Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: mFm8x18MOjSFvS6VIwOPsHNjbNQo67QUD1reZ2wDsnI=
Subject key identifier: 1A:58:23:70:C4:62:BE:B6:FE:E0:52:45:F5:17:C3:6E:4D:71:03:63
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 0197485532AEBAEBF1BFDA2FA7BC162987DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0DC3
Signing time: Sat 07 Jun 2025 03:00:32 +0000
Manifest this update: Sat 07 Jun 2025 03:00:32 +0000
Manifest next update: Sun 08 Jun 2025 03:00:32 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: J8EBkVpWO9dqP9V9NCZXFQB5xpisFbKHA3d4lg+Z1SQ=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:32:ae:ba:eb:f1:bf:da:2f:a7:bc:16:29:87:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Jun 7 03:00:32 2025 GMT
Not After : Jun 8 03:00:32 2025 GMT
Subject: CN=1a582370c462beb6fee05245f517c36e4d710363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:26:a2:15:cb:2f:d8:14:c2:10:d8:1c:88:
55:1f:69:61:00:34:c4:5f:b6:9b:f3:a1:00:49:d4:
91:0e:82:ac:3d:f7:61:a9:d0:1f:58:22:f5:9b:a5:
70:e1:a5:33:2a:79:53:ee:28:02:50:37:cb:8c:d3:
45:64:ec:7e:96:9d:98:0a:42:8e:66:6e:19:c8:10:
25:f4:c1:8d:c0:28:34:e7:8b:eb:20:fe:af:c9:cf:
0f:99:c2:4f:6c:a1:4c:13:d9:de:74:00:34:a4:08:
55:1d:1d:60:74:ca:7e:e1:55:77:c5:d6:7f:14:a2:
3c:2a:7e:99:e9:ec:d2:f0:be:4f:56:c9:53:5d:e1:
28:af:39:d1:7f:f8:09:9b:e4:d8:e9:ab:73:7b:58:
af:34:46:4c:ed:ae:71:9d:4c:b4:14:82:91:f7:31:
c8:7a:2d:4b:75:b2:30:9d:45:93:bb:56:17:f2:da:
8e:59:c3:d5:6f:68:74:58:bf:a6:90:41:58:3f:b0:
f2:5f:5b:de:4b:bf:05:1f:54:b3:0e:3a:99:82:3d:
3d:a2:67:47:5f:01:27:04:16:ab:0b:09:01:5c:41:
4d:a0:1d:53:47:4f:dc:34:aa:7f:12:fa:04:63:2a:
d6:73:b0:ea:28:65:3e:41:1b:90:b1:f1:b1:da:f8:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:58:23:70:C4:62:BE:B6:FE:E0:52:45:F5:17:C3:6E:4D:71:03:63
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:13:bf:9a:7c:d6:70:df:2b:bc:0b:87:b8:19:fd:c1:81:db:
91:47:d6:04:74:3d:00:5c:6c:6b:5c:9e:7d:56:8c:64:4a:2f:
22:b3:e1:fb:4a:0a:81:10:46:33:f2:44:74:13:3f:7f:e6:cc:
bd:31:41:3e:cd:7c:5a:50:ca:75:dc:c4:80:51:48:c7:ed:f1:
8a:e3:e6:40:7a:48:f5:bc:7f:59:08:c6:03:22:70:0c:ab:8d:
8c:72:8c:50:2c:89:2e:0c:50:1f:59:62:82:bd:02:b1:da:fb:
80:48:4c:f9:a0:15:b5:e6:73:a3:e6:07:ad:ef:31:fe:fe:d3:
78:22:66:40:ef:13:e4:34:fb:f0:c9:24:20:85:8b:0f:5d:09:
94:b8:7a:26:84:87:b1:ba:51:27:c6:62:75:02:ac:1b:a7:95:
03:09:cf:63:74:4b:8f:e1:19:93:a1:91:86:c8:10:4b:33:77:
3c:38:27:6d:36:56:2b:56:78:9a:e5:e6:80:7b:96:e3:33:3e:
5e:8d:a0:36:42:b9:0b:10:f2:1d:b7:4a:bd:0d:ea:f1:8a:e8:
22:a5:f2:b6:ad:a5:38:9e:d2:34:9c:62:0b:3c:bf:a0:10:c9:
c9:39:b3:51:fc:d9:e3:9f:f5:5c:85:a1:cc:21:11:8e:25:54:
a3:7c:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:01 2025 by rpki-client