Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: RueLqgstxzBr9TVKuB70/8JWr7wYde+2jJ1ikR+/GIg=
Subject key identifier: C0:C7:6F:51:E4:29:9C:C9:5C:6E:40:74:AB:D3:3C:68:7F:6D:30:67
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0197507C956CF83F2061B0FD3FC8196CF28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 17:00:31 +0000
Manifest this update: Sun 08 Jun 2025 17:00:31 +0000
Manifest next update: Mon 09 Jun 2025 17:00:31 +0000
Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: eHU0juPPWSOcQ2h/E6s+MVqCaW4IWvNtX/ac6oC1u8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:95:6c:f8:3f:20:61:b0:fd:3f:c8:19:6c:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Jun 8 17:00:31 2025 GMT
Not After : Jun 9 17:00:31 2025 GMT
Subject: CN=c0c76f51e4299cc95c6e4074abd33c687f6d3067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b9:85:dc:3e:ea:13:ce:34:fc:b0:3f:50:de:
0e:42:de:8b:de:e8:ca:6d:45:90:7c:bd:07:ed:91:
de:7b:1f:20:a3:a8:59:e5:88:65:e6:e9:c7:af:dc:
d7:70:59:dc:b4:20:df:12:e7:b3:25:cd:50:c5:ad:
b5:86:3f:39:77:f0:7a:7c:f2:af:ed:07:dd:5a:44:
e6:3a:a7:f6:25:9a:04:d2:3c:a5:af:e3:c3:0f:7b:
3d:c9:ee:32:4c:ba:05:87:16:fc:71:5d:82:19:55:
3c:44:c4:c3:a3:fa:89:1d:6d:f5:88:30:bb:20:7e:
2c:cc:e8:89:2b:de:4e:ec:e9:f1:a8:75:9c:83:93:
5e:6d:d5:b5:e0:73:78:22:e1:f1:2b:61:44:a0:c2:
2f:6e:65:f6:b9:50:d5:04:13:34:d9:7d:ff:dd:3c:
24:46:56:68:9a:c3:9e:7d:53:31:39:83:0d:20:42:
d1:3a:ca:40:98:c2:50:a3:9c:af:80:34:16:8e:bf:
76:f1:d2:1f:d1:c9:11:72:c8:5a:7f:f0:5d:4a:46:
06:fa:58:c5:79:f4:be:c2:aa:f0:42:07:81:1d:3d:
79:76:32:29:ac:9b:78:b2:b3:ec:70:f3:43:66:76:
df:53:55:05:89:b4:46:20:f8:75:de:49:f3:dd:46:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C7:6F:51:E4:29:9C:C9:5C:6E:40:74:AB:D3:3C:68:7F:6D:30:67
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0a:9b:c3:c0:a1:f4:d7:49:b8:b4:7c:1f:72:b3:7f:6c:01:
d6:62:ce:db:32:57:d5:72:67:8e:83:e0:56:79:68:0e:a8:56:
a7:8e:e3:26:11:c9:37:14:d7:b9:41:82:19:d3:e8:9e:79:35:
6f:c1:ce:d4:02:39:f6:ec:a0:00:cd:8d:fb:89:bf:27:fd:47:
53:84:29:d8:7b:bb:52:de:be:1f:1c:57:a7:3f:6f:3c:26:c4:
e6:67:ff:f7:3a:92:f0:67:ad:28:79:e3:eb:81:bc:d1:28:89:
64:68:4a:b9:52:3e:bf:1b:21:72:6d:f0:52:85:1b:56:b5:e2:
9b:de:97:cd:f4:4c:6e:ad:3c:1d:c3:16:b8:2a:01:d6:89:79:
be:79:8c:a2:72:1d:b8:d2:e1:56:bc:54:83:7c:7c:57:8e:ba:
a8:72:52:4f:12:f3:db:bd:ec:25:22:e0:0e:90:49:83:dd:e8:
7d:72:48:5f:24:c9:3a:f8:5e:98:b3:ae:78:33:12:5b:83:c2:
7c:27:c0:6e:fb:65:33:5f:9a:aa:66:b3:b3:36:29:2b:e2:1b:
20:2d:bd:b3:34:e0:0a:5b:ba:f6:9c:6d:db:d5:61:bd:d8:63:
39:08:f4:37:a3:58:9b:e9:25:63:b7:15:c8:af:b7:d5:b3:1a:
ed:12:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:38:39 2025 by rpki-client