Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File: gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier: vc1FhaZn1EViYRMVhbowMjYcSdvJgekalwZQn7xlg+E=
Subject key identifier: 32:14:DE:70:BB:0A:B0:86:47:59:57:B5:09:8B:B0:44:16:46:7C:35
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 01974DB2985DE6705162656C35C8C2FB344F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 04:00:39 +0000
Manifest this update: Sun 08 Jun 2025 04:00:39 +0000
Manifest next update: Mon 09 Jun 2025 04:00:39 +0000
Files and hashes: 1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: lhwoZM7K4UTFwgcTbYcZlScB0T786PpHsoNqgPkhgoo=)
3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:98:5d:e6:70:51:62:65:6c:35:c8:c2:fb:34:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Jun 8 04:00:39 2025 GMT
Not After : Jun 9 04:00:39 2025 GMT
Subject: CN=3214de70bb0ab086475957b5098bb04416467c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:5e:70:3d:e6:3b:69:29:d4:f9:76:d0:af:
0a:78:1a:da:81:67:ac:96:36:f6:75:de:ff:09:c3:
bc:bd:33:84:9d:f8:23:22:52:59:bf:29:75:1f:74:
32:e3:1e:34:6b:cb:3c:14:a0:37:af:b5:20:df:b3:
af:f5:ad:66:13:b8:1f:44:85:b8:0b:01:c6:5a:05:
0b:4b:05:2d:5c:5d:f7:20:44:3e:92:a3:80:1e:ab:
d4:69:82:02:98:d5:d6:b4:5a:ab:6c:f9:73:c8:91:
78:de:4c:12:36:6c:e6:b2:f4:f5:5e:96:88:cd:54:
8c:a3:5e:7c:e3:0d:f8:78:e6:69:d8:1d:e4:e1:c9:
bf:a1:a1:9d:7e:4d:3a:e3:36:a3:a0:a5:59:9e:55:
57:d6:8e:4b:a3:56:b2:d0:b6:f8:0e:94:78:ec:ab:
5b:47:a0:ea:f9:4b:d9:bf:c8:d1:7e:33:08:d8:71:
aa:49:5c:3c:89:ee:f5:b2:d2:71:24:9a:34:21:95:
4f:dc:91:e2:5b:9a:09:f1:a8:a0:8a:f4:b1:f3:08:
c2:03:20:13:3d:16:7f:63:ea:1b:4a:83:b8:a5:08:
b5:65:93:6e:31:01:f1:cf:5c:e8:e2:a8:45:b5:c8:
49:8d:02:3f:97:81:d1:d3:bc:79:6a:e3:34:86:a4:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:14:DE:70:BB:0A:B0:86:47:59:57:B5:09:8B:B0:44:16:46:7C:35
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3a:78:da:49:be:74:88:ee:6c:4f:dd:f8:b3:88:83:08:8e:
00:f3:ae:02:0e:4c:49:c4:08:37:04:a9:f9:3d:bb:99:02:fb:
43:16:10:22:b1:4e:9f:e1:e0:5b:f7:ae:2c:4f:c1:63:ff:cf:
e2:d5:e7:d4:12:82:51:02:b9:be:09:a8:f4:b6:81:00:2c:94:
90:bf:37:de:bc:c6:f9:1f:42:2f:15:cd:db:68:c9:33:cd:c7:
e2:5f:06:0e:d3:ed:e3:47:6b:a6:e7:73:13:b1:91:2e:b2:a3:
23:c0:21:f9:e2:30:d4:7b:1a:7e:73:aa:60:a6:31:92:cd:bd:
a3:1b:21:06:3d:a9:e8:db:99:da:ea:ae:56:fa:a5:47:96:b7:
4a:d1:f6:92:18:f4:4c:27:0c:78:7e:0f:c2:63:08:a4:31:d0:
2f:7f:fc:98:13:2f:3c:98:7d:2a:7a:33:f0:31:77:af:68:30:
6f:8a:a2:77:95:57:8d:44:c7:b8:0a:eb:92:b1:a1:c1:7d:59:
ae:58:2e:24:02:e7:ef:cc:2f:d8:e6:dc:b6:55:49:9c:9d:21:
c3:12:a1:12:4e:1e:67:b9:bc:82:cf:b5:93:a2:a9:99:ea:d2:
1d:e0:58:81:7e:38:de:23:b3:3d:4f:4c:23:57:22:f7:5c:b2:
44:bb:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:17:48 2025 by rpki-client