Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: HZPWhnZeo+XG92Eu9DB1H+utN2W7pw+0wXmqG2m6NNA=
Subject key identifier: 68:A7:70:5F:1B:9E:C8:BD:5D:8D:F4:47:35:E9:C4:4E:90:D1:C8:C2
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 0197470BEC5B727A599990D3F053F841D84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0B00
Signing time: Fri 06 Jun 2025 21:00:52 +0000
Manifest this update: Fri 06 Jun 2025 21:00:52 +0000
Manifest next update: Sat 07 Jun 2025 21:00:52 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: AcNr/BYp+3uuVtiUZxv6l3Fr6g0xfoU3nfOuIhm5OuA=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:ec:5b:72:7a:59:99:90:d3:f0:53:f8:41:d8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Jun 6 21:00:52 2025 GMT
Not After : Jun 7 21:00:52 2025 GMT
Subject: CN=68a7705f1b9ec8bd5d8df44735e9c44e90d1c8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:f2:5f:9b:1e:0a:73:7a:7b:0e:80:0a:c8:
9a:f9:0f:a8:4b:78:f0:0d:4c:59:66:0b:bd:8b:e6:
34:58:a9:a0:09:b5:c7:36:9d:47:15:04:f0:63:db:
39:86:97:3d:8c:aa:9f:e0:98:f1:87:0a:f7:95:6f:
d4:fc:fa:c3:b5:f7:ea:b2:f0:c3:70:b8:74:26:95:
60:a9:3e:9d:36:c2:4b:9c:d7:fb:70:d7:d0:53:d5:
64:6e:cd:25:e0:4f:1c:20:4f:9f:af:f1:e4:0a:43:
36:5c:93:4e:36:22:a3:fe:d4:00:8c:60:05:86:65:
12:51:58:2b:62:e2:6c:65:6c:70:79:14:0a:81:0c:
6c:0d:15:57:a6:e6:27:ff:84:5e:30:9c:11:2f:f8:
97:80:26:17:8f:c0:1c:f5:87:fe:f7:d0:01:3c:61:
1b:de:4c:00:fe:99:d7:d9:72:7e:38:0d:ba:2b:02:
6d:85:c1:28:d1:68:54:03:2c:c8:f0:4e:57:36:f7:
b2:47:ec:5b:a0:89:08:d0:51:5c:bd:ae:c8:ee:21:
5f:1e:e7:79:22:0d:c9:b0:e0:0b:e9:e8:f4:62:e1:
4d:24:32:c5:44:29:cd:c0:bc:c3:46:e8:06:b4:b7:
95:67:f7:b4:26:d3:bf:78:35:1c:18:7c:a2:df:a7:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:70:5F:1B:9E:C8:BD:5D:8D:F4:47:35:E9:C4:4E:90:D1:C8:C2
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:07:d8:65:34:57:c2:eb:14:17:2d:df:a5:41:1e:84:b2:a4:
62:9a:ff:25:08:46:7c:5f:89:15:fd:cd:c9:1f:ea:1f:61:50:
b2:b2:90:fa:35:c4:30:a6:4b:e3:0c:a1:c0:fd:aa:44:e8:91:
c9:08:15:52:d5:a4:3c:06:fc:f6:3c:fc:35:54:2e:b1:f3:69:
b7:c9:14:e8:b1:0a:da:c5:0f:ab:56:98:0e:bc:dc:66:2d:7b:
47:5b:80:67:c1:b1:5c:21:61:91:89:e1:cf:c8:fa:bf:e4:03:
da:08:ec:fa:98:75:0f:e1:f3:86:76:f8:61:15:fa:41:e5:3b:
57:f9:69:96:c2:b1:32:ff:91:04:68:7e:dd:6b:c6:31:75:20:
20:57:b7:de:e2:70:b7:b9:7d:b1:fe:2d:9f:82:5f:5e:7b:a3:
ca:b7:39:f4:c5:f7:8b:a0:dd:d7:e0:78:38:0d:49:e0:57:ed:
a2:6a:d6:0f:93:24:14:95:db:58:a6:33:82:dc:30:17:df:99:
43:ae:2f:b4:f1:7b:75:fd:da:eb:3c:05:a7:46:4f:a7:f4:22:
70:3e:f6:66:ea:bc:f2:aa:ff:40:51:7b:2d:33:9b:a8:1e:70:
c4:82:54:d7:12:c1:b0:8f:e0:56:8e:e9:97:e7:6d:45:c2:f1:
dc:58:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:01:34 2025 by rpki-client