Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: D5VlgiIefvMK1sm+epAkr5mNGUeztaYALzNoxXbhdL8=
Subject key identifier: C2:A3:06:E9:4D:87:B0:21:2C:FD:D4:7E:0C:20:FC:82:FB:41:D3:4B
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 01975158888CFD2E1FF376165E3C7C5036D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 21:00:45 +0000
Manifest this update: Sun 08 Jun 2025 21:00:45 +0000
Manifest next update: Mon 09 Jun 2025 21:00:45 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: VADA1/4hNhbjY6GuHC5o8c0gkr1hNQP5kq4vB4EESyE=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:88:8c:fd:2e:1f:f3:76:16:5e:3c:7c:50:36:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jun 8 21:00:45 2025 GMT
Not After : Jun 9 21:00:45 2025 GMT
Subject: CN=c2a306e94d87b0212cfdd47e0c20fc82fb41d34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:53:11:21:9e:9a:fb:27:a3:36:02:3e:3c:
67:db:07:9f:78:08:bc:73:1f:b8:0e:22:36:70:d9:
0f:bc:ca:cb:49:6d:0e:61:96:74:39:33:a0:75:de:
ec:59:99:b8:30:dd:b3:93:42:0b:b2:3b:4a:69:77:
00:37:3c:69:a0:3a:d1:bb:92:c7:2b:e1:51:1e:8d:
11:a5:e7:26:8d:73:7b:a4:c4:74:eb:81:8a:07:9d:
76:e1:a7:3e:d7:d0:2e:af:de:53:2b:3d:9c:4b:83:
90:c3:13:54:5f:fa:c4:b5:7f:93:2d:fb:5b:af:8d:
05:49:2e:42:94:9d:35:8e:19:5f:fd:d2:b6:87:a6:
73:af:c9:5c:b9:19:1f:4b:c5:df:a9:da:29:75:87:
2e:ef:4f:50:88:91:69:6f:fc:a8:f0:75:49:bc:f5:
40:27:3c:bc:78:2f:83:67:84:08:43:25:31:3e:2b:
b8:ba:36:a6:25:4c:ac:f7:1e:77:84:8b:61:05:af:
5d:3b:48:26:c6:1d:7f:dc:eb:42:3c:6f:c3:62:27:
71:a9:54:06:b6:99:12:cb:94:70:28:ae:eb:ea:d8:
b1:d7:f4:33:9a:45:86:88:08:b5:0f:7a:91:e0:af:
ed:b7:25:1d:fc:9e:59:77:7c:f2:ec:80:01:ee:e5:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:06:E9:4D:87:B0:21:2C:FD:D4:7E:0C:20:FC:82:FB:41:D3:4B
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fb:95:57:ce:72:ed:18:65:77:9b:e1:bb:ed:f9:fc:ae:af:
f4:7d:a4:8e:63:91:7d:ac:80:98:ee:ec:40:de:84:ef:f3:64:
00:45:fa:af:35:b6:d8:e9:de:21:d5:7e:4c:89:70:3d:35:52:
b0:54:3b:28:92:ba:8e:a9:c6:21:5e:74:41:79:d9:50:13:9b:
f7:fe:72:60:fb:8a:4c:93:dd:3b:53:e9:3e:2b:0e:20:02:bd:
76:cd:c6:88:3e:c7:53:02:80:cb:a8:96:bd:59:ba:2c:a2:90:
5f:48:0d:4f:ea:86:c3:6c:d1:0d:cc:ed:f4:55:68:c4:e2:53:
8a:21:1f:05:88:4d:82:be:34:af:65:70:23:94:cf:62:d0:69:
d7:f0:f0:79:7d:ab:9a:17:de:02:0a:37:48:ea:e7:ef:bd:3e:
3d:c4:8b:94:c4:2d:15:41:e9:c8:ab:66:b2:26:ee:e0:e0:c6:
f1:48:bc:6c:f2:b8:25:5b:7c:99:71:c8:dd:e1:83:e2:e4:7b:
00:d0:49:df:ba:12:ca:f7:32:ed:85:4e:01:1d:66:78:4e:1f:
14:9c:ca:5b:92:dd:49:9e:e5:88:de:11:67:79:2c:a9:97:62:
80:62:6e:d6:48:59:2a:23:56:42:e2:7a:42:da:4d:62:26:54:
e0:a7:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:15 2025 by rpki-client