Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File: Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier: No7ySFNUQ7at86/C1Psr4Wj3jr9aTVkTOoUySfHBAzY=
Subject key identifier: 91:D5:30:D1:71:D4:A0:7B:86:38:1C:45:24:BA:56:C5:9E:DB:69:2C
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial: 019751585D0AC8690A6AA97ACD02BE1F5FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number: 0C37
Signing time: Sun 08 Jun 2025 21:00:34 +0000
Manifest this update: Sun 08 Jun 2025 21:00:34 +0000
Manifest next update: Mon 09 Jun 2025 21:00:34 +0000
Files and hashes: 1: BXWkDJgGeE3wLT1lYDsJPAlavfw.roa (hash: irjuewqr+XdI7kgKWav4JZTl4lqEMRRX3Cq/Qdp74jc=)
2: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: 03ehawFV8061q7u4BzVg2mM2ltky50PTT4CX30Kzmjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:5d:0a:c8:69:0a:6a:a9:7a:cd:02:be:1f:5f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Validity
Not Before: Jun 8 21:00:34 2025 GMT
Not After : Jun 9 21:00:34 2025 GMT
Subject: CN=91d530d171d4a07b86381c4524ba56c59edb692c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bb:7b:e5:94:d9:51:bb:3b:c0:87:d2:9f:37:
e2:57:f7:a9:31:41:cb:fd:65:4c:eb:d2:a3:bd:e8:
59:dc:93:65:d0:2f:79:85:0b:51:e2:ef:36:01:97:
b4:2d:e4:a6:bd:ea:da:c8:89:7a:df:ab:bb:28:ab:
bd:51:d6:a9:53:4b:59:27:3a:b7:38:2e:b1:ba:75:
52:5d:61:de:f8:7f:c9:1b:b2:91:49:c6:7b:57:ef:
15:d7:09:95:4a:8f:fd:f2:a9:da:a7:f9:5e:2e:27:
95:9c:cf:ec:cf:33:fe:f7:a4:e2:ef:93:49:ad:96:
5d:83:8f:ad:d6:4d:03:16:b1:2f:57:f4:51:38:e5:
84:18:f1:38:09:12:a2:3f:80:84:98:15:d8:ca:3d:
ab:a9:57:58:c9:0f:6f:b8:c5:5a:00:a3:10:80:69:
a6:80:74:89:1a:e8:1a:d2:43:ef:e0:10:32:03:08:
fc:70:8c:37:c5:45:8a:c5:a8:7b:13:30:ec:5a:71:
48:04:28:23:dc:14:5f:77:2a:9e:6d:d8:57:cf:f6:
6f:b5:17:0a:ef:9b:d2:e0:c4:f3:93:8c:23:14:1f:
39:47:62:f6:d2:af:a1:f2:1e:0a:48:f7:2c:2f:be:
8b:ee:fb:ae:e7:cc:d6:23:c2:9b:64:08:d1:b7:6c:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:30:D1:71:D4:A0:7B:86:38:1C:45:24:BA:56:C5:9E:DB:69:2C
X509v3 Authority Key Identifier:
keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:67:0f:08:d8:71:1b:a9:b9:7c:70:95:e9:f6:97:0e:28:45:
1a:90:a8:44:72:a6:02:c2:db:b8:de:92:c9:1c:2a:0c:36:75:
45:bb:d3:d0:97:2a:dd:d7:5a:58:bf:b4:fb:20:76:e0:eb:b0:
d7:c6:02:34:dd:be:db:95:5d:68:9e:08:87:58:b1:7b:6d:4a:
fd:da:dc:69:6b:a7:5a:46:d0:b7:f5:3f:83:b7:0c:34:54:de:
fd:70:9e:5e:72:c0:a4:8f:bf:8f:c1:6c:f7:95:f2:a8:d0:14:
c7:72:21:22:44:23:bf:9b:0d:f3:4a:9d:5f:84:9a:04:54:56:
9a:44:dc:33:65:66:26:df:d9:22:ba:cd:ea:6a:80:39:a2:e9:
ba:5b:d6:d8:8f:c7:f0:5e:ad:92:1b:d2:ca:30:15:28:89:9c:
7f:ef:c2:d5:1b:12:03:1e:c5:0a:55:5a:fd:ac:5c:a2:c9:81:
75:d6:42:46:4e:df:e5:48:76:23:13:b0:db:b3:8f:8e:7d:4d:
b7:29:e5:11:18:af:0e:5e:2c:d2:34:ee:5f:16:18:e0:19:0c:
e4:1a:cd:30:44:16:b1:70:df:67:7d:6d:66:f2:82:d6:06:4c:
ba:c5:eb:1c:df:a3:cc:9d:8e:44:4e:cd:d3:b8:51:d1:c1:88:
3f:e5:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:43 2025 by rpki-client