Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: RnfmtdWh6QIPMXnxeeVCahlX2IPDT5enw/f5fECcpZ4=
Subject key identifier: 3B:BE:BC:B1:C5:72:12:F2:EB:B8:D3:F7:AD:62:12:40:93:A0:44:E1
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 019747E777103FA514A72BE86222CEE8CB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 05BD
Signing time: Sat 07 Jun 2025 01:00:41 +0000
Manifest this update: Sat 07 Jun 2025 01:00:41 +0000
Manifest next update: Sun 08 Jun 2025 01:00:41 +0000
Files and hashes: 1: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: fVPUtyxU4JQhFC0tlsaB1hQs2/vUrKK1XI0n7YuoNes=)
2: ZTIBKgjTaXW_ZnWc7123527kr5M.roa (hash: nKgH3xdgZjr7Kq7o7yKNcoST/uR2S0ghz6FcpqSglbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:77:10:3f:a5:14:a7:2b:e8:62:22:ce:e8:cb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Jun 7 01:00:41 2025 GMT
Not After : Jun 8 01:00:41 2025 GMT
Subject: CN=3bbebcb1c57212f2ebb8d3f7ad62124093a044e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:40:8c:92:d3:b5:be:42:b8:85:a5:38:17:
73:99:51:fc:6d:c4:8a:fd:c1:bd:be:a5:64:a4:ed:
15:9d:15:b3:0e:15:ce:12:79:e1:46:3e:08:92:dd:
fe:8e:96:f0:2c:6e:a3:d4:17:9b:a8:e4:c1:61:5c:
cb:e7:c0:25:6c:fe:e4:26:b7:41:20:b8:d3:c2:88:
e0:a9:b8:46:72:25:40:7a:fc:08:55:5c:9b:93:07:
24:3f:ea:79:af:24:f4:29:8d:39:51:6f:40:3a:c5:
40:79:0a:b3:4b:39:47:03:08:6c:3b:c2:ae:6f:30:
d2:bc:40:38:86:92:87:1d:23:d8:cd:e9:d4:ed:fb:
a2:cd:22:d3:ff:09:f9:31:19:7e:29:57:15:a0:53:
43:f8:fa:15:6c:72:25:ee:83:b2:3d:f8:f4:7b:1c:
d0:a3:ac:4c:fa:65:8b:88:54:b6:d7:5b:53:85:49:
40:d0:42:79:ad:0d:3a:31:68:ff:bb:8b:62:f4:61:
09:40:c8:f3:a3:cb:b4:9a:ed:e5:c0:ba:6b:76:99:
d8:ae:a2:23:be:65:59:3c:8f:5c:14:c9:31:a9:a4:
a6:f9:bf:de:75:db:08:43:a1:ad:1e:d9:78:66:6f:
ba:95:d9:ba:18:57:b8:bf:8a:b3:9c:a2:24:c8:2f:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BE:BC:B1:C5:72:12:F2:EB:B8:D3:F7:AD:62:12:40:93:A0:44:E1
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f1:65:81:09:e8:2f:90:58:f3:92:21:bf:30:3e:ed:06:43:
d7:e8:2d:ec:19:01:9e:6d:07:9a:3b:14:d6:0d:c7:07:ff:ad:
78:75:e4:7c:5e:d6:9d:0f:f6:5c:fc:ea:3b:b4:8e:ff:2e:18:
0e:5e:9e:cb:3c:5e:c8:e3:23:33:5a:84:a9:fd:5e:58:ce:ee:
03:7c:0f:05:75:3a:11:2c:4b:11:ed:7e:2e:b2:94:28:49:b1:
7f:16:a1:72:89:95:f8:d8:c5:f9:4a:bb:34:74:ce:53:07:0b:
fe:75:38:26:3b:f7:02:a8:d9:d3:3d:7e:35:b8:83:2c:a6:a7:
3c:0d:70:45:44:10:0f:26:81:d2:94:50:dd:90:59:cc:ec:79:
93:01:c8:7a:da:10:19:5c:01:db:26:82:11:35:6d:15:87:02:
e6:41:24:cc:23:b3:98:ed:6e:1c:08:30:08:5d:46:95:51:97:
fd:35:c8:e7:8b:6f:15:d7:96:92:71:d1:22:8b:39:a6:cf:17:
c9:9f:39:c2:c8:d3:df:45:ae:a8:5e:4c:cc:77:d4:84:3f:6a:
f3:a6:f7:f8:77:5e:7d:24:40:1b:3b:9b:b5:f7:72:b5:61:0b:
87:3b:da:fb:cd:b4:3e:60:2a:6c:62:8a:36:3e:db:ff:0b:e0:
b8:c7:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:23:20 2025 by rpki-client