Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: qTpz26iPC/E4ruZtT7y8lNl6vWxYZEHQvLO3lTVrLGI=
Subject key identifier: E4:87:CD:A8:D3:E0:F5:4E:3E:90:04:7D:35:89:B4:C9:0C:44:C2:A3
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 01976A736CF1581567838A746006C1C20EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 18:00:38 +0000
Manifest this update: Fri 13 Jun 2025 18:00:38 +0000
Manifest next update: Sat 14 Jun 2025 18:00:38 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: 1A2zp/+BoP4jep1O5pCsDl8mfmzLX/Ahq8qZ1VPK21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:6c:f1:58:15:67:83:8a:74:60:06:c1:c2:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jun 13 18:00:38 2025 GMT
Not After : Jun 14 18:00:38 2025 GMT
Subject: CN=e487cda8d3e0f54e3e90047d3589b4c90c44c2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:42:99:ea:da:56:fc:72:6e:8e:e4:26:7c:
05:69:89:bf:f2:b4:f7:a2:19:bd:2d:87:cd:75:30:
a6:94:ec:09:4f:17:fa:5a:fd:4b:02:da:cc:e3:80:
29:24:34:1e:a1:a3:aa:8a:5b:4e:22:35:5c:4f:04:
b1:10:ac:a6:27:f5:97:90:f8:db:cc:27:c3:3f:83:
d3:0e:5b:3a:c9:ef:a6:11:87:ee:fd:9b:90:04:26:
a2:4f:9a:87:b5:cc:ba:f1:18:d6:19:01:11:81:d7:
9e:2d:33:74:0a:65:1b:5c:c5:7e:e1:b8:f7:a5:95:
ae:79:a4:87:5a:de:37:2d:d0:e1:04:69:2e:e2:11:
68:0e:dd:17:18:e5:4f:bd:7a:db:2a:6d:9d:c1:9c:
f9:b8:de:fd:22:c5:35:23:36:e3:35:68:c8:47:ca:
56:6d:b6:76:dd:f8:79:c3:b4:81:48:b3:1f:82:b2:
ac:9d:5a:b7:12:40:b0:f2:db:2c:44:b9:10:09:2b:
30:a4:7a:f7:40:e4:b4:48:0f:b8:7d:72:ef:70:6c:
59:4a:b4:a8:df:54:ec:d4:f3:3b:64:43:7a:06:c4:
fb:72:b3:62:ea:20:7c:a7:76:46:d0:cd:58:99:29:
bf:1e:0a:16:86:cd:79:3f:eb:13:15:c3:10:8b:88:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:87:CD:A8:D3:E0:F5:4E:3E:90:04:7D:35:89:B4:C9:0C:44:C2:A3
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:47:b6:91:5c:a2:77:9c:73:61:64:50:57:c0:15:0e:b8:4e:
85:8e:5d:a1:cc:df:a9:ef:d8:cb:6a:ab:6a:bc:a2:8a:ed:f7:
50:b4:09:b1:8d:36:18:e4:65:5f:ba:6e:cc:29:73:5b:4e:6c:
f0:01:14:99:9a:7f:de:1c:62:e3:3e:d9:10:57:f0:a0:76:22:
66:ba:6a:05:7b:81:4c:13:df:a1:12:ac:0f:c8:38:3d:2d:8c:
a4:af:95:19:a1:83:50:f8:83:57:a1:73:9b:bd:1f:c5:c1:ab:
ef:6c:d5:79:9e:47:4f:71:2d:4b:cf:ec:08:f8:0f:70:9b:a5:
c3:2a:42:06:21:d9:02:bd:97:2b:de:72:cb:ff:20:1a:2f:7d:
26:94:35:64:9d:e2:df:97:e0:a7:0c:c2:8b:e7:3d:1e:80:45:
ea:7a:51:c6:6c:35:ef:ff:a0:6d:b6:f9:6b:0d:ef:b7:1e:c3:
9a:3f:95:62:43:77:c3:c1:3b:62:f6:01:cd:f4:4d:dd:99:62:
0f:e5:84:51:f0:73:eb:e4:56:ad:4f:e0:5c:79:07:69:0f:8f:
29:c7:34:47:4b:e5:61:78:e3:e8:19:72:88:6f:96:54:dd:6d:
a2:bc:c3:6c:95:fe:66:74:74:35:d1:61:30:4a:75:f4:c8:fd:
58:18:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:21:32 2025 by rpki-client