Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: TizwmxiHzZS5dD11812u2171fzS5L2hxYMFC2bn8q0A=
Subject key identifier: AE:85:6C:75:5D:E0:8F:AD:9C:64:26:79:E5:CE:E4:CD:A2:4F:DC:29
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 01974D45053872035468EFCA5F28F89541CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 02:00:58 +0000
Manifest this update: Sun 08 Jun 2025 02:00:58 +0000
Manifest next update: Mon 09 Jun 2025 02:00:58 +0000
Files and hashes: 1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: 8JEGIl0bkpHj6a0qeNSGOUkMC4hzvZNBNctdwd40kbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:05:38:72:03:54:68:ef:ca:5f:28:f8:95:41:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Jun 8 02:00:58 2025 GMT
Not After : Jun 9 02:00:58 2025 GMT
Subject: CN=ae856c755de08fad9c642679e5cee4cda24fdc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:20:ae:d8:5c:cb:ad:03:5c:c5:d4:66:a5:
d8:35:e6:b1:76:ac:6b:0c:cf:e5:8d:6a:10:b8:fa:
02:a6:5c:e0:01:58:97:49:35:6b:2d:62:2d:5b:43:
9a:68:dd:6c:4f:72:46:fd:70:d8:ae:dc:ce:0d:2d:
38:e9:ba:b2:c3:9e:4e:b0:7f:9a:ad:c3:8e:e8:e4:
63:66:ca:38:9b:76:07:34:10:c5:c7:fc:94:af:d4:
7f:62:67:b0:01:55:09:ca:ad:93:a6:6f:35:2c:9c:
3e:62:96:50:63:3c:5a:a0:4e:05:5a:fd:04:83:46:
c2:2b:3f:b0:be:57:c5:ed:0e:89:6a:76:f9:9d:fe:
94:b5:93:5d:13:a5:9d:dc:e9:82:dd:b9:ff:7d:03:
c7:09:bb:f5:07:8c:6b:79:5f:d5:60:b3:b8:9d:f2:
63:83:a8:e8:e1:19:21:cb:42:dc:e4:42:fb:fd:5f:
4a:ae:d0:10:99:c3:da:83:ca:0d:9f:db:bd:a2:45:
81:8d:19:d2:62:38:fd:33:83:51:1f:c1:83:79:13:
09:58:ea:f3:9f:0f:fc:75:9e:ef:79:ee:ed:ec:ef:
eb:ae:0e:09:69:30:c9:13:17:2b:89:b9:8c:fb:f5:
34:82:36:12:b3:ff:e0:46:55:13:ce:ec:10:5e:94:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:85:6C:75:5D:E0:8F:AD:9C:64:26:79:E5:CE:E4:CD:A2:4F:DC:29
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5e:cf:9f:f9:7c:f5:00:d9:d8:35:78:53:e7:91:d4:5c:40:
15:18:65:4d:69:4c:68:47:29:15:bd:13:5c:54:2c:4b:f5:92:
d0:84:32:1c:40:99:95:e1:0b:b6:55:0a:90:c4:a7:68:11:59:
99:eb:97:6a:7f:f9:da:88:5e:bc:b0:1d:cc:c3:d9:52:82:3e:
0d:3a:85:fb:b8:db:ff:81:8d:26:c5:74:a5:63:95:20:bf:6a:
27:4c:ce:61:6b:17:75:75:90:c9:ef:8a:73:9a:50:fa:64:b5:
40:e9:f3:10:0d:61:f7:a2:97:da:1d:c2:64:26:73:8f:22:32:
b3:21:dc:db:ce:85:a4:47:75:b7:ea:9c:d3:bf:5d:d0:97:12:
13:63:cc:5c:35:22:d7:7d:49:de:9d:11:59:c1:42:fa:ec:a6:
e3:e6:3e:70:0a:1c:45:0d:7c:8b:ce:5c:f9:4f:96:a0:6f:11:
bc:0f:41:f3:2f:bb:39:cf:3b:11:68:80:77:7d:5f:2d:c0:a1:
d7:21:6f:34:20:42:fd:2f:65:6e:e7:c6:63:18:c7:4d:0f:91:
8e:01:39:b8:ae:16:a3:25:c5:80:2f:2c:d6:84:0c:af:8c:6f:
ff:98:1f:f6:9e:de:90:94:4b:dc:05:28:48:da:54:de:e2:99:
fb:9c:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:41:17 2025 by rpki-client