Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier: tkX0f2ABZIwtVka6ZV+1QdJwH7nbnd0jwgXXNhE9odc=
Subject key identifier: 07:1F:18:E3:75:E1:85:E7:39:2E:FD:DA:69:E8:37:51:36:69:2B:D5
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 019749D599110BA20DA331DAF4F46BBC1358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number: 0C2B
Signing time: Sat 07 Jun 2025 10:00:24 +0000
Manifest this update: Sat 07 Jun 2025 10:00:24 +0000
Manifest next update: Sun 08 Jun 2025 10:00:24 +0000
Files and hashes: 1: F-U-cDtSSag2W1wAvfbUo3fdaQs.roa (hash: 2Ga8t3NnP1c8+shLsR913ttQ8XGLyvFZpunmc/03AyI=)
2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: L+ks8ndNRIUQJtK7z9sNTT82InGN+7ilsjqjNhudfdQ=)
3: ey-_9xxGKnsOGGPU15--RgSssm4.roa (hash: 0cRLbNHAlwoA+yxbwyO5Q2GpY1t4qSENfOLW5G8ijZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:99:11:0b:a2:0d:a3:31:da:f4:f4:6b:bc:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Jun 7 10:00:24 2025 GMT
Not After : Jun 8 10:00:24 2025 GMT
Subject: CN=071f18e375e185e7392efdda69e8375136692bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:c1:04:2a:75:48:c9:8b:a6:49:2d:b7:33:
6e:25:37:98:25:bf:99:eb:b7:83:d2:e8:58:bc:f7:
1c:02:77:93:d7:34:83:41:be:c7:28:b6:d9:fc:57:
64:13:0a:36:63:8d:d2:03:ad:97:03:ff:5f:e9:26:
77:26:9d:9a:7b:29:6f:90:08:58:ca:c1:c9:5d:7e:
71:0f:da:5b:06:28:2e:56:27:c8:72:ef:80:83:0e:
55:1c:6e:1d:fc:4b:00:f3:db:89:47:81:67:68:41:
9b:7c:c7:92:7b:ed:35:13:74:bb:18:72:92:98:d4:
d0:e3:3a:32:26:f9:95:23:81:04:e1:06:64:fc:ae:
eb:29:12:6b:33:24:51:4f:e6:51:40:45:42:8c:8b:
50:95:9a:8f:18:a6:4d:d3:8e:f2:7f:fe:20:4a:72:
1a:92:8d:81:1a:ef:fd:e2:45:5f:2e:9d:8f:94:ba:
3a:fd:1a:d5:70:04:38:77:a5:85:56:a7:44:fd:0b:
36:ec:c3:a4:8f:32:f7:63:09:99:f2:51:a5:9c:ac:
be:d6:16:3e:2a:37:00:e4:67:39:c4:f7:23:ee:b9:
3b:af:cf:49:fb:48:d7:ae:b7:a9:c6:60:6f:10:3f:
bb:b2:86:d2:c8:13:8f:5f:24:3f:88:01:61:df:cd:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:18:E3:75:E1:85:E7:39:2E:FD:DA:69:E8:37:51:36:69:2B:D5
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:05:d6:a1:a2:e4:f8:a3:ef:19:58:7a:de:d2:b9:03:05:cb:
d2:28:0d:3d:a3:cb:12:26:e7:a2:c2:9b:25:85:b6:40:c0:a9:
cf:a3:f7:f4:8b:a5:fa:e1:8c:b2:0b:54:7f:4e:91:34:3d:d5:
59:19:65:f0:13:0e:e4:fa:60:b2:c0:dd:f9:e0:81:98:88:c3:
bd:f0:89:2f:c3:b9:76:9e:a8:fb:73:11:35:40:76:6b:cf:e2:
1c:cd:bb:0a:0a:37:d2:19:04:fd:fd:4b:fa:79:94:2a:1c:c5:
cd:c6:6b:f1:87:96:29:9b:9e:07:49:e4:e3:db:d5:02:50:34:
7a:97:ff:60:e7:1c:a2:78:2b:9c:ea:4b:6b:69:d1:ac:e5:2e:
5b:e4:7c:58:8c:30:c1:b1:b6:20:8e:91:9e:5f:d4:20:92:10:
d4:34:fb:4a:e8:90:36:12:93:03:01:8d:34:5c:0f:9f:e6:cf:
b5:43:4e:be:df:ed:90:c1:9c:22:f3:42:83:d4:f7:b4:e1:3c:
ec:70:83:17:bf:67:42:ba:8e:6e:7a:13:eb:b3:7c:d6:e2:61:
80:9c:9b:e1:b5:d8:65:87:da:04:54:66:4f:16:bd:9c:90:94:
24:f8:77:4f:77:64:ae:27:63:ab:00:b2:85:ee:bb:52:86:4a:
d3:e7:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:02 2025 by rpki-client