Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: YckB2ga/t8Jl0+YkrBnW21d/sOHCuZzEWyOMYsxmmTY=
Subject key identifier: 57:9F:9B:98:89:6B:84:A2:F1:EC:77:A7:EF:A2:84:D1:70:EE:D8:00
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 0197481E532B71D15CA49D354F72B9EC1907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0656
Signing time: Sat 07 Jun 2025 02:00:36 +0000
Manifest this update: Sat 07 Jun 2025 02:00:36 +0000
Manifest next update: Sun 08 Jun 2025 02:00:36 +0000
Files and hashes: 1: 5lbTUO-rP5txsV_jlKv3vzS10Vc.roa (hash: VgScyBVTOIb/scuSoZmb+259XQHu/6r7pBA0Gc4Wdqs=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: 9A4Az4PL4u3DjvosSATSeHtv6hYpuFV0yhG+l0HwGMA=)
3: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (hash: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=)
4: TdRFPSiE6z0QGX9lW2WUDs-qrvc.roa (hash: uIOA5ClG5A+YjWezToN8AYQViV6aWN3VOQLxA91W/R8=)
5: W9jLQPfJ-gf7W45fE6xy024pvso.roa (hash: myRMJIwFBs9jjITp4SZwdlJzPIPHFfsrLal6I49sinM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:53:2b:71:d1:5c:a4:9d:35:4f:72:b9:ec:19:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jun 7 02:00:36 2025 GMT
Not After : Jun 8 02:00:36 2025 GMT
Subject: CN=579f9b98896b84a2f1ec77a7efa284d170eed800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:ea:4b:3f:cf:20:24:9d:55:bc:12:12:fa:
68:b9:42:bf:31:9d:27:8f:f2:83:1a:37:35:c2:94:
42:82:c3:b6:5c:c2:0e:59:99:00:19:05:17:c4:92:
f2:eb:96:2f:14:e1:eb:cc:01:1c:fe:cc:f5:0e:f4:
b3:12:81:6b:aa:be:3c:aa:72:52:df:1b:c8:9a:be:
17:dd:a1:f5:02:c6:5e:a7:ba:db:ea:26:13:63:84:
33:e5:41:33:a5:67:91:6d:0f:7c:25:0b:70:08:80:
a0:5c:d0:d0:2f:61:85:22:2b:6c:99:e9:27:81:9d:
2e:4c:b1:47:cf:30:33:1f:d9:25:fb:bc:27:dc:fe:
35:8d:81:ed:f3:7f:b2:11:da:62:dc:4c:6e:26:9e:
fa:fa:1d:7b:99:68:62:05:8d:8e:74:10:91:4b:1d:
ae:5a:68:bf:97:b4:0c:c2:3d:59:22:ad:7a:a7:7a:
a4:6c:99:b7:43:25:42:42:54:5c:48:a4:73:e0:29:
1b:59:dd:c5:8e:90:5a:bc:1a:c9:0d:2b:b1:57:aa:
71:95:3d:77:11:b5:47:b0:49:1d:8a:6a:2c:27:35:
c2:48:d9:3f:22:0b:7c:2b:24:85:86:f7:b2:75:24:
03:3e:59:13:19:a5:89:5a:e8:c9:fd:a6:73:65:6d:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:9B:98:89:6B:84:A2:F1:EC:77:A7:EF:A2:84:D1:70:EE:D8:00
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e6:42:e9:27:2a:76:78:b0:03:ac:94:11:19:c5:b9:b2:8e:
67:21:f6:e7:cd:7f:6f:a7:e5:33:4a:4b:a3:57:d9:50:94:f8:
d0:fa:66:89:09:43:4d:45:e8:28:65:90:07:76:c2:c4:78:8a:
a6:d8:83:0b:96:ef:65:1e:b1:de:fd:11:0d:c0:89:e7:11:89:
35:9d:b9:3c:bc:5b:c1:0b:71:a2:60:89:16:e0:58:c9:8c:46:
25:f2:e1:f2:0f:24:a2:99:13:e2:00:1d:c2:d6:9a:09:00:5c:
ad:fa:49:e3:ef:5f:c8:ce:45:b0:67:4a:60:9d:fc:69:60:ef:
9c:4d:cd:66:30:4d:ac:62:93:71:21:1e:0d:71:b2:02:05:b1:
c4:84:b0:12:7c:14:8d:06:ee:a6:09:9f:e7:08:57:c0:59:9f:
4c:f0:cf:9a:9f:49:44:4b:68:33:0b:73:6d:61:39:df:12:62:
24:a7:51:e5:da:24:f8:33:f3:47:d7:bd:6a:eb:80:f0:9f:e8:
57:d0:2f:45:c7:d4:04:0e:40:ec:c2:fe:5e:6a:4f:da:a1:96:
19:e4:65:81:c7:13:51:b8:a0:2f:bb:f9:1f:02:2f:49:d8:fd:
ce:b0:f9:a5:7d:68:d6:42:c2:a4:8e:b3:8d:f8:82:31:94:0e:
9b:ae:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:53:31 2025 by rpki-client