Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier: HyGfen9KOgPhIJ2mdw6LXcyLQ4L0CA+uWA7g5hJsRgw=
Subject key identifier: 2B:5D:10:3D:D3:06:36:2D:0C:05:8F:4B:4B:75:AF:D7:C1:A9:FD:05
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 01974C32469DCF67FD907FBB24E2A1B3FB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number: 0B1F
Signing time: Sat 07 Jun 2025 21:00:52 +0000
Manifest this update: Sat 07 Jun 2025 21:00:52 +0000
Manifest next update: Sun 08 Jun 2025 21:00:52 +0000
Files and hashes: 1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: rf2wknsvEXnZvNjknbE5BlEvgPs1dKv2O5FmTLWHYb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:46:9d:cf:67:fd:90:7f:bb:24:e2:a1:b3:fb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Jun 7 21:00:52 2025 GMT
Not After : Jun 8 21:00:52 2025 GMT
Subject: CN=2b5d103dd306362d0c058f4b4b75afd7c1a9fd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:69:98:ff:65:cb:fa:55:be:5e:4f:7e:29:
c1:29:6a:b6:34:51:56:10:42:67:61:52:96:45:bb:
1c:7b:7c:b0:f0:03:41:40:a3:0e:89:9e:25:28:bd:
46:74:bf:c9:71:6e:ab:dd:ed:cd:c5:d1:db:dc:85:
01:d3:ce:b1:9e:c7:d3:6b:2a:3b:15:54:55:35:7b:
42:a6:fa:c1:a8:ff:60:d1:d0:0d:50:6c:4c:71:d0:
9e:ed:52:a5:19:1e:17:cc:7e:bb:eb:ad:f7:0d:72:
f9:8a:6c:92:2e:2a:b5:8c:32:16:51:08:3f:86:e1:
ca:aa:5a:9a:f9:1c:fa:d5:ab:b0:37:cc:52:33:d4:
c1:b4:2c:61:4c:be:f8:97:01:c3:c6:3c:b6:dd:60:
78:eb:0b:ca:3c:e9:75:ac:e1:44:aa:b0:ca:72:e3:
86:b7:80:7f:96:6d:8b:e1:7d:52:d7:3d:01:07:e4:
2b:a2:29:b7:d3:d7:78:b8:fd:a8:61:e1:5e:8d:80:
54:20:12:63:bc:c8:3f:3c:2d:db:dc:80:21:bf:e0:
40:8b:f7:3f:ba:f8:fc:ba:83:64:d2:ef:87:d4:33:
88:50:ea:f0:5c:09:ea:89:56:4e:f3:30:70:fc:c7:
8d:41:63:6b:99:9b:7e:68:8a:32:dc:e9:19:6f:52:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:10:3D:D3:06:36:2D:0C:05:8F:4B:4B:75:AF:D7:C1:A9:FD:05
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cf:14:82:6c:4a:f3:b7:ee:ce:f8:d3:65:b8:89:8d:18:fd:
71:14:99:7b:9c:21:6b:60:cf:62:23:b5:c9:25:78:fd:8e:4f:
3b:ca:68:82:63:33:3c:09:2c:23:a3:07:49:fa:45:15:31:27:
8f:98:e2:56:70:f0:bb:38:08:d8:71:14:07:2c:f0:c3:98:bc:
e4:52:a5:b9:78:92:6e:49:fb:8d:3e:fe:c2:d7:c3:36:c2:df:
0f:07:d8:9e:d7:cb:ea:db:c9:8a:9a:35:65:58:eb:28:6a:59:
68:38:3e:c9:15:a5:9b:79:e6:a2:96:04:44:01:2c:95:3b:b5:
26:52:77:3d:76:ce:37:97:f6:b5:b1:6c:69:0d:5b:d4:f2:61:
c5:83:1c:c2:2a:eb:72:0c:81:a2:54:ff:e0:8c:d2:b8:6e:f5:
00:9c:cc:52:ed:9d:80:39:24:1c:64:9c:66:48:6b:b5:b4:3b:
7e:80:19:66:0c:ce:b7:1b:53:07:81:c1:15:28:e0:54:3c:74:
a5:92:ce:36:1f:bc:5a:bb:28:b0:6b:09:46:df:fc:15:7e:cf:
56:f0:31:13:66:e9:28:fc:6d:c3:a0:ff:10:b7:a9:2a:7b:29:
b8:ef:bd:64:5b:da:2b:75:7b:7d:de:47:4b:33:ea:7d:b8:96:
3d:74:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:17 2025 by rpki-client