Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: td+Ml7gZmhxpzBGGby9RFaGctMj1nsX4sltcasl1exk=
Subject key identifier: C0:F1:DD:F7:0B:8B:4A:37:EE:DD:0E:C4:D2:C5:CB:50:63:41:67:D6
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 0197469DFFC651E95C9974B5BCA8AE528BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 11C6
Signing time: Fri 06 Jun 2025 19:00:49 +0000
Manifest this update: Fri 06 Jun 2025 19:00:49 +0000
Manifest next update: Sat 07 Jun 2025 19:00:49 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: 7xh871zII36F34DWKqD52Jd+Hf/vpm0V8cgXL/qyUWU=)
4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ff:c6:51:e9:5c:99:74:b5:bc:a8:ae:52:8b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jun 6 19:00:49 2025 GMT
Not After : Jun 7 19:00:49 2025 GMT
Subject: CN=c0f1ddf70b8b4a37eedd0ec4d2c5cb50634167d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:ab:b6:20:96:0a:6b:6b:f8:51:06:2c:bd:
af:9e:cf:ba:ef:9d:6e:4c:b6:00:34:08:17:a2:42:
74:9e:d6:40:80:47:be:ac:4d:b3:83:d7:b0:c8:b2:
3b:6b:a5:e1:c8:97:1b:eb:c1:8c:ab:eb:c4:46:72:
2c:f4:89:2b:30:e9:f8:d9:e7:3e:f1:d3:6e:48:59:
1a:37:87:b8:a8:b9:01:f2:a0:92:0b:b3:5a:f0:9e:
86:4d:25:56:31:43:35:32:bb:6b:db:eb:16:79:2a:
db:74:55:10:64:c6:b3:3c:d9:2a:ae:35:ed:1f:81:
2b:9e:d7:39:78:04:38:2a:17:46:e7:52:94:1c:c0:
8d:90:89:fe:ca:ab:e0:4c:1f:85:fc:ee:e2:1b:b2:
cf:47:96:c3:97:6f:60:6e:7e:a2:45:57:06:ac:65:
dd:e0:f6:cb:4a:2e:87:d4:67:de:0b:9b:0d:bb:7b:
88:e1:28:2d:6b:a2:f4:07:e4:9c:5a:42:fd:6a:b6:
e7:7c:f9:08:c9:3e:df:f1:8d:ae:6d:52:bf:95:8c:
9c:3d:3d:a0:02:93:d8:f0:22:de:33:73:1a:66:44:
e5:2b:8e:8d:31:af:c7:8c:c1:82:41:2f:bc:d8:a2:
06:ab:90:85:fd:4d:96:4d:cc:78:dc:69:2d:f8:8c:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:DD:F7:0B:8B:4A:37:EE:DD:0E:C4:D2:C5:CB:50:63:41:67:D6
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:35:c9:bc:70:84:b8:37:28:b5:d2:a1:6e:db:2d:30:93:
9f:54:85:33:16:d9:1b:c7:72:ad:55:e7:80:07:cf:06:00:83:
c5:2f:69:8e:81:14:29:49:02:f9:76:17:e1:37:8d:e5:6a:37:
48:5e:80:4b:36:f2:69:ad:13:ab:26:56:01:c7:3a:c9:21:c8:
da:a1:4f:b2:a7:b2:2b:be:b3:f2:a3:63:8c:ce:54:67:fb:1f:
87:96:8f:8d:ac:98:d4:3a:a8:61:b1:98:b4:34:8d:32:69:5d:
e8:5b:3a:84:c8:6a:82:06:f5:71:34:30:22:4e:c9:11:7d:c0:
9a:0d:01:3e:73:1d:0b:15:d5:74:fb:97:18:7b:7d:8b:66:7c:
7f:89:d6:fc:db:7c:7c:73:6b:3d:e7:11:58:e4:90:2f:6e:50:
48:b6:aa:96:5f:2c:bf:43:10:a4:a0:48:7b:29:7b:d5:fd:ea:
d6:4a:9a:8e:21:bf:ee:53:a2:9c:28:09:ba:90:a4:d5:8e:b6:
74:f4:2a:aa:31:78:b4:3b:8a:b9:1d:13:c3:69:a1:df:41:64:
09:ff:7d:1b:8f:85:a8:0c:19:b8:c4:c8:a2:44:d2:1e:33:d8:
f2:c8:57:11:5e:ea:10:49:62:c6:95:82:94:13:af:f6:59:68:
83:d9:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:52 2025 by rpki-client