Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: O1oaL1rizIZbF7GnX3KmThqi/kXKU4HT+QMTFCRj5ik=
Subject key identifier: FA:70:80:4A:E2:DC:9F:81:24:8E:7E:C9:75:2F:49:63:40:0C:DF:FA
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 019742F81746E52143316593A249985F0084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 02:00:44 +0000
Manifest this update: Fri 06 Jun 2025 02:00:44 +0000
Manifest next update: Sat 07 Jun 2025 02:00:44 +0000
Files and hashes: 1: PcG8Sq5FdbAe30rm_n_GcaQonsg.roa (hash: Bm8FQyjRUmW9/pGMLb92kJbH7eLAq4FPc7+Cd5r6swA=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: AV/TuuGH473O6g5WBfi9Jp349ZAurQ+0O2k/tjflfPc=)
3: vCyJ_4gbyrukZoytmDIUJKLGPq0.roa (hash: MURqYSpROMIIkoPGoMUJ5DUudVIqQ91/GFdxEyduads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:f8:17:46:e5:21:43:31:65:93:a2:49:98:5f:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Jun 6 02:00:44 2025 GMT
Not After : Jun 7 02:00:44 2025 GMT
Subject: CN=fa70804ae2dc9f81248e7ec9752f4963400cdffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:eb:37:e9:b7:21:9f:29:e4:de:a0:da:c7:
a5:89:5f:77:51:54:48:44:6f:7a:4b:90:b6:25:5b:
fb:8d:ae:99:36:f3:09:b9:4d:0a:df:45:a3:5d:25:
d7:6d:f4:a0:c2:a3:61:21:fc:bd:ef:4d:70:c6:b4:
75:b6:6f:58:63:ca:ac:7c:a0:94:73:ba:f7:54:35:
15:36:70:84:59:b0:33:3b:5a:88:9d:29:61:c8:c0:
3d:de:be:e5:f9:53:73:df:da:1f:7b:38:7a:79:ad:
28:04:40:ad:37:70:65:04:89:27:54:6b:31:3e:1b:
24:d8:69:88:9d:59:c8:74:68:d5:87:4b:9c:27:e7:
28:cc:83:a2:65:89:8b:05:f3:b7:ff:bb:bd:a7:ae:
65:06:89:bc:ef:0e:2e:3d:88:57:a7:cf:f9:bf:57:
2f:7e:f0:fa:c3:2d:8e:c1:66:4e:e2:e9:70:49:6b:
c8:e0:f8:36:35:05:6a:db:06:22:e4:81:71:88:9f:
4e:2c:65:d9:91:70:cc:e6:c5:d1:1a:f0:bb:f3:61:
08:fe:09:3a:45:02:cb:0a:94:f4:d7:b2:cd:f4:11:
ad:8d:0d:3e:80:95:a6:04:57:9e:96:f6:c6:1b:ef:
8a:a2:45:bd:4d:ee:5a:cb:ca:7c:ab:9a:5e:22:a2:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:80:4A:E2:DC:9F:81:24:8E:7E:C9:75:2F:49:63:40:0C:DF:FA
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:52:51:6f:36:d3:e9:1b:7d:34:16:06:67:97:95:24:3b:ab:
fe:07:a4:a5:5e:0c:01:69:9f:bf:45:ee:b2:7d:84:6c:ad:34:
2e:6e:1b:cd:45:6a:4d:7e:16:ec:86:35:85:30:53:06:a6:3b:
20:4d:e9:24:51:22:e3:cb:c6:e4:53:94:de:11:ea:bb:d1:de:
32:87:a3:31:c8:e8:78:54:7f:11:f0:8a:ae:04:17:7a:9f:fd:
60:49:00:49:4c:3a:67:60:e5:31:3c:b7:e9:3d:60:04:79:a0:
09:20:76:c1:c5:15:ac:28:8c:ad:9b:5f:ac:da:c7:7e:90:fb:
d0:10:62:f3:cd:a4:c2:7d:a4:ac:5d:28:7b:e1:7e:df:a5:1f:
ab:2a:60:c3:e5:86:67:fa:65:54:ec:76:b4:26:fe:aa:ba:f5:
f4:3a:8e:20:67:8c:b2:6f:83:01:94:c3:11:b0:52:bd:7e:97:
5b:3f:45:86:2e:44:ba:d9:cc:0b:d7:48:7c:bd:d9:b9:3c:c1:
e2:92:9e:6a:2a:32:20:d5:f7:d5:12:fd:d4:44:27:18:6c:82:
d9:2f:84:66:67:93:45:ca:d5:e1:e0:30:55:69:a4:4d:20:bb:
ec:75:97:9f:19:33:62:f3:a7:6c:ef:dd:a9:8b:29:75:d3:78:
aa:ff:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:35:27 2025 by rpki-client