Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: Yo11AilgIR6S83jL2EBK61B9u6CsVm1a7oDs4h7Mav4=
Subject key identifier: 8A:5D:6A:27:AC:0D:11:9A:6E:4F:69:13:E4:C1:ED:24:D4:3A:C6:06
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 01974E202C02C823F5918D85D495A06E436A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 04ED
Signing time: Sun 08 Jun 2025 06:00:20 +0000
Manifest this update: Sun 08 Jun 2025 06:00:20 +0000
Manifest next update: Mon 09 Jun 2025 06:00:20 +0000
Files and hashes: 1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: htBCFnnJdeRe9p+yxxvysf3sxzXrYL+EvzmQI2o/cXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:2c:02:c8:23:f5:91:8d:85:d4:95:a0:6e:43:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Jun 8 06:00:20 2025 GMT
Not After : Jun 9 06:00:20 2025 GMT
Subject: CN=8a5d6a27ac0d119a6e4f6913e4c1ed24d43ac606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:06:eb:48:b8:51:38:fa:99:60:b3:83:8b:
48:8d:5a:b7:87:78:f2:6e:e0:01:94:ad:48:04:26:
51:69:6f:b8:85:65:e2:82:a1:4a:7a:41:d2:17:e2:
30:78:9f:35:43:2a:cc:64:a5:15:c2:cc:d5:97:8f:
de:25:b6:df:05:14:89:79:df:1e:58:47:12:88:c4:
5f:13:f0:ee:5c:b6:b7:f3:30:62:a8:9c:c7:dd:fa:
24:e1:30:a7:60:1a:8d:df:cb:c1:ab:58:e5:5b:c2:
c5:21:30:af:5d:6f:41:81:ba:27:6e:a1:87:cf:44:
2e:e9:d0:7d:c8:20:de:8b:00:75:c2:18:05:40:26:
26:75:89:0f:18:de:e0:1b:38:5d:30:66:78:57:dc:
05:59:5c:7e:69:41:a5:57:c8:c1:d4:49:3d:1e:6b:
f5:44:46:f9:ce:7d:77:13:6f:6b:bb:bb:60:71:5a:
32:d8:c9:97:67:b5:e6:23:0f:2c:ed:85:6f:56:6a:
71:78:cf:be:02:3e:3f:d9:5b:be:05:8f:7c:6e:bd:
21:93:64:83:03:cc:be:b8:11:1d:bc:31:16:a2:6f:
f3:20:3b:2d:24:96:cd:af:15:78:9b:78:c3:82:b0:
6c:63:5b:9f:d8:16:36:29:8b:50:d4:7a:46:bc:f5:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:6A:27:AC:0D:11:9A:6E:4F:69:13:E4:C1:ED:24:D4:3A:C6:06
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:88:ff:e4:d7:72:51:b5:b2:0d:de:57:94:77:bd:28:3f:ed:
5b:db:86:e9:ce:59:63:b4:b5:08:96:0c:02:6b:90:62:71:47:
63:d1:b1:16:81:7b:c9:6a:67:6f:a1:eb:67:29:f3:b2:f0:7d:
f8:cb:1a:22:56:7b:84:c1:fd:7f:fa:44:ed:fa:80:06:f9:a8:
d9:3f:f8:a5:b0:71:3d:8d:81:72:5e:ec:06:0b:8b:94:75:d6:
7d:ee:8d:f6:b6:42:a0:6a:bd:13:02:8e:db:82:57:a0:e5:a0:
f4:80:21:55:ee:2c:88:56:9c:6b:66:d2:4e:6b:60:30:af:50:
16:32:9d:7c:81:b0:c1:70:d8:cd:f7:0d:e3:fb:55:77:ea:6a:
db:65:33:cb:ad:d7:04:c2:2f:1b:ab:fd:33:1b:c8:6c:b3:fe:
38:6e:39:91:6a:d6:5a:c3:b7:82:5a:29:a9:13:d0:9b:67:01:
e7:91:d5:a0:c1:e7:01:e2:48:c3:52:49:cd:e8:4d:26:0f:1a:
0d:8b:a4:7a:77:76:b3:a5:c7:aa:33:ee:d5:a6:7d:5a:f7:32:
e3:0c:a3:61:74:c9:88:17:5d:82:3e:32:1a:b1:cb:22:3d:94:
2c:b9:ed:f9:f0:88:25:9c:d9:d6:0d:35:4d:28:a9:97:90:70:
b9:53:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:32:43 2025 by rpki-client