Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: zXYnpsp34Yd3swPsgG1QB4nmZfHq9xQebt6Mws7WE6M=
Subject key identifier: 9B:E8:87:FA:5C:8B:8F:59:D3:F6:8F:56:00:B3:68:E7:CD:55:C6:C0
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 019748C354D9298F4DF6BC4E1C9D0AD3505E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:50 +0000
Manifest this update: Sat 07 Jun 2025 05:00:50 +0000
Manifest next update: Sun 08 Jun 2025 05:00:50 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: 1L/DjU0qSIJjPk4Jod8GZ4kd8AAmGPtJz6WtAQqGke8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:54:d9:29:8f:4d:f6:bc:4e:1c:9d:0a:d3:50:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Jun 7 05:00:50 2025 GMT
Not After : Jun 8 05:00:50 2025 GMT
Subject: CN=9be887fa5c8b8f59d3f68f5600b368e7cd55c6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:fd:c9:d2:84:5c:f9:64:c5:8a:d2:e6:2e:
a7:52:4e:f5:b0:fb:2d:b5:14:b4:49:44:06:6c:01:
12:8b:b4:4f:93:c4:86:b0:2f:6f:ea:e3:33:81:a0:
f6:06:06:c5:89:be:88:31:99:37:cb:3a:37:55:d0:
78:5c:8d:c8:5d:50:6c:a1:75:8c:fb:ae:ec:44:3c:
1b:ad:7d:9b:bf:fe:22:ec:2b:ab:a7:cd:cf:34:0f:
21:fe:9e:19:1f:97:ca:f3:3a:06:4b:0b:b0:49:ee:
ea:1f:33:82:e9:f0:d4:64:2b:5e:fa:38:df:5b:41:
a9:c1:be:dd:08:ee:48:c6:d7:b7:1b:9e:41:30:98:
58:fa:5b:94:a2:cb:5d:d9:23:71:8b:30:10:61:1b:
4a:3f:c2:a7:eb:d4:17:b4:c0:0b:da:b7:25:ac:59:
d5:93:c6:12:04:b5:66:b9:e2:1f:db:b1:f5:db:f9:
77:82:e4:51:d9:af:26:bd:c2:90:ec:3c:4f:cf:ae:
81:d5:b2:3f:fb:5e:8d:1a:b5:3d:cd:79:35:cd:ac:
a8:7f:2a:98:c2:41:58:45:8b:32:b6:a6:90:99:cf:
49:c1:c7:fd:73:38:d1:ec:71:4b:5e:f8:b1:a3:9d:
0c:36:12:24:a8:39:14:f5:7f:42:af:f0:e8:43:92:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E8:87:FA:5C:8B:8F:59:D3:F6:8F:56:00:B3:68:E7:CD:55:C6:C0
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:ae:33:2c:7d:b0:35:6f:e5:e7:50:78:77:ea:36:e6:68:
1c:e8:31:a6:5e:73:05:ac:9f:4d:e8:e5:26:18:32:60:30:a9:
b7:c7:13:08:49:cb:78:94:fc:37:b5:32:6f:1a:b0:7d:22:f8:
c3:3d:70:5d:5f:39:f9:c1:ef:b7:23:79:69:42:cf:e1:5b:eb:
96:d9:5b:4a:fc:fc:8e:1f:bf:46:88:d6:bd:91:d9:38:22:d8:
c6:9f:c5:14:f4:7d:84:00:00:d3:a8:7f:21:f7:c2:cd:f5:96:
41:15:aa:f9:46:cd:eb:e5:0b:d2:bb:62:df:25:7d:14:07:22:
79:c3:f3:20:a4:29:19:73:88:75:2e:8c:73:f3:ce:c4:72:3b:
a1:3c:63:2c:5c:85:db:ee:f6:bd:ac:71:a8:de:04:ef:4a:5b:
34:17:2f:39:fd:7b:d5:42:bb:92:af:8c:d0:0c:c1:4a:a2:64:
bc:ed:d3:48:57:65:2d:53:98:a1:cf:9b:89:a2:cc:64:ee:6b:
43:21:61:8f:b6:09:f5:7d:cb:05:2d:b9:70:84:c6:8e:da:66:
3c:17:4f:2f:94:35:3c:df:54:db:6f:3c:17:aa:a7:9f:9b:f5:
ca:68:27:ff:74:d5:e3:3e:8b:1f:5b:a7:9a:6b:d2:06:e2:e7:
4c:60:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:28:53 2025 by rpki-client