Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: +sT3r5+sbai8U63O8DWwnrtE4KhzXXOLPjF4bw+8ebk=
Subject key identifier: 90:C8:2F:05:64:22:AA:59:73:2B:98:F3:E0:E0:71:5B:A6:D9:DD:F5
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 01974A7B1BB76463F46DE218B2B984823448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 0EC0
Signing time: Sat 07 Jun 2025 13:01:11 +0000
Manifest this update: Sat 07 Jun 2025 13:01:11 +0000
Manifest next update: Sun 08 Jun 2025 13:01:11 +0000
Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: 6NO8KgRyykB7qN2pP2GXcscSHg2nC89/ugZvj8q+fL8=)
2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:1b:b7:64:63:f4:6d:e2:18:b2:b9:84:82:34:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Jun 7 13:01:11 2025 GMT
Not After : Jun 8 13:01:11 2025 GMT
Subject: CN=90c82f056422aa59732b98f3e0e0715ba6d9ddf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:12:24:5f:42:53:68:e4:7a:9a:10:6c:02:
34:31:aa:40:e1:d5:e2:ec:1f:47:a1:b0:f4:ba:65:
b4:a6:f2:fa:d4:01:f7:83:01:9a:b3:4d:93:62:eb:
83:44:ea:66:75:4e:04:93:b9:9e:bb:b8:f7:6c:a3:
75:a1:2f:24:a6:ad:80:5b:7f:bc:6e:11:b5:cb:22:
0b:56:db:29:90:88:54:b5:c2:27:48:81:89:03:32:
83:27:53:b5:87:f9:e3:ef:b2:b2:8d:4f:e8:a3:56:
cc:82:ed:bf:90:a4:86:65:73:04:07:98:4d:c5:53:
42:66:19:85:9a:0d:9d:45:ab:db:f0:3a:59:a1:0d:
7f:1f:82:26:c8:52:bd:30:71:d2:d5:86:f7:ce:95:
61:5c:2f:ea:72:ce:14:18:fb:dd:a4:bb:89:4b:21:
7a:9b:8c:83:0f:4e:95:b5:37:09:a2:cf:88:a1:7c:
52:46:30:07:83:19:ca:90:70:a6:db:ea:fc:d6:c1:
7e:eb:91:29:fc:13:41:eb:34:18:de:b2:ca:46:99:
88:e5:65:92:27:57:7c:6c:ba:7e:05:fb:fa:a4:3b:
47:a1:97:ae:6e:75:de:b1:d6:8b:d6:55:41:c4:39:
76:a7:3c:43:67:24:b9:d0:ca:3c:df:ad:02:ce:86:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C8:2F:05:64:22:AA:59:73:2B:98:F3:E0:E0:71:5B:A6:D9:DD:F5
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c8:a8:5f:b6:65:6e:10:62:2f:dc:ae:03:9b:fc:19:82:6c:
ab:eb:00:f0:3c:3c:9e:9a:45:3d:f4:f3:9f:b4:f7:99:d6:bf:
b6:a5:eb:b8:06:2f:d5:a0:f5:02:f9:30:ff:f0:eb:e4:21:04:
87:d9:af:f9:f2:36:13:24:9a:3b:2b:59:28:31:47:14:a8:2f:
66:4d:23:0b:52:e8:86:e6:4b:68:35:ab:64:af:e3:34:60:f9:
ed:66:da:4b:45:a4:57:a9:e3:63:4f:5b:da:79:11:e5:4c:75:
e8:4e:5a:51:d7:20:04:9d:ce:50:ba:f1:bd:cd:48:0e:28:30:
03:ad:6b:5f:3d:38:59:00:2a:13:0b:cd:5e:4b:85:55:e4:38:
92:ba:35:2f:be:00:f4:6d:8f:fb:fe:a4:1a:40:ed:27:31:53:
53:1f:ac:3e:7a:5c:7e:8d:f5:2a:2a:3e:04:66:0c:fa:41:e9:
fd:2a:3c:72:9f:84:7b:c5:83:32:26:06:0d:c5:8f:af:d6:63:
0b:5d:65:66:3c:62:db:c2:be:ce:71:83:ba:1d:57:74:2a:ee:
09:68:8c:96:a2:20:e7:ec:87:a2:9f:41:38:fd:85:e0:4b:13:
12:ed:87:79:85:bf:5f:c7:b1:e3:5e:e2:1b:6b:9c:ec:1f:8a:
fa:08:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:15 2025 by rpki-client