Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: pn0oHSsyPZCp+rS38pPvc8tHMRCluEx5+FqZcZaIL5U=
Subject key identifier: 41:5C:56:98:4A:D3:0A:11:66:E5:63:54:F0:3D:E7:B1:DE:B8:7F:1A
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 019757C8563C9E453300CC5BAB80398A4092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 11A8
Signing time: Tue 10 Jun 2025 03:00:36 +0000
Manifest this update: Tue 10 Jun 2025 03:00:36 +0000
Manifest next update: Wed 11 Jun 2025 03:00:36 +0000
Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: uq14CH18ItODdP+WWu53zUkWbQkAKbkGS5EdF0Q5bvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:56:3c:9e:45:33:00:cc:5b:ab:80:39:8a:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Jun 10 03:00:36 2025 GMT
Not After : Jun 11 03:00:36 2025 GMT
Subject: CN=415c56984ad30a1166e56354f03de7b1deb87f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:f8:07:4d:ed:21:8c:6d:4e:b5:6a:45:a9:
dd:b5:65:e5:7f:15:b8:60:95:31:7f:25:d8:bd:5f:
b8:c1:b9:59:0f:ac:46:b9:d6:5a:2b:39:19:34:06:
bd:fa:2e:f3:2b:fe:3f:e9:1c:bb:5d:e4:75:0a:c2:
01:e3:7c:41:e5:f2:33:d7:fa:dd:b6:bc:c7:70:54:
d3:fe:4e:ea:84:ad:0c:9d:aa:33:91:55:5a:cc:3d:
51:88:08:04:6f:98:d6:f0:ea:7e:2d:58:48:ea:2a:
84:d6:71:fa:8e:5a:92:f4:91:ef:f6:cb:85:bf:fe:
70:07:71:62:97:c8:01:45:09:dc:44:48:70:7b:ae:
7e:55:26:22:42:10:0a:3a:24:f1:98:c7:1f:e1:10:
e9:2a:6e:19:d0:22:24:70:d4:4a:c6:da:89:a0:be:
51:2e:8c:52:58:2e:9e:d7:67:16:15:b8:72:b7:b0:
e4:df:c7:51:7a:98:40:b1:84:37:26:0f:73:98:7d:
23:91:03:88:ac:22:c9:4d:cf:8c:8d:6e:e1:5b:da:
87:e5:67:2f:79:ec:bd:59:07:d4:d0:27:33:9f:b9:
a8:8a:43:30:57:97:a4:97:81:df:cd:a9:68:68:05:
9e:89:ce:28:b5:11:5d:7f:13:ba:e5:e2:c5:18:54:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5C:56:98:4A:D3:0A:11:66:E5:63:54:F0:3D:E7:B1:DE:B8:7F:1A
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a6:87:b1:ee:06:ce:51:c8:c1:5b:0c:1a:6f:fa:a4:f0:5d:
43:f5:41:59:98:ba:46:9a:9d:8f:3a:b3:c6:27:2e:d9:3e:0f:
c7:28:ff:2d:f3:cf:8f:d3:01:88:84:fc:a1:fb:af:02:ea:89:
78:9f:d0:31:30:b2:56:5b:38:99:3e:00:58:ab:a0:84:8a:8a:
83:bf:01:11:43:e7:0f:ee:02:11:a1:a1:85:e5:c8:3f:24:7e:
f9:6a:f2:1f:8c:ea:bd:05:e2:59:bf:2b:87:9c:f6:fe:02:8e:
b1:13:2a:d5:f4:58:61:34:13:3b:68:92:f5:7a:38:e7:91:69:
92:28:c0:97:58:98:3a:13:ef:b2:4c:85:1c:4a:29:30:bb:fd:
ab:67:b9:e3:bd:42:aa:16:ef:d9:a8:12:f0:26:86:f5:ba:4f:
b5:15:84:5e:5d:05:17:2b:70:4a:42:6a:a7:ce:fd:43:1f:f8:
6b:31:34:3b:40:7f:7d:9c:14:88:b4:23:26:a3:ed:91:f8:83:
3b:97:e5:f6:79:0f:e8:dc:ad:0b:51:4a:e1:b3:e7:7f:5f:6a:
6e:41:67:13:3a:c1:49:ce:a2:4b:ae:f4:d9:f8:13:27:cb:5b:
da:1c:9b:73:bd:84:ef:2a:3c:ce:39:76:f9:76:32:07:f0:41:
4a:a1:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:08:18 2025 by rpki-client