Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: O9296AqfsIZ3YBHwK7IBXzg/zYoTZgxmWq+qEl9xIE8=
Subject key identifier: FB:19:96:14:07:7B:1F:8B:4A:39:18:37:98:5E:E7:29:24:BA:0D:AB
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 01974779B2347A2D0438479F09EAFCC2EA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 143A
Signing time: Fri 06 Jun 2025 23:00:47 +0000
Manifest this update: Fri 06 Jun 2025 23:00:47 +0000
Manifest next update: Sat 07 Jun 2025 23:00:47 +0000
Files and hashes: 1: _Cbg2gi_s_VKpTIkG3bEBTZBdxs.roa (hash: B8pai3ZmKLHEPdQUTuODVk/zYN3nOw61AYES66S31Jw=)
2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: 6n2yV2EFeoY9GoMTwFhPz2AhjTUu5FiXuwBmUN6APCc=)
3: iu1uLDkjA2lC4iCmh3mgoTg-ECs.roa (hash: J1M6seCPFdUQmcH1n+B1kmRcatuaeOrkFhV5roQrzQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:b2:34:7a:2d:04:38:47:9f:09:ea:fc:c2:ea:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Jun 6 23:00:47 2025 GMT
Not After : Jun 7 23:00:47 2025 GMT
Subject: CN=fb199614077b1f8b4a391837985ee72924ba0dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:51:cf:c4:f9:eb:6f:d2:85:39:78:6e:87:
7e:56:81:e8:13:52:09:47:d6:68:30:07:0f:9f:68:
d8:f3:2e:a5:d3:77:73:63:d0:83:63:05:f6:2f:32:
d3:80:42:c9:dd:1a:36:b4:6b:80:ff:6e:79:25:10:
87:a8:10:d7:93:28:59:a7:ee:de:91:39:5a:8f:fd:
8a:d7:99:a0:79:69:d9:8d:d9:47:08:39:9e:9e:e9:
51:01:0f:66:a6:b0:79:d7:78:e8:ab:97:04:b8:96:
84:d0:58:38:8a:cb:c0:89:4f:e3:67:c5:3f:5b:c6:
7e:94:e6:97:e9:92:e8:0a:27:46:96:3c:9e:bc:50:
bb:b6:0f:b6:05:c9:2f:bc:65:1f:fd:6f:91:d9:42:
11:68:ca:92:49:04:19:e9:c3:f8:ae:5e:2e:cc:62:
c6:b4:10:5f:84:b7:04:bd:5c:53:be:d5:4d:5c:5a:
b8:a8:85:e1:18:9f:89:d8:dc:24:7c:f8:55:a6:20:
08:6e:36:c1:f7:92:f9:92:13:c3:5e:28:d7:b9:02:
48:49:43:93:cd:b0:40:b2:22:77:20:0d:a7:37:10:
81:d1:46:b2:df:57:b5:98:bd:d8:d7:13:04:6a:1a:
7b:30:ae:82:7f:e4:eb:af:4e:07:a6:03:4b:25:e2:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:96:14:07:7B:1F:8B:4A:39:18:37:98:5E:E7:29:24:BA:0D:AB
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:f0:d0:79:87:8f:69:69:46:f1:a1:82:6b:c7:e3:68:e6:
9c:cd:6e:42:18:f3:d4:8e:d0:fd:fb:1d:0b:67:06:2e:d9:c7:
af:c0:ff:75:60:18:6a:2f:02:a4:37:4f:16:0b:af:1e:74:33:
19:d7:4b:1a:51:1c:53:b0:de:e3:89:55:65:47:ee:ee:ee:aa:
2d:86:c5:76:02:2d:af:99:80:9e:b7:a8:73:99:ee:4f:fc:4a:
cb:2e:ab:e6:9a:71:4f:fe:47:d8:d2:62:03:7f:a7:de:e1:25:
ff:bc:59:f7:45:e9:54:ec:1f:05:c2:6a:dc:19:c5:31:31:0d:
92:5d:68:64:37:0c:95:2f:9e:d0:a1:b5:03:e8:9a:3d:5d:08:
d1:ef:02:52:a0:75:36:f7:75:11:71:e8:c7:a3:bf:d8:e3:04:
ba:8a:80:13:ca:5c:45:8c:42:3c:84:88:83:51:4d:d5:d1:f7:
ad:57:84:ee:ee:d7:9a:69:57:21:4b:3c:b0:23:9d:2f:b4:c7:
7c:2a:6e:3f:c5:60:b9:c6:1a:c5:b2:99:ca:24:29:f3:54:3d:
e0:c6:9b:f3:1d:61:82:61:b1:78:9e:3e:46:f3:57:83:30:f4:
ad:97:9b:9d:88:d3:00:d5:b9:f8:d7:ab:56:94:70:26:b9:db:
ff:2e:87:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:37 2025 by rpki-client