Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: /3AmUX60U40Wlf9vQ+mRi/5wa6MoS0wfSxRDxWL56Mw=
Subject key identifier: E3:57:13:E4:61:16:F7:30:6F:46:B8:53:6B:9A:99:3B:AC:B8:98:BF
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 01975046CA39B192AFB0C50521024B80726C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 158D
Signing time: Sun 08 Jun 2025 16:01:45 +0000
Manifest this update: Sun 08 Jun 2025 16:01:45 +0000
Manifest next update: Mon 09 Jun 2025 16:01:45 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: DCcxTapo5rxqrisRT3M9gJy3rfwnl52ozV97btydqXw=)
2: s5NfBBJCWwkg56h64SxZMZxnlwg.roa (hash: FJxF1xFcRFmlC4MqQuyUXAAPNu/l5AbVFkQWsYjIQ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:ca:39:b1:92:af:b0:c5:05:21:02:4b:80:72:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Jun 8 16:01:45 2025 GMT
Not After : Jun 9 16:01:45 2025 GMT
Subject: CN=e35713e46116f7306f46b8536b9a993bacb898bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:1f:90:8c:59:1c:11:25:73:2d:16:66:dc:
ce:21:4a:ba:2a:8e:1c:9d:f0:cb:4d:fc:3e:d1:85:
01:09:66:9a:d5:8e:75:7a:e7:1e:12:1b:57:3c:b5:
10:62:47:8b:a0:72:b4:3f:5a:c9:3a:67:a3:98:ec:
d0:02:65:19:c4:8f:f7:01:0d:45:d7:3a:ab:97:3f:
76:56:f8:7c:bc:a1:c4:4e:a4:af:e0:eb:3d:71:a0:
8d:d6:52:ee:1d:c7:f3:34:7d:96:93:60:19:be:79:
a7:f3:75:8e:a2:5c:20:c6:af:c2:0a:b4:11:91:22:
de:1f:97:19:ab:80:90:4c:bf:30:50:51:43:bc:94:
77:bd:20:6e:22:3e:8b:08:23:c8:ae:ba:ce:f4:e8:
e7:55:9a:5d:df:92:16:0f:62:6e:04:09:48:59:26:
8a:d3:d7:59:9f:2c:ee:c4:11:f7:63:ee:89:cb:24:
ba:fb:63:cb:22:e2:0c:a0:fd:00:6d:a5:2f:0b:b7:
58:6b:aa:fc:6f:26:6f:2a:c7:91:13:68:41:26:61:
96:cf:c4:4e:ea:ef:05:1e:a1:8a:ac:d9:09:36:7c:
37:75:f4:73:2f:0a:d4:07:a3:84:bc:4f:12:e1:a2:
cb:7a:9b:88:28:a4:06:c6:5b:fa:0f:54:da:5c:96:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:13:E4:61:16:F7:30:6F:46:B8:53:6B:9A:99:3B:AC:B8:98:BF
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:bd:0b:43:4c:38:e0:26:23:39:7d:e8:9e:d6:b4:62:c4:63:
75:e3:28:cb:a7:2c:fa:7d:b8:12:f6:33:66:4a:0b:89:3b:3f:
18:18:4d:0b:c4:27:7c:d7:69:20:20:43:49:96:0b:fd:47:07:
36:c4:b8:4d:92:97:c0:a4:a0:3b:17:d7:2f:60:a7:6c:fa:a6:
b1:eb:8f:b1:bd:c0:2a:8a:e0:1c:06:93:63:0a:58:1d:be:92:
d5:5f:2e:de:3c:93:d7:d6:07:23:00:e2:c1:91:f9:f6:bc:22:
27:1d:a4:00:b2:5c:91:e1:94:40:7f:06:1e:e8:6a:21:21:60:
97:e6:61:88:7c:d2:56:1a:5b:dc:63:f7:11:df:0f:5d:ba:e9:
b7:c9:b9:a5:ff:f2:27:e1:b2:f7:40:bc:e4:b8:e2:b8:b0:81:
02:b7:30:ff:4d:c4:7d:05:64:27:f6:a8:f9:e8:ab:1c:1b:e5:
88:66:9c:7f:3e:3c:ee:31:8c:cf:be:d6:d2:26:9e:77:27:1a:
15:71:f7:68:83:52:f0:74:e9:ff:0d:00:a4:bd:9a:75:4c:58:
b6:b8:f0:ac:ae:10:6f:8c:dd:05:b9:d0:18:3e:0c:40:c6:13:
b5:85:fa:7c:20:49:bd:fe:fd:c7:bc:a7:27:07:73:5d:3c:de:
5f:26:6f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:07 2025 by rpki-client