Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: REU7iEJ2+TddcMQgXhv2XQWz/4efMh3mpjx2qGOoGSc=
Subject key identifier: D4:42:D2:F6:C2:2A:0E:9F:F7:84:7A:65:08:24:37:1C:39:D7:E0:E8
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01974742AE6EDB8B52EF7384321475599980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1582
Signing time: Fri 06 Jun 2025 22:00:41 +0000
Manifest this update: Fri 06 Jun 2025 22:00:41 +0000
Manifest next update: Sat 07 Jun 2025 22:00:41 +0000
Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=)
2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: uOLPxH/XZ11OQ2F6e4dS9buvH2PxNy7nlEwZQ2WLR40=)
3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ae:6e:db:8b:52:ef:73:84:32:14:75:59:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jun 6 22:00:41 2025 GMT
Not After : Jun 7 22:00:41 2025 GMT
Subject: CN=d442d2f6c22a0e9ff7847a650824371c39d7e0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:d9:e8:06:52:26:d3:93:c7:64:0b:a0:a8:
b7:e4:11:9b:b3:1a:9e:e5:a2:52:32:38:14:39:d1:
ce:4e:75:c4:76:ef:7e:19:ca:a9:a9:8f:0a:2f:01:
a9:8f:7b:73:af:0d:27:30:29:c6:11:d8:59:19:27:
fc:5b:05:ad:f7:33:a1:3f:34:25:c3:b8:d4:70:37:
09:9c:29:d2:58:0c:05:47:e4:0e:9c:7a:65:81:a8:
ec:46:bc:01:5b:00:21:9a:a7:2c:1b:51:a0:cd:8b:
ec:aa:b2:c5:60:f9:c4:27:e4:e3:dd:82:b1:f9:23:
7b:ba:53:34:79:1f:71:bc:67:8b:52:a4:7e:0a:81:
aa:e2:5d:71:58:46:4b:b8:b9:83:b4:af:66:be:eb:
ec:86:c0:b1:1a:0f:21:3a:f2:41:76:46:99:3f:c5:
26:a1:8b:18:ce:b8:03:b1:3c:20:e1:e3:8c:a5:94:
dc:8a:fe:fd:d4:8e:25:0c:2d:51:09:6e:ee:a7:a3:
98:e8:82:b0:70:1d:c3:65:e0:68:89:ca:11:b5:ef:
d7:19:80:a0:0c:6a:72:80:5e:1e:04:91:43:7f:2e:
3a:c5:86:67:41:b0:7b:28:89:95:f5:23:9b:71:e8:
ec:29:da:e1:ec:0f:44:4c:6a:1b:15:ae:e8:94:f6:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:D2:F6:C2:2A:0E:9F:F7:84:7A:65:08:24:37:1C:39:D7:E0:E8
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3b:7c:bd:27:36:a7:80:4d:bb:72:4f:2b:e4:cd:2a:3c:1a:
11:57:d4:6c:20:a6:94:c2:a3:0f:1b:48:19:d2:41:06:d3:07:
f8:60:45:1c:cb:c7:6c:9b:77:21:fd:2a:0b:c4:90:56:81:41:
c1:55:a5:a1:70:03:c1:23:ee:70:6c:1f:97:5a:e9:6f:f6:48:
0e:79:d7:4a:f6:25:99:a2:50:f7:19:0a:a0:4b:9b:ed:09:85:
73:a4:85:39:67:a0:7d:8c:f2:31:ec:81:85:7a:43:2a:47:b1:
2c:ad:65:3d:d8:43:fe:0d:c1:fe:c2:52:0f:32:86:73:70:8b:
b0:e5:7f:10:f6:cd:21:7f:df:ec:5a:04:25:be:49:11:f2:9d:
d6:af:c2:6d:10:29:0b:85:1b:24:2a:21:55:51:fb:5b:04:27:
37:24:08:01:8a:f6:66:5c:8b:11:a4:a1:82:de:b0:a3:77:0f:
82:48:fe:1e:17:04:50:7e:82:b6:22:30:ab:de:03:0a:44:6b:
f8:4d:fc:88:2c:38:c2:e5:39:7b:4a:7c:68:87:59:37:9b:99:
87:21:d9:1e:64:c7:68:fe:d2:c5:7f:17:12:b1:c1:10:19:89:
2e:46:c9:d1:a5:de:3e:49:50:d6:9f:9b:dd:51:63:9a:00:3d:
ae:11:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:11:35 2025 by rpki-client