Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: APRBsL2oJS9zNkipyhqXs5lTKgAZqXBFFiWtS/NAqNo=
Subject key identifier: 4B:A9:06:B9:47:B5:05:DF:6D:E9:08:2A:8F:5D:C3:3E:00:68:85:86
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 01974931466451F031952F3EA37D0F98EC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 07:00:55 +0000
Manifest this update: Sat 07 Jun 2025 07:00:55 +0000
Manifest next update: Sun 08 Jun 2025 07:00:55 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: Jtzre+3I31yCAYZDkxjOXFnWmbVWoWsCUMGsCGaVeUU=)
2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:46:64:51:f0:31:95:2f:3e:a3:7d:0f:98:ec:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jun 7 07:00:55 2025 GMT
Not After : Jun 8 07:00:55 2025 GMT
Subject: CN=4ba906b947b505df6de9082a8f5dc33e00688586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:33:e9:9a:f9:92:bf:d4:70:6d:84:c2:cb:
57:8f:4d:f2:32:e9:6d:6e:30:9b:c4:18:77:3f:13:
41:b0:ed:c8:9a:21:d9:00:b4:eb:4f:23:18:cb:e2:
fc:09:c3:04:18:d0:ca:c0:57:2c:32:c8:16:82:f5:
62:d5:d3:9c:d0:99:32:1b:c5:0b:19:37:03:c2:3f:
95:6e:67:4e:7b:fe:ab:54:95:b2:36:77:19:39:ae:
b4:a2:15:69:48:71:7b:f3:0e:55:32:b0:8b:ff:0e:
59:76:8a:2e:46:71:ea:d3:7c:64:a3:fd:38:2f:35:
56:84:17:5f:6b:93:a7:e8:ca:d6:d9:73:24:54:89:
7c:b3:c1:04:d9:c6:b9:82:f6:18:8d:8b:13:2a:c6:
f5:10:c8:da:ca:7c:a9:fb:77:fb:9f:53:7c:db:6d:
02:59:ac:56:9f:75:da:b2:41:13:6e:64:76:b5:30:
48:46:39:fd:56:f3:6c:22:e6:14:a3:87:de:1a:05:
db:0a:5c:13:7a:24:a5:cf:94:e3:8f:b7:68:ea:45:
6b:d5:33:a6:69:f5:52:23:34:51:1c:b9:52:10:c0:
61:e2:dd:c8:ea:8a:10:30:57:12:91:4d:b0:41:be:
16:b8:3f:ea:5f:63:53:63:b2:ee:01:a6:18:68:f2:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:06:B9:47:B5:05:DF:6D:E9:08:2A:8F:5D:C3:3E:00:68:85:86
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e0:7f:f2:16:b4:fc:d3:95:70:22:d3:15:30:11:e2:47:a3:
c7:1f:8b:70:b7:06:e5:fa:64:2d:8d:64:5c:44:34:04:6a:ba:
97:5d:3b:88:91:90:f5:b5:83:a1:b8:96:95:cb:fc:c8:cc:14:
c2:4a:af:b9:b7:42:17:d2:7e:f2:8e:b3:05:73:02:3d:c0:f8:
41:7a:48:10:4c:c3:a4:0a:ca:19:99:d2:69:74:b6:15:d0:17:
e2:2c:15:b7:13:91:59:f5:43:2f:57:ee:7b:63:c7:6e:ed:33:
88:d8:77:c0:77:06:9c:15:77:a4:85:bd:c0:95:16:6c:ce:53:
41:1c:98:c2:32:de:13:ef:1e:88:d8:1a:ae:0d:f4:32:6e:0f:
5f:bb:3b:5d:41:f6:8f:d0:af:fa:a4:26:b3:42:7f:f5:ea:46:
cd:c4:f0:bd:d9:23:8f:3e:56:e8:c6:90:87:49:07:96:1f:e8:
3a:89:0f:10:30:f3:90:69:c9:36:67:15:33:d4:69:75:6e:c0:
5c:b2:c7:90:7f:33:a9:23:20:45:04:21:1a:16:99:15:2f:af:
9a:30:13:97:ef:ea:fd:ee:26:79:30:f0:22:9e:bf:8e:62:0d:
db:69:c7:13:37:18:98:b9:3e:1e:a9:b5:88:9e:a4:8b:15:20:
40:08:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:11 2025 by rpki-client