Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: +k94HWOi8PmgrUtiEkcX9RlXV+6Y8TvLqC28rMB6K24=
Subject key identifier: ED:7B:90:91:52:55:CE:8E:20:5D:07:5F:80:A6:85:8B:B2:DA:B7:35
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 01975B00527990059E2805466073556EF8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 18:00:37 +0000
Manifest this update: Tue 10 Jun 2025 18:00:37 +0000
Manifest next update: Wed 11 Jun 2025 18:00:37 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: /hiHa2nGzPiZT9bQYe3siWmUkM+WptevWAkiAl99omA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:00:52:79:90:05:9e:28:05:46:60:73:55:6e:f8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jun 10 18:00:37 2025 GMT
Not After : Jun 11 18:00:37 2025 GMT
Subject: CN=ed7b90915255ce8e205d075f80a6858bb2dab735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:59:6a:d0:8a:29:d0:6e:15:1b:ad:36:9f:
b4:e9:bb:6f:71:5c:2b:d8:7b:b2:0c:f2:89:a1:5f:
bb:c4:08:16:da:3a:47:09:b0:03:65:cc:b4:97:26:
9e:35:e8:40:d6:0f:b0:63:5c:ca:0d:74:8d:f4:08:
c6:ff:aa:46:67:43:2c:23:15:7e:4d:12:a1:a0:e2:
df:e5:fa:04:d0:89:e5:af:0c:00:ad:a3:5c:66:2b:
89:e8:30:fd:d9:a8:e5:05:61:78:d9:d1:e8:5c:3a:
b5:36:c7:d7:21:4f:fc:00:b6:d3:9f:b0:ae:1b:d2:
6b:43:a7:a8:4a:45:6e:96:34:66:15:73:f2:99:1a:
46:54:b7:7d:c0:0f:aa:2e:a8:ba:91:72:79:d4:ab:
24:36:bc:12:a1:55:19:22:5e:9d:6d:e0:fe:a7:ab:
0e:4c:92:60:e3:a4:17:33:ed:a4:53:f3:91:80:57:
5a:5d:4c:24:42:19:43:68:36:cf:f0:7b:f7:5b:27:
ff:36:3f:0a:b4:75:17:45:70:23:1b:14:75:0d:f3:
32:64:0b:a8:95:8b:e2:76:cc:41:37:69:97:63:57:
03:a6:79:1f:56:74:11:de:d2:35:4c:65:35:98:1f:
23:2e:68:6c:8a:f4:1f:dc:c5:3d:90:df:32:95:a9:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7B:90:91:52:55:CE:8E:20:5D:07:5F:80:A6:85:8B:B2:DA:B7:35
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:60:79:27:83:ed:e2:da:73:f8:50:ca:39:7d:8f:09:77:c0:
5f:84:e1:9f:51:e8:ef:86:9b:2d:6a:f9:7f:8a:e2:d2:24:a9:
b3:45:44:73:0d:47:f3:23:bc:84:19:34:d4:3f:33:e1:16:be:
07:70:d2:71:c1:2d:73:43:d1:85:14:a6:ed:8f:2e:72:6d:b4:
64:2a:07:8f:30:ce:5e:95:4b:79:9c:f3:93:9c:b2:40:59:f4:
35:2c:1c:56:2f:9c:9f:f7:c2:55:48:55:4c:3e:36:6f:cf:e8:
2a:c9:36:19:f0:c8:b1:2c:50:b7:ff:07:c7:82:ea:d1:b9:be:
07:fd:81:35:f3:bc:c8:28:38:d6:de:e1:18:1e:16:cd:1a:9d:
17:4d:81:e8:03:03:25:62:f6:7e:7c:9c:f4:48:fb:6b:29:1c:
88:ca:20:88:38:30:73:b3:f1:c9:72:73:b7:c6:e9:20:f2:aa:
13:4b:da:c7:e1:a3:7e:85:f3:c0:bd:13:eb:59:77:9d:e9:bb:
fa:4e:fd:6d:37:db:9c:73:ce:e2:46:50:32:69:4d:7e:04:ea:
89:88:e8:57:9e:08:55:54:53:6e:96:a8:6c:09:ed:f8:8f:80:
33:44:12:dc:35:51:8a:02:c6:a4:d8:80:49:a8:4a:c2:6d:ba:
02:df:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:56:19 2025 by rpki-client