f3:67:58:fa:c5:b3:bc:79:72:f7:
ca:b4:0f:d2:78:bb:63:5b:61:ba:49:a5:ba:dd:ad:
c4:03:e1:eb:5d:a4:98:93:16:15:e7:3b:cb:6f:43:
94:a9:f8:76:2f:02:ff:34:ad:25:d3:6c:a2:53:62:
a8:6f:dc:b7:11:ee:58:a6:cc:b9:b7:30:2d:79:89:
48:cd:80:4c:bb:61:2c:d1:76:f6:dc:9b:5c:2c:50:
0a:e4:77:3d:06:61:29:c8:cf:68:17:b2:7a:64:f4:
bd:d3:5e:9a:51:9a:96:28:1c:93:3b:ea:d8:bc:ed:
a5:12:2a:6b:8a:36:6b:94:e8:8c:2b:6e:86:04:8f:
dd:4f:e7:8e:d1:d5:73:7d:61:37:fa:ca:bc:f6:7d:
7c:48:05:c5:b7:b3:3e:ca:81:6f:e1:0e:0e:8b:f9:
f3:e5:48:51:2a:47:28:e4:4b:e1:d9:2f:82:f1:61:
00:32:01:a2:53:52:f2:5b:56:61:79:6a:84:72:95:
66:f7:1f:87:5e:66:64:aa:97:7a:fa:ff:9a:41:61:
78:b2:69:04:8e:7c:5a:fb:d9:9b:2c:75:31:a2:70:
a8:19:50:34:c6:97:4b:10:45:ef:ab:4b:8a:a0:ef:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:3D:7A:34:A0:C2:FE:5E:E3:EA:A0:D5:80:9C:36:99:87:8C:64
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2e:f7:e2:ce:df:07:c3:06:ce:90:f4:26:4a:8a:cb:d2:fb:
be:19:cb:af:79:75:6e:d8:91:b5:7b:90:26:e9:6d:57:88:fb:
9e:8e:02:23:d6:c4:c6:94:0f:2f:2f:70:cb:c8:58:3b:76:df:
64:88:3e:e2:7d:22:3b:0b:78:2a:4d:9d:d2:51:00:be:cb:82:
ff:7d:1f:b0:32:3d:aa:bd:2d:88:95:9e:12:f4:d2:d9:20:3a:
2e:04:3c:b3:d1:8b:9b:3e:ef:88:27:b7:3c:1f:86:14:cf:65:
1b:f5:8f:51:40:08:28:11:83:e3:1a:c4:81:8e:a3:37:12:8c:
3f:01:fe:2c:81:ab:fd:69:76:7b:8e:24:6a:67:29:2b:58:ad:
25:6f:1d:70:c5:11:c5:29:e2:90:e2:74:ce:29:da:4d:aa:24:
33:e5:c6:20:c0:c4:60:e2:33:ba:d1:57:93:af:57:e5:8e:9c:
77:71:75:94:40:b7:4b:cf:d8:a1:8e:e8:e5:98:fe:85:30:c7:
de:fe:a8:67:34:77:f3:02:43:02:19:51:63:b8:27:48:fd:d1:
c3:58:20:0f:d7:15:f2:8e:e5:ba:9a:1a:97:d0:93:b6:ba:2a:
10:0e:87:da:e5:d1:54:96:84:63:7d:26:cb:b4:60:0e:73:ff:
2a:4c:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:11 2025 by rpki-client