Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: JfWdN/KGbL9dLsUjZGEX+DRrR+9vBybyzNG5CqB1o2A=
Subject key identifier: BF:11:F2:CD:CA:8C:4F:7B:E2:93:DC:4E:7C:A9:17:4A:FF:91:00:E4
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 01974E8E65D3148D349C734E976868234372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 06DA
Signing time: Sun 08 Jun 2025 08:00:44 +0000
Manifest this update: Sun 08 Jun 2025 08:00:44 +0000
Manifest next update: Mon 09 Jun 2025 08:00:44 +0000
Files and hashes: 1: U15Qt1jB_OrSJnk2-GsuZxl_HGg.roa (hash: ViBEGhLSRDySzjvRDBVQx2K1SB4Zl4Aix1chhJ6C9AM=)
2: gHPWHyifWHwygl6RXc-S_BViAv0.roa (hash: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: RpUFlS0JutU11D+49etMfZE208qT2B0D4XndZzsL7V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:65:d3:14:8d:34:9c:73:4e:97:68:68:23:43:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Jun 8 08:00:44 2025 GMT
Not After : Jun 9 08:00:44 2025 GMT
Subject: CN=bf11f2cdca8c4f7be293dc4e7ca9174aff9100e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:17:ab:ae:12:83:ac:79:06:22:97:a2:af:
43:f2:4f:c7:c6:0f:cc:34:99:83:51:42:86:f7:c8:
87:89:a1:8d:a6:65:87:87:08:7b:4a:e4:4f:28:76:
d5:8e:a5:bf:3e:da:d6:9c:51:9a:24:87:ca:56:c2:
80:73:65:4a:35:db:6f:b9:0c:3e:c0:58:eb:7b:5f:
8d:52:46:72:92:99:23:84:c7:7b:1e:b7:9c:e3:5d:
1b:0d:ef:b0:61:3a:fd:ec:3d:b5:e4:f7:19:0d:21:
1c:9c:14:c8:a6:f3:9b:7b:fb:ef:7b:67:22:e5:a2:
0f:71:6f:8c:24:f2:30:b3:8d:ec:1c:30:93:19:b7:
77:79:8f:f5:c5:35:ed:0b:fc:6b:5e:e6:ef:b0:67:
fd:99:32:12:84:0e:82:5f:6e:5f:b1:f0:38:37:b6:
fb:0c:fa:07:76:34:62:bb:c5:b3:5a:b0:a7:65:e8:
dc:56:97:26:ce:2a:69:80:6f:33:aa:c5:3f:ae:fd:
26:0a:cc:cf:45:d1:f1:1a:51:19:8e:f0:89:4a:e1:
53:2d:92:70:d8:07:55:12:7d:7b:9d:dd:8b:fd:e6:
6c:34:89:99:a5:dc:90:be:ea:79:31:52:fa:c1:01:
b3:d0:bb:d3:04:df:26:18:db:d4:6b:ed:f0:eb:66:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:11:F2:CD:CA:8C:4F:7B:E2:93:DC:4E:7C:A9:17:4A:FF:91:00:E4
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:67:b8:9a:68:62:a6:51:3c:75:27:e0:4e:42:33:08:e7:c6:
24:6a:b9:c8:58:75:9f:84:a8:75:f7:a3:29:6e:f7:a6:53:c6:
c3:04:4e:4a:f6:d5:a1:33:71:e9:93:be:d6:3a:fe:d2:28:0b:
dd:1c:02:02:8a:f8:f6:6f:50:4f:2f:59:59:22:33:e7:a0:1b:
19:0d:32:24:ab:9c:18:85:d8:67:2e:1e:ee:38:72:4a:d6:85:
b5:a1:7e:01:35:23:db:ad:11:c5:d0:b3:4d:36:a0:c6:cd:c3:
d0:d0:dc:df:e3:ce:c6:c3:b3:5c:d6:ae:8f:98:67:d6:4a:d1:
19:5d:9f:3b:b5:29:40:45:ef:85:d5:d7:15:89:68:2e:4c:88:
fc:71:1e:85:ad:26:6e:0b:c1:44:4f:cc:b5:5c:41:91:eb:8e:
e3:d5:22:64:e9:a3:3c:21:b6:54:db:da:98:f8:26:19:ca:58:
09:68:06:f7:99:94:dd:92:16:37:f3:4b:eb:79:20:f5:5e:a7:
89:fb:5b:13:c7:8d:2f:63:e1:a6:a8:1d:d5:8e:46:17:d7:c4:
9e:20:4a:61:11:ee:1b:bc:d5:f3:a5:ec:42:aa:85:31:a7:89:
db:c4:9a:00:cd:87:6a:fc:5a:6b:1f:1f:02:c9:36:10:61:c8:
e1:68:1f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:49:34 2025 by rpki-client