Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: rrnVhn5gJKoWkjhO7nDwFZOuldTjf00yePEtjDuEhEw=
Subject key identifier: B2:23:BB:2F:0A:3D:25:A7:0D:AB:2A:E8:BC:B6:AB:75:37:84:60:7A
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 019760CB54DE8E06D9C47FE8A713833F4C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 21:00:27 +0000
Manifest this update: Wed 11 Jun 2025 21:00:27 +0000
Manifest next update: Thu 12 Jun 2025 21:00:27 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: b7dbhqI3KgSy0tcsRJITz6xFmYQGDq+m2oxOO9MvWR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:54:de:8e:06:d9:c4:7f:e8:a7:13:83:3f:4c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jun 11 21:00:27 2025 GMT
Not After : Jun 12 21:00:27 2025 GMT
Subject: CN=b223bb2f0a3d25a70dab2ae8bcb6ab753784607a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:bd:fc:47:b3:b7:39:89:5e:9e:bc:a4:41:
ff:af:a0:1b:00:5a:98:cb:08:f8:10:e3:3e:c4:42:
8e:c6:9e:d3:6c:fb:33:25:1f:23:43:34:98:b0:c2:
ed:81:d4:e2:80:d2:90:84:c0:e2:62:50:6d:47:98:
f7:ad:cd:f9:90:09:5b:5d:36:2f:f2:f6:57:93:49:
1d:75:3e:d9:dc:e8:f4:dd:c9:80:6f:7d:04:94:f9:
b3:8e:50:8d:29:e7:a5:96:d5:c3:85:44:b5:3a:d6:
a7:3f:d8:78:ad:a0:7d:ce:81:46:96:c2:81:8c:83:
04:71:e3:76:75:d5:6b:6a:46:d3:b7:d5:e0:3a:2f:
c4:79:27:ad:70:cc:13:4a:51:1f:51:8b:b6:0b:16:
57:a0:20:72:70:b0:e9:ac:82:70:2c:87:db:af:80:
16:71:36:ce:97:5e:51:3d:3c:6e:0c:7b:00:c7:fc:
61:ba:0a:6f:2b:f0:be:a7:5a:ad:89:a4:9d:d1:f1:
54:a5:a2:8d:36:a2:f2:da:17:af:09:9b:cc:23:3b:
a0:a3:25:ec:3d:23:98:ac:72:6e:4a:cc:3b:17:5b:
b9:90:ba:3d:4a:ba:0c:bf:cd:86:14:2a:96:a9:0e:
e3:44:2f:f2:64:78:32:f0:2d:ef:e8:d4:c4:b8:1e:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:BB:2F:0A:3D:25:A7:0D:AB:2A:E8:BC:B6:AB:75:37:84:60:7A
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9a:f3:75:37:63:29:58:f9:4a:e7:a1:20:31:3a:53:05:12:
65:fe:5a:b4:c1:c2:8b:84:8a:0f:ac:2d:fa:34:ab:da:03:b5:
82:2e:00:60:73:f0:ee:1b:48:ea:e6:76:98:54:1d:50:f7:be:
0a:d1:a8:b8:6e:54:02:33:e4:aa:bf:52:1b:4f:ba:ad:26:6e:
12:fa:75:91:c8:32:00:f6:7e:df:99:83:91:a1:5b:86:3b:88:
46:08:25:63:91:89:8c:7a:ee:d0:bb:6c:df:c1:f1:03:0f:19:
50:70:9d:af:f1:d1:d6:4a:df:c5:25:6b:d9:3e:d9:0a:ea:55:
1b:37:1d:05:35:0f:c4:c8:12:d0:2f:81:77:7c:f5:2c:68:52:
af:40:f4:0f:f1:89:a0:5b:a6:12:cd:44:a6:13:46:51:06:51:
a6:c2:7f:a0:ef:f3:e2:c9:39:c5:36:57:73:ae:2e:51:5e:57:
67:16:05:ef:22:44:d2:03:90:b2:14:2f:68:a2:78:a8:8e:2e:
3a:9d:5d:7d:27:63:ef:86:c9:c3:ef:1a:cf:8a:f2:eb:1f:e1:
f3:09:71:cc:a2:52:47:ba:d6:16:5a:af:d9:04:7e:c1:51:43:
5f:41:32:f9:78:ab:e5:5a:5d:98:83:47:20:e5:6d:ff:c7:2b:
fa:09:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:27:00 2025 by rpki-client