Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: c46s2daAKS5VIV/JBfr6wdOpVxgaSoJbRFBjIDE6Xzc=
Subject key identifier: A3:BC:36:6C:76:72:82:A6:A8:DA:5F:85:82:5B:60:54:60:5E:DA:FE
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0197470B8C187F20B38626C99B947B57603C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 21:00:28 +0000
Manifest this update: Fri 06 Jun 2025 21:00:28 +0000
Manifest next update: Sat 07 Jun 2025 21:00:28 +0000
Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: 2XrdwBMKl3EKfjlzOw+d5bFzD+8i2AhDf1eDUtyb4F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8c:18:7f:20:b3:86:26:c9:9b:94:7b:57:60:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Jun 6 21:00:28 2025 GMT
Not After : Jun 7 21:00:28 2025 GMT
Subject: CN=a3bc366c767282a6a8da5f85825b6054605edafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:27:74:a3:23:e0:48:bc:eb:39:cd:99:91:
1b:c5:ee:db:3b:7b:07:f4:df:4e:6b:3b:0c:73:53:
c0:af:48:85:f0:82:ab:55:9b:f4:ca:a4:af:f1:a4:
20:99:2c:6c:3b:38:41:e0:b7:5f:1e:a5:60:82:55:
b4:46:3c:34:3f:d2:8a:a3:a5:7a:ac:f2:21:e4:ac:
0c:ba:7b:71:2b:96:7e:ef:bc:ba:b1:cc:c5:c5:46:
77:43:1e:12:dd:c4:d6:da:44:e4:d5:ac:fd:70:dd:
5a:b7:94:be:09:de:ca:8d:d6:e8:45:fe:88:c6:a4:
c4:cf:36:43:b1:01:d5:16:3b:2f:c5:53:36:5d:38:
9f:10:de:b7:79:bf:0f:5c:73:91:f7:0d:21:0f:9f:
12:63:57:8e:28:cc:07:d4:1b:0f:61:1d:c7:8a:15:
cf:03:fa:5e:ca:0f:a2:f1:a1:63:f0:be:2b:ed:e2:
bf:d1:27:ae:b7:68:79:d6:6f:42:d0:7a:ae:9e:0a:
2e:b7:0f:b9:c8:60:fd:c7:a1:27:b1:13:3b:3e:1b:
89:4e:ca:7c:4b:a9:59:5a:e0:07:4e:b1:17:0b:a5:
b2:43:0b:a0:61:39:7a:af:23:c4:7c:92:98:c7:7c:
ac:63:88:40:48:1e:1e:c0:1f:6f:aa:ee:87:b5:28:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:36:6C:76:72:82:A6:A8:DA:5F:85:82:5B:60:54:60:5E:DA:FE
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:13:42:39:c5:71:20:58:21:ef:b9:88:7f:7a:71:3f:35:7c:
c2:81:2f:ad:8f:7e:a7:0f:63:fc:8e:87:19:4e:45:66:ce:0c:
bc:53:64:0b:a0:03:3e:93:d7:72:88:62:c3:0a:ea:9c:f9:87:
55:07:af:78:5b:5e:20:48:32:4f:ce:34:dc:54:7f:2c:69:23:
eb:84:2d:b3:68:02:ee:74:81:d9:5e:bf:20:65:e9:1e:70:06:
12:f6:45:26:64:12:e7:79:b9:3f:fa:5f:9a:d6:b8:22:4a:63:
de:c9:84:14:ec:7f:03:c6:41:4b:6c:f7:a5:5e:71:05:f5:24:
36:0a:20:49:06:17:12:d3:ad:e4:35:54:2f:bf:b2:fc:6d:b2:
66:49:94:f1:73:2a:53:5b:66:2a:ed:a4:5c:d1:44:b2:d9:b6:
ef:2c:96:1e:bd:e6:db:1f:c4:b4:6d:19:53:11:b2:04:c2:4e:
a0:60:10:2b:d8:2b:5e:7f:bc:d0:98:b3:f1:7c:51:2c:49:33:
db:8d:16:2f:cb:61:8c:9d:ad:a4:aa:a8:ed:e7:ef:5e:37:bb:
2d:2d:99:f9:e1:df:fa:85:d7:f2:44:0c:35:26:01:00:c0:24:
11:08:b0:1d:a2:44:e3:c2:2f:e9:99:d1:10:fc:e6:a9:50:3b:
45:c7:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:03 2025 by rpki-client