Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier: fYUHt/xspGKALKfNa8VQsypkFI8my+apBgWWL/gdo3g=
Subject key identifier: D6:1C:1E:E1:D0:FF:AA:01:F1:E6:64:C8:8F:B5:3E:79:61:94:32:F0
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial: 01974EFC37C2495E14980BC96F9CF5EFF176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number: 081D
Signing time: Sun 08 Jun 2025 10:00:41 +0000
Manifest this update: Sun 08 Jun 2025 10:00:41 +0000
Manifest next update: Mon 09 Jun 2025 10:00:41 +0000
Files and hashes: 1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=)
2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: SUuzt8A/FDWE/vYKefyRMDfjtVRDlTSV2DqrQHImAzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:37:c2:49:5e:14:98:0b:c9:6f:9c:f5:ef:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
Validity
Not Before: Jun 8 10:00:41 2025 GMT
Not After : Jun 9 10:00:41 2025 GMT
Subject: CN=d61c1ee1d0ffaa01f1e664c88fb53e79619432f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:1e:0f:dd:d3:39:a9:f6:86:cc:00:68:50:
8e:49:81:cb:a7:f5:2a:62:c2:18:be:ac:e6:98:6e:
74:30:5e:75:b2:e9:9a:52:7c:2e:bf:29:87:2a:2f:
18:0f:48:e3:f8:b5:6c:18:ba:ea:04:94:58:ed:4c:
72:b7:d3:c5:0f:7a:d3:cc:c8:fc:5c:7c:2d:a4:ee:
00:9a:29:f4:d0:33:aa:9d:c1:01:21:a0:08:22:fd:
e3:00:ba:cd:f2:63:6a:5d:48:6d:7d:7d:6a:88:d3:
7f:fb:74:04:57:00:d1:7e:7c:d7:29:ae:c5:60:48:
b8:bc:2b:d2:89:9d:e3:4a:f6:ab:09:2a:cb:52:a6:
05:a2:96:26:b7:9a:d6:20:a2:ef:3b:ce:a1:fd:77:
58:65:09:e0:23:93:b7:26:90:c1:e2:8a:ea:d1:70:
8e:93:fc:81:13:41:8e:bf:94:e5:64:91:6b:1e:06:
b1:20:61:52:f6:fa:c9:a3:4d:47:28:2a:1e:e6:fa:
20:a8:d8:70:e6:ed:7f:06:3d:5c:7c:ba:51:77:8c:
5d:0b:4e:2f:bc:c7:4e:0c:d6:e2:7e:c2:3f:06:6d:
5e:a0:06:f3:1b:7d:df:2a:30:25:a1:fb:1a:ff:39:
19:c6:6d:18:c5:d1:1e:7a:af:4c:ce:cb:93:33:16:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:1E:E1:D0:FF:AA:01:F1:E6:64:C8:8F:B5:3E:79:61:94:32:F0
X509v3 Authority Key Identifier:
keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:42:31:38:c3:72:bb:86:95:06:e4:61:e5:5d:fb:eb:12:f1:
68:59:5a:01:a2:38:03:78:3d:09:44:62:a4:e4:9b:d7:61:1e:
b6:90:25:93:89:38:a2:c5:38:d8:78:cb:6d:a3:3e:aa:9f:04:
e5:2c:0e:49:39:18:7a:a2:03:98:33:e8:94:bd:9f:2c:c0:db:
ff:fb:3f:14:42:11:f3:04:c5:8b:4c:c1:22:a6:68:25:a5:fe:
9c:de:3d:5d:86:0e:bb:f8:f0:1f:13:52:81:4d:a3:0e:26:ef:
77:4f:6a:5e:dd:ec:13:75:fc:1c:a1:a6:5c:f6:0e:f8:79:fc:
8f:7c:a8:50:74:ca:e7:d1:30:44:73:2f:0c:40:bc:5f:6c:39:
2c:47:7e:e7:01:a0:22:67:6d:65:38:74:cb:b7:4f:b5:69:e3:
d6:50:28:98:96:7e:fa:67:08:8a:9e:8f:9e:3b:70:f1:bf:f1:
c4:b7:83:36:e2:5c:a7:90:65:63:ff:11:a6:85:11:53:61:8e:
d6:b6:e7:a0:5d:42:e1:17:a4:00:f1:54:87:d7:a8:f1:91:0b:
5f:63:a2:66:17:eb:13:4e:24:83:2b:5d:64:6d:a8:9e:11:f3:
ab:51:84:14:b8:3a:7d:24:2e:fb:73:15:94:c8:85:fa:d4:67:
72:70:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:51:40 2025 by rpki-client