Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: 5V9pHwP32LQKTqX1i58riKNoP+HuZ/LviPjGXqUZuA4=
Subject key identifier: BC:CB:CC:FA:7F:14:62:45:E9:9E:EB:FF:0F:AD:F1:5C:0E:B0:09:DC
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 019748C3014AF89E2D1A77AFD87C672AF7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 123C
Signing time: Sat 07 Jun 2025 05:00:28 +0000
Manifest this update: Sat 07 Jun 2025 05:00:28 +0000
Manifest next update: Sun 08 Jun 2025 05:00:28 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: giM3xm08o3j2StW7Sp78vTFOVgyDNjBRdHvk5JPynLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:01:4a:f8:9e:2d:1a:77:af:d8:7c:67:2a:f7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Jun 7 05:00:28 2025 GMT
Not After : Jun 8 05:00:28 2025 GMT
Subject: CN=bccbccfa7f146245e99eebff0fadf15c0eb009dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:08:c2:51:f6:59:3d:b6:1e:6a:99:2e:da:
55:b5:14:f7:a8:59:9f:56:e5:4e:4b:b2:13:2f:f7:
06:73:28:0d:4b:85:f9:9a:c7:e8:57:0f:6d:49:7e:
26:de:f6:c6:88:4e:e3:38:a4:12:69:16:9b:7d:d4:
6e:49:fd:76:2e:e8:b1:69:d6:f0:a2:7d:db:4d:42:
ef:66:a0:af:10:c9:12:78:81:7a:98:ad:04:8c:77:
60:f4:76:84:c0:c5:20:46:a9:c1:db:51:99:ab:51:
05:90:c2:00:33:e2:6c:b4:fa:63:18:10:f6:16:bd:
3c:85:3c:78:f6:c4:4c:11:e5:52:39:8f:58:9e:f6:
9c:a4:be:60:de:3f:db:21:9e:49:4a:18:48:53:0a:
7e:04:98:80:50:db:de:4e:19:d0:5a:1f:0a:bc:eb:
ac:a5:33:f3:7c:83:32:7c:e5:ae:ac:44:bf:e0:eb:
37:3c:89:37:cd:4b:1b:9a:04:67:9f:b3:fe:41:5c:
84:ac:32:e3:83:54:04:01:9c:6d:5b:8d:6f:28:ab:
79:b2:40:05:09:8a:ea:3f:08:ea:46:a5:02:56:9c:
f4:08:8b:4c:1b:e1:e3:93:61:8a:e4:6b:3f:9a:fb:
f5:50:d2:8a:78:4c:b3:b5:0a:ef:ae:9a:27:d1:91:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CB:CC:FA:7F:14:62:45:E9:9E:EB:FF:0F:AD:F1:5C:0E:B0:09:DC
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ee:57:e4:f6:10:c0:97:e1:c8:38:90:87:4e:c7:94:c6:af:
1f:27:18:bd:0e:eb:94:07:e4:59:ce:a6:e6:57:7e:1a:da:60:
0d:34:3a:52:a3:0b:46:fb:ac:8a:c3:39:58:2e:2d:bd:4b:2a:
01:bf:18:2d:fc:e5:dd:e4:2e:d2:d8:ff:82:d8:29:06:d4:1e:
91:10:53:91:87:cc:88:de:10:ed:99:3e:b9:25:cc:e3:7d:e2:
26:b0:75:4c:da:7d:f3:c2:3b:89:2a:96:ba:67:dc:b4:68:90:
85:a6:2d:91:53:a2:3c:8d:1b:71:d2:9c:c9:a5:2a:fe:18:5a:
0f:8a:eb:f9:61:37:bb:ef:d0:6d:71:bb:c5:72:60:90:23:44:
3c:a5:bb:98:c7:67:6b:55:7b:e9:0b:e3:ad:a0:77:fd:b7:70:
42:95:0e:de:d0:aa:e9:8d:fb:ba:bc:bc:7d:9e:1e:59:b0:9b:
0e:9f:85:98:a0:91:d6:70:95:90:d9:2a:29:52:02:17:97:0d:
bb:81:24:a7:0c:28:8e:a0:42:75:c8:03:8d:c6:75:f7:7c:77:
bf:34:2a:f4:03:1c:ed:94:0f:c7:f9:ad:20:fd:62:75:cc:4c:
b8:d9:91:9e:26:99:6c:22:0c:74:9c:1b:89:fa:ec:06:25:48:
47:0b:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:29 2025 by rpki-client