Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: +wT4Y6vxyLWXFpTY5UggeU5sy9iosO4iDa0g5NYqK5s=
Subject key identifier: B6:CD:8A:86:67:43:AB:1B:0A:3B:D0:43:D9:2B:B2:93:D7:6A:AE:7D
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 01974B1F600E73777C36EE9AF5B106346899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 0121
Signing time: Sat 07 Jun 2025 16:00:36 +0000
Manifest this update: Sat 07 Jun 2025 16:00:36 +0000
Manifest next update: Sun 08 Jun 2025 16:00:36 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: wj9puRx36UcaB1PNhpOZLSJf00M4q5+bNaGGrMz81cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:60:0e:73:77:7c:36:ee:9a:f5:b1:06:34:68:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Jun 7 16:00:36 2025 GMT
Not After : Jun 8 16:00:36 2025 GMT
Subject: CN=b6cd8a866743ab1b0a3bd043d92bb293d76aae7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:7b:f4:31:71:e6:90:73:89:a7:34:ec:7f:
6d:63:97:2c:95:75:f2:06:56:d1:56:8d:6b:ec:59:
2d:f6:21:19:50:cb:a5:fe:b5:43:1c:40:41:e6:34:
6d:01:65:67:5c:1f:0d:e1:48:da:21:61:fa:ad:b0:
5c:07:20:5a:5f:f9:60:1b:32:d8:12:ff:7e:f3:9b:
93:20:c8:8b:14:ab:4a:33:62:b4:b4:26:8a:d8:dc:
4f:6b:ae:ec:e5:f0:cb:95:ea:82:d5:55:04:e5:80:
78:5f:88:4e:af:ec:9d:9f:4d:1d:5e:56:07:c7:e6:
be:e7:d6:27:5a:6f:0b:0b:81:3b:5e:38:52:0a:a5:
84:04:01:97:69:6f:b3:ac:d8:f4:26:11:e9:c8:c4:
8e:38:04:1f:c7:ba:fe:f6:1b:5d:89:9b:f4:9b:ca:
d9:d0:e6:ab:14:b7:7c:a1:e8:dd:39:db:67:02:76:
cd:c7:4e:58:b1:fd:51:6e:5e:df:4e:d7:3b:d3:21:
f0:5a:27:8d:b3:f5:49:f8:8a:a9:9b:29:9e:17:c9:
3f:a7:e5:90:e1:98:19:89:16:74:0a:fb:70:66:01:
a7:38:72:a2:7b:23:1b:a7:a3:c5:bd:05:1c:3a:e3:
96:78:b4:b4:22:6c:ed:ea:eb:0c:13:10:3b:80:35:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:8A:86:67:43:AB:1B:0A:3B:D0:43:D9:2B:B2:93:D7:6A:AE:7D
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d8:c6:be:70:3c:ba:8b:19:94:d8:0f:d5:6b:9c:91:3a:d9:
7b:24:24:df:12:70:6c:9b:cb:6c:ff:4b:c8:88:a5:57:f9:3c:
f2:ed:d6:c6:15:0a:bc:0d:fc:65:92:27:ef:61:9c:fa:d2:01:
dc:ba:94:94:52:d8:4f:f4:63:fc:95:34:67:f6:3e:50:63:e1:
7f:ff:eb:63:19:88:fc:b1:df:3d:e5:de:05:7a:a3:71:24:16:
89:5f:20:57:13:5a:e8:92:99:e2:15:62:fd:01:c3:99:cf:75:
5d:30:62:56:d1:4d:3a:cf:b7:ab:22:54:5c:77:13:c8:da:4f:
7b:c9:8a:b7:63:75:10:68:12:22:f1:7e:ea:c2:f1:78:e0:19:
e2:0a:07:1b:83:41:a0:b3:eb:ec:65:e7:41:82:b6:fa:bd:59:
a9:07:69:61:e0:ca:94:a9:56:9d:5d:7f:c8:98:d6:8a:53:ba:
f7:ee:0b:47:8a:8e:d4:cc:c1:a5:b2:df:b1:3e:12:9e:8a:fd:
cd:17:f4:d0:4a:a1:1d:c7:30:84:a6:60:a4:6c:bd:69:e9:9f:
31:84:ec:92:e9:c1:f8:10:f3:fb:22:11:48:dd:a9:e7:d6:9e:
95:31:01:78:14:e1:5a:bf:c0:e9:32:7d:79:b9:33:e0:29:5e:
a6:02:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:06 2025 by rpki-client