Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: 6f30to3MLSo+qkPhihk3p5hHweZrqmLHSo2Qvsy70OA=
Subject key identifier: E3:BF:CC:30:64:F9:D2:C8:4B:90:F8:84:CF:8A:F2:5B:7F:BC:B8:EA
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 01974FA10013BCD7407D1A523BAF1A7B1869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 13:00:40 +0000
Manifest this update: Sun 08 Jun 2025 13:00:40 +0000
Manifest next update: Mon 09 Jun 2025 13:00:40 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: 0rFHIyKHbHbTwM6/D+oG9JCOeAqB6kzZZqjuGfw9wNc=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:00:13:bc:d7:40:7d:1a:52:3b:af:1a:7b:18:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Jun 8 13:00:40 2025 GMT
Not After : Jun 9 13:00:40 2025 GMT
Subject: CN=e3bfcc3064f9d2c84b90f884cf8af25b7fbcb8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:27:0f:63:ab:5c:b1:aa:14:0b:69:c0:23:
4c:24:61:bf:0e:ef:48:7c:12:77:a6:be:52:a1:b4:
fd:19:89:45:29:db:5e:02:96:87:c9:3b:b5:91:b5:
4b:00:d5:e3:02:c5:58:89:09:ab:c2:72:64:cf:a8:
2d:ef:47:1e:1e:f3:2d:c4:f4:6b:c1:f0:58:02:08:
8d:69:76:8e:b6:3b:6d:9e:40:29:5b:d6:ce:f7:3b:
15:16:9d:0d:e9:9c:50:15:8e:cd:c1:14:f5:8d:43:
dc:42:c4:68:f8:09:6a:4c:89:0b:d6:04:64:2a:6b:
23:fb:74:71:34:1c:6c:55:31:0a:97:42:f2:64:70:
15:de:e0:97:0d:3b:0b:01:5d:3a:06:28:20:0c:6b:
82:43:d0:4f:43:eb:8d:e7:90:e7:d2:0c:56:9e:d1:
7f:e9:d7:3e:d9:ef:f8:e5:c6:7a:9a:da:f0:75:f0:
f3:8f:0d:ae:34:0c:a2:23:6a:e8:5c:39:b3:4d:71:
95:9f:f9:ea:d0:9b:7c:cd:c9:43:90:24:5d:29:a6:
2d:4a:f9:46:48:68:a3:ea:31:f9:f2:33:84:d2:bb:
2a:12:b2:e2:fa:79:1e:e0:52:77:e8:a4:a0:fe:8d:
3d:50:f9:dc:e9:81:b9:c5:60:2b:d2:8d:ff:a8:ed:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BF:CC:30:64:F9:D2:C8:4B:90:F8:84:CF:8A:F2:5B:7F:BC:B8:EA
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:27:4e:5f:7a:b2:28:c4:ee:53:b8:d9:1a:57:1e:11:26:4a:
c8:be:0d:43:ae:a7:14:7a:ce:5b:ae:0d:6b:06:7c:53:1e:67:
81:d1:d9:27:27:df:89:2b:09:1f:a6:c0:99:fe:09:18:bf:44:
91:0f:ed:ca:20:d0:6f:28:64:d2:0b:78:0b:69:b4:d0:50:1c:
44:76:38:22:07:77:44:23:a4:62:5a:06:16:16:75:c5:c3:37:
a7:aa:23:b8:38:14:ab:75:1d:31:8c:91:cf:28:a2:90:44:30:
27:77:6f:66:c0:a3:d7:a0:fb:7b:20:61:40:e4:66:90:7b:4d:
b0:36:a8:77:6e:25:01:3a:f3:fc:21:79:e9:96:86:a2:21:16:
03:20:90:ab:96:27:2b:9a:2d:1e:ff:b7:91:37:53:b1:94:71:
49:6c:a6:55:b1:17:01:ac:21:0f:78:d6:68:70:e5:ce:78:3d:
ae:e1:3e:c3:8c:c8:32:fb:53:19:e4:74:75:79:0f:88:65:35:
25:93:e2:30:d3:89:4d:63:af:6e:ef:57:9f:00:57:69:5f:64:
71:c3:17:8c:35:d0:63:fb:d6:4f:17:7e:e2:7a:71:84:d0:e7:
3d:bc:ec:4d:d2:72:ff:87:98:da:45:ba:c7:4d:79:2a:19:8f:
cd:ab:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:14:12 2025 by rpki-client