Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: h7+rauI2owpMO6ReAiVFllGbebETUs6R+2aSrCVxZWY=
Subject key identifier: F3:02:E8:90:43:55:12:38:EB:A2:FF:EE:76:D7:A2:5E:EA:2A:FB:FE
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 01974D0DCBC464572130C1747EFD799CCDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 011E
Signing time: Sun 08 Jun 2025 01:00:39 +0000
Manifest this update: Sun 08 Jun 2025 01:00:39 +0000
Manifest next update: Mon 09 Jun 2025 01:00:39 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: dAlOv37zQJr6SeBIJJueOTm+iA/Tje/wbfB/tCyFJyY=)
2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:cb:c4:64:57:21:30:c1:74:7e:fd:79:9c:cd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Jun 8 01:00:39 2025 GMT
Not After : Jun 9 01:00:39 2025 GMT
Subject: CN=f302e89043551238eba2ffee76d7a25eea2afbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:ce:26:df:b8:37:00:0c:35:8a:93:47:f6:
f0:87:50:11:2f:cd:7e:f7:01:5d:74:6e:65:20:f6:
79:38:9f:88:ca:32:64:06:27:74:50:5c:f9:94:7e:
54:f2:b6:cf:e8:8f:67:a1:92:27:08:fa:8b:37:57:
4f:e5:dd:c7:70:dc:e7:5b:28:d8:fa:64:86:d7:35:
c8:b0:c2:dd:a6:98:81:94:aa:d6:76:29:31:51:90:
71:5a:26:36:3a:8f:64:a5:87:ff:3e:9a:62:45:61:
b9:b4:ea:f6:ba:d4:55:63:96:c6:0e:29:ce:4d:1b:
be:45:ef:95:5c:9b:a2:4f:12:8c:b2:71:1c:8e:a7:
ae:48:c9:d3:02:8c:fa:98:df:47:01:e5:c3:1a:93:
af:9b:08:af:96:d1:b0:81:81:c3:a5:3d:d7:9e:c2:
7e:c9:38:1e:65:13:9a:5d:81:44:44:2b:75:98:63:
13:3b:e0:a6:50:72:7f:3b:f7:7a:98:ac:28:0c:3f:
fc:47:b0:ca:db:f3:e9:4c:f1:2b:17:5b:3b:07:e0:
d1:d6:68:90:9a:15:05:d2:19:09:c1:04:66:69:eb:
de:6a:52:00:ea:4c:07:69:aa:a9:c2:b4:6d:a9:5a:
1a:eb:27:fa:06:32:4e:0b:61:2d:2c:48:4f:bd:ec:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:02:E8:90:43:55:12:38:EB:A2:FF:EE:76:D7:A2:5E:EA:2A:FB:FE
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:95:18:9f:ed:58:e5:c9:b5:e0:c2:04:62:bf:07:7f:ba:b4:
bd:d4:3a:7c:36:d7:c7:bd:31:15:b4:cb:87:59:53:59:3e:53:
52:ab:5d:65:41:d6:37:91:08:ee:f8:90:67:b3:50:27:14:65:
c2:fc:71:81:7b:e9:81:d6:45:9a:9c:27:d9:c4:6f:aa:ff:01:
33:47:8c:ec:f5:f5:ac:e0:c0:31:73:27:c2:80:4a:dc:cf:bc:
0d:4c:e6:2c:ff:34:3d:7b:55:61:8a:8d:12:39:53:f6:5f:fc:
e9:88:e2:48:18:31:15:e4:9a:5f:b0:5d:2b:87:f6:b8:02:1f:
e3:9c:7c:7c:b3:81:f6:7f:70:c7:20:7e:ef:61:60:28:23:e3:
e1:c8:ee:42:59:ea:05:0b:e8:49:9e:9a:15:0d:5f:1b:60:23:
7e:ea:5f:af:80:46:9b:eb:9c:bb:ab:1f:a9:45:c9:28:75:6d:
f1:0d:e6:f2:99:54:3b:f0:1a:53:4d:6e:29:72:b4:3d:6b:99:
29:a3:4e:ee:65:d2:e1:4e:a3:06:26:86:3c:a7:71:dc:9b:09:
a7:9f:bd:4d:7f:50:fe:2b:52:12:d9:e2:7c:d9:9d:58:91:a4:
d7:57:9e:31:e9:ae:52:cc:60:f4:86:f7:07:45:4f:6b:28:9c:
d5:f5:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:23 2025 by rpki-client