Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: X+qBXZn5x/G96htua8Uye0DEosphemAbF+8sjmjJgSg=
Subject key identifier: 2F:8B:B0:C1:88:82:8C:E5:57:FE:4F:0B:AC:2F:4A:D2:91:63:EB:DF
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 019748FA5B1088990D0E2B1FD010C1094A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0C6F
Signing time: Sat 07 Jun 2025 06:00:56 +0000
Manifest this update: Sat 07 Jun 2025 06:00:56 +0000
Manifest next update: Sun 08 Jun 2025 06:00:56 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: O6dCH43X5/PsQF5fSYqCSa4PCJoYlE87Z563hmKhnhg=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:5b:10:88:99:0d:0e:2b:1f:d0:10:c1:09:4a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Jun 7 06:00:56 2025 GMT
Not After : Jun 8 06:00:56 2025 GMT
Subject: CN=2f8bb0c188828ce557fe4f0bac2f4ad29163ebdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:28:92:67:42:82:0d:2b:a5:1c:e4:41:2d:
b6:49:b9:bd:21:ba:8a:06:6e:08:71:62:02:7c:ac:
8e:8e:75:1c:79:57:4a:14:1d:ef:ae:93:61:67:84:
64:10:06:46:17:a2:e6:9b:7d:06:57:af:ed:e6:7a:
e0:35:c7:79:e6:a5:33:57:1d:ce:09:12:ce:31:8f:
69:a7:f5:f1:11:7b:99:9b:b3:13:81:51:07:69:c3:
39:75:15:69:dc:23:b5:d9:aa:cb:c1:99:56:4c:25:
81:b5:6d:9a:b1:ce:af:9b:1e:03:5e:19:9c:ca:a9:
ae:d9:8f:c5:cb:12:fe:6f:1c:eb:c7:20:0d:9b:dd:
52:6e:17:2b:25:42:5a:b9:ee:58:65:b8:a8:65:60:
b4:57:2b:1c:07:5c:1a:a6:bb:71:bf:1d:df:08:a3:
31:49:63:da:18:4d:bc:11:4b:4b:93:9c:0d:69:6b:
ff:39:fa:e1:fc:57:b2:0d:cb:1f:a7:7e:83:4d:05:
51:70:80:8e:ce:8c:82:40:f1:33:d8:f1:3f:88:ae:
37:33:56:e9:51:8a:61:71:5b:4c:f3:3c:6a:ba:6c:
61:ce:18:80:74:9a:1c:0b:43:9a:45:c2:ab:11:cb:
1c:37:b5:be:51:fb:7f:98:87:ba:8d:e1:0a:a4:f8:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:B0:C1:88:82:8C:E5:57:FE:4F:0B:AC:2F:4A:D2:91:63:EB:DF
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a0:7e:7d:44:19:a3:12:c7:b4:6f:45:d9:8b:dd:0a:b1:21:
a9:c8:31:38:dd:5a:ef:5b:80:8c:1c:cb:7d:14:69:c2:cf:74:
47:99:33:f2:9e:7f:dc:77:f5:6c:99:05:cf:6a:35:83:8d:20:
04:40:4b:5b:d0:8b:c1:53:15:7b:80:00:f4:46:8e:7b:df:29:
84:4f:76:d9:e6:97:5e:c4:df:14:8d:e9:91:c7:6c:58:73:12:
55:96:d7:a2:c0:ba:6e:87:c1:40:3d:5c:1b:ac:af:e1:62:24:
4a:eb:89:8c:8e:c7:db:40:c3:00:8d:78:4b:62:43:d0:aa:03:
21:cf:49:0e:07:42:84:86:ef:08:e2:f9:b3:e9:7f:f1:a9:7e:
a1:8b:03:5b:d3:00:27:cc:c6:46:c7:5e:00:d3:e4:60:20:1f:
bd:14:f7:5c:4e:42:00:cc:58:98:80:be:f5:9f:b5:65:9c:66:
01:39:44:9d:ff:fe:5b:8a:76:30:0d:73:4f:56:c0:ba:17:0b:
1d:0d:81:b3:93:5b:71:3c:33:a6:bc:9f:47:ad:93:6a:b2:51:
fc:d3:d9:e3:a1:a0:30:de:9c:2c:fe:39:1f:21:af:e8:8d:de:
c5:c7:4d:50:49:1d:a4:88:63:00:61:75:c5:8f:a2:71:8a:70:
3d:9e:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:17 2025 by rpki-client