Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: Zew47LICUGQNxn1W9KA8PV8beS0/k9eCpeTAFVwTq4Y=
Subject key identifier: DA:90:B0:D5:55:7B:57:46:C6:9F:36:2D:ED:28:63:48:C0:B5:D1:49
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 01974AE8DDFA24EF502B0253E920061CE3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 08C8
Signing time: Sat 07 Jun 2025 15:01:04 +0000
Manifest this update: Sat 07 Jun 2025 15:01:04 +0000
Manifest next update: Sun 08 Jun 2025 15:01:04 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: Y3kFinOxKC5WY615xF1uHQYCu4rQl8V+HvAFppsvGFE=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:dd:fa:24:ef:50:2b:02:53:e9:20:06:1c:e3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Jun 7 15:01:04 2025 GMT
Not After : Jun 8 15:01:04 2025 GMT
Subject: CN=da90b0d5557b5746c69f362ded286348c0b5d149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:93:72:89:89:bb:5c:7d:09:00:a8:68:55:
35:0c:f9:cd:a4:83:23:16:49:9a:65:88:d6:ae:9a:
7a:30:ee:84:27:f0:9c:dd:bf:9e:6b:fe:70:d8:a6:
f4:54:b8:03:83:57:da:25:d5:38:68:87:88:e3:e9:
c4:2d:f9:51:b8:a0:cf:f0:88:91:78:cb:a9:4d:34:
83:7f:bf:b6:03:8c:81:96:c3:43:b3:7c:4f:f0:2c:
ce:9e:b5:b7:db:ac:c1:b6:0f:92:8f:f1:50:0c:fb:
cc:f1:62:87:ff:39:f7:63:b5:0b:54:2b:6e:b6:8e:
b4:a2:21:8c:d7:b7:61:9b:84:41:33:86:a6:d1:5f:
87:42:44:09:85:c3:0d:9d:8b:6d:11:70:94:1c:b5:
72:51:f8:69:ad:73:d2:94:17:47:94:7d:01:09:00:
e9:dd:d1:a3:8f:27:82:5c:4f:cd:53:d3:6a:30:01:
87:bc:e8:b9:d0:b2:37:e5:19:f6:58:d9:b1:ec:59:
b6:9e:6b:93:62:f1:5f:13:d0:24:71:57:4e:78:51:
ff:3b:36:9e:42:f4:ae:aa:08:05:64:ec:7e:ad:45:
cf:df:23:26:44:fb:66:64:6e:cf:b3:4d:19:19:db:
c4:3d:28:be:9d:12:f4:d4:b9:36:63:94:61:9e:b0:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:B0:D5:55:7B:57:46:C6:9F:36:2D:ED:28:63:48:C0:B5:D1:49
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3f:59:6a:39:ad:81:e5:e1:2e:8f:ed:f0:61:43:09:60:f9:
d9:80:66:5f:9f:7e:28:52:90:a7:47:44:71:c7:70:ae:a1:8c:
22:54:72:b0:aa:6e:37:92:f8:cf:6a:5f:6c:f4:9c:94:48:9d:
78:34:d6:60:88:36:5f:3f:03:bd:90:5c:c1:18:7d:79:32:3a:
6f:64:15:0c:75:78:ab:da:bb:d2:3a:cd:91:07:29:b6:15:ce:
f6:ea:bf:a3:08:3e:46:aa:39:c0:a0:ae:2e:11:e9:20:c3:95:
29:20:ab:a2:b8:44:2a:92:b4:cc:16:0e:69:60:df:92:55:fc:
a7:22:f2:d9:c8:ed:30:2b:e0:ee:dc:e7:da:58:74:5f:60:9d:
53:01:f1:3e:77:56:2e:ed:1e:7c:71:82:6c:98:1f:0f:f6:85:
96:a5:c0:15:d3:14:01:ed:00:8f:1a:b3:bf:96:81:68:96:c3:
1c:d4:b3:87:e9:d8:ee:86:78:98:4e:2a:02:9e:84:2b:2a:82:
6f:7b:d8:6a:29:7f:d3:33:31:d3:55:1d:96:21:32:0c:68:61:
31:81:24:d6:ca:6d:50:99:9c:1f:16:d0:b5:34:0d:2c:4a:7c:
87:89:e9:4e:d1:c4:58:68:9f:4d:81:db:cf:b3:d5:b7:aa:fc:
17:00:75:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:55 2025 by rpki-client