Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File: GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier: yIbkSC5HSVs+9+h3ka7ub7t0AE12ReUgwIF4p9CPuQ0=
Subject key identifier: 8F:2D:3C:D2:FF:ED:C3:A7:DD:E3:DA:A8:29:B6:F2:3E:72:8F:2B:4B
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 019746D4D4E15C50602708AF3DBDA1323585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 20:00:42 +0000
Manifest this update: Fri 06 Jun 2025 20:00:42 +0000
Manifest next update: Sat 07 Jun 2025 20:00:42 +0000
Files and hashes: 1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: jO34uHSHomAYh1oiLJaenckfNvI5/lnCvIBfYrRbd+E=)
2: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (hash: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:d4:e1:5c:50:60:27:08:af:3d:bd:a1:32:35:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Jun 6 20:00:42 2025 GMT
Not After : Jun 7 20:00:42 2025 GMT
Subject: CN=8f2d3cd2ffedc3a7dde3daa829b6f23e728f2b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:c9:46:fc:c8:b4:46:97:0d:8e:29:95:0c:
76:9e:56:78:36:bc:7c:02:8f:b4:53:1d:8b:10:33:
87:ff:f8:23:63:da:bd:16:00:d9:a5:d3:c7:e0:86:
73:05:cb:f8:01:fe:d8:ce:1d:87:32:fb:44:d9:a6:
db:3b:de:cb:ff:f9:59:af:5d:f3:cf:f9:3d:37:90:
e2:cb:b4:b0:9a:31:b5:c1:91:bc:13:ed:c6:74:cf:
95:80:e2:21:61:1f:a7:9a:ea:cb:b8:7c:bb:6d:cd:
ba:db:59:42:fc:8c:68:bf:85:e7:81:4e:13:eb:26:
15:96:26:39:6e:83:3b:98:de:75:4c:3a:08:ca:e6:
04:88:cb:78:03:e4:7c:0a:7d:08:96:1a:ef:29:b0:
f7:71:8c:21:ca:c1:bb:f3:54:cb:9d:ce:a2:0e:55:
b8:ba:ff:ee:f2:ef:91:68:af:d7:d7:e7:c3:a5:16:
33:0c:72:96:7d:eb:2e:fa:6f:72:fc:da:42:9f:38:
54:7a:92:97:fb:5e:f7:b2:74:ec:50:4b:5d:b5:98:
06:3d:65:0c:4d:e8:e8:fc:9c:ec:d2:75:61:cd:2b:
04:94:ee:e2:09:d6:58:4a:f6:9b:f0:72:e3:5b:af:
09:84:59:5b:56:0a:49:15:89:93:f2:fc:fa:0c:e1:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2D:3C:D2:FF:ED:C3:A7:DD:E3:DA:A8:29:B6:F2:3E:72:8F:2B:4B
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1f:f9:98:6f:1f:54:79:63:5f:84:82:4c:4d:52:aa:6f:72:
4c:74:bb:e1:d2:c0:0f:f1:0d:11:bc:a9:9d:06:91:f9:74:5e:
72:4a:f1:61:f7:33:bc:d8:95:4e:f7:dd:7f:46:79:4a:c0:0c:
b4:25:16:da:e2:3f:a4:24:b8:e5:9f:e4:2c:26:a3:0b:79:34:
e6:d6:21:04:17:95:f1:a9:b9:81:40:ae:67:d8:da:f0:f1:44:
5c:8b:f9:a4:22:fc:c3:17:ae:da:bc:12:ce:63:00:38:25:c4:
cc:f3:f7:28:fd:1f:b6:1b:44:cf:fd:b0:75:4b:26:60:fc:a7:
f7:bf:59:4f:49:fa:e6:72:4a:1e:8a:66:a0:96:bc:98:2f:b7:
a2:87:e3:b4:ac:90:87:fc:64:e5:72:86:2e:af:cf:5d:ef:12:
8c:80:18:53:8a:e2:99:cb:e1:f3:fd:e2:01:58:b3:9b:e2:75:
ff:87:fa:3f:b8:22:e9:76:16:81:27:42:a4:e3:a7:74:5d:2e:
fc:4e:d7:c9:1e:2c:ee:20:fe:e1:60:5a:04:85:e4:22:64:ee:
17:4f:46:a5:67:4b:f6:e7:15:5f:2c:86:c6:98:ac:41:3f:8e:
58:9f:8d:82:44:67:80:a7:2b:6d:c0:38:3e:2e:03:25:88:97:
ec:cd:5f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:38 2025 by rpki-client