Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: HwGw2kBcD5FJIHvLZSWJZSTCDQF5yOHCUmiK/19wH4w=
Subject key identifier: 82:FE:20:ED:CA:A2:6B:76:31:C9:9F:90:BF:A5:CC:31:91:F4:16:EF
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 01975535BA85B3642C11E737E1B71C535159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 15:01:13 +0000
Manifest this update: Mon 09 Jun 2025 15:01:13 +0000
Manifest next update: Tue 10 Jun 2025 15:01:13 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: /oA22hOtE2oVimzjWMhXMSIlIj1hnqpti94ZwcFI/pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:ba:85:b3:64:2c:11:e7:37:e1:b7:1c:53:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jun 9 15:01:13 2025 GMT
Not After : Jun 10 15:01:13 2025 GMT
Subject: CN=82fe20edcaa26b7631c99f90bfa5cc3191f416ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:6e:33:bc:81:bc:c4:08:a6:bf:a1:66:04:
f8:7f:e8:bd:b0:c0:8d:82:93:88:81:5b:87:eb:fd:
97:b4:5d:ae:4e:f4:1e:78:8d:0a:a4:60:48:4d:22:
71:97:d0:92:26:d5:3f:8a:4a:a7:6c:3a:86:f0:57:
03:26:d7:c3:be:9f:bd:2e:ee:2b:08:10:0f:54:fe:
b7:57:d1:4a:e8:03:ae:72:73:0a:65:9c:ff:6f:68:
0e:83:04:db:8c:b2:1f:cf:cd:a9:1b:40:d6:3a:83:
5c:51:7c:e0:19:5f:ce:2a:d2:db:0a:54:4d:39:1d:
14:b0:ca:fa:3a:05:1b:7c:9b:db:80:f1:1c:b0:b7:
94:4a:5f:e5:0f:67:db:36:7a:fd:3f:f0:08:fa:50:
aa:25:bc:8c:15:85:f5:8d:1d:ab:75:f8:65:21:10:
0c:21:0c:e0:22:3f:77:17:1d:a3:39:8d:85:03:22:
c2:bf:8e:76:c8:32:6c:44:43:b3:29:9e:07:ba:2a:
cb:56:1c:0f:6e:42:26:02:6f:6f:1c:5e:6f:73:94:
99:ec:54:b3:37:75:e5:66:c7:02:bd:da:04:99:57:
d7:b4:3f:5e:fc:26:b3:86:61:e6:50:95:d0:af:0b:
d2:57:a5:c0:38:38:41:a8:db:6e:1e:c6:4f:8a:60:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FE:20:ED:CA:A2:6B:76:31:C9:9F:90:BF:A5:CC:31:91:F4:16:EF
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b7:0c:13:5a:a6:81:49:25:45:72:2a:5c:88:da:66:4b:d7:
a6:20:cd:4b:a4:ae:17:5d:f3:97:55:3d:c9:07:86:4d:fb:2e:
a9:5f:07:ec:f7:51:49:b8:ec:d3:00:2c:b2:47:84:22:89:e6:
69:0b:66:df:a2:04:c2:be:45:ad:fc:39:13:d9:c9:bf:7c:48:
22:db:ab:d0:14:a7:82:12:ea:f9:6e:d6:34:e6:74:cc:40:25:
12:55:6f:c2:cb:68:f2:e6:1f:10:b7:dd:04:c0:e4:99:41:6e:
2e:b0:64:47:62:54:93:73:1d:dc:be:c6:9d:64:64:a5:1c:f8:
79:57:c7:59:f4:25:86:2e:13:8b:68:fa:1d:b8:a5:28:27:8b:
e0:55:8f:fd:fe:37:88:09:13:02:17:02:26:aa:e7:ec:54:a9:
6f:80:fa:d5:36:de:cb:10:24:aa:b5:cd:af:90:94:54:a0:65:
32:0d:41:d1:44:e2:0a:57:01:59:f1:6c:98:af:a4:a2:05:c0:
c5:5e:cd:8c:47:9e:65:8c:6b:f0:03:74:64:8a:b1:dc:2f:31:
8f:a0:af:d3:2b:5e:90:3f:2f:3e:8e:25:fa:cd:f3:49:6d:41:
4d:3d:2e:9a:5b:38:16:7a:55:14:72:57:16:39:fa:56:a9:73:
79:4e:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:47:32 2025 by rpki-client