Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier: l7BkVIcixl1QEyNt5j+DrYqlCOfTyrEK4iSxaTxz6Ls=
Subject key identifier: 10:5A:1D:E1:10:CB:B4:39:92:3E:5E:9F:F6:5C:B2:BF:6C:C0:24:99
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial: 019755A2C6D7C5A453F66AF87ED79EF5EF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 17:00:20 +0000
Manifest this update: Mon 09 Jun 2025 17:00:20 +0000
Manifest next update: Tue 10 Jun 2025 17:00:20 +0000
Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: r9w2MchCb4kLQknM4fRuNJIl1I8XLaIhKXNdk5LxOYI=)
2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a2:c6:d7:c5:a4:53:f6:6a:f8:7e:d7:9e:f5:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
Validity
Not Before: Jun 9 17:00:20 2025 GMT
Not After : Jun 10 17:00:20 2025 GMT
Subject: CN=105a1de110cbb439923e5e9ff65cb2bf6cc02499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:ab:4e:40:21:82:dd:fe:95:b6:de:83:67:
e2:dc:0d:80:86:a5:a0:a6:f9:e9:97:e9:3c:74:8c:
2e:73:42:f0:79:08:5c:ce:52:3e:ac:79:4b:10:6b:
89:f9:11:71:7b:9a:2d:0d:f4:0f:57:02:a0:33:e3:
2e:54:57:69:a0:aa:d1:d7:73:ff:82:6d:5f:a7:e3:
c5:58:67:b3:77:ad:82:6d:84:1d:ff:25:99:fb:46:
bd:5a:c7:5c:db:d4:5b:7f:6e:56:7b:78:1f:72:a6:
ee:73:df:cc:e1:28:fa:0e:81:2c:44:f7:8b:3e:cf:
fb:45:23:d2:49:52:35:cd:f0:e7:22:b1:7b:5f:63:
66:08:00:88:f8:bb:37:78:bc:c8:95:22:8f:d7:9e:
40:02:35:c8:f5:d2:30:44:4e:5b:54:62:ec:47:d1:
5d:82:42:d3:9f:1a:bd:df:c2:9f:ba:55:0e:03:85:
64:d2:e8:e9:84:5e:ec:1e:52:23:23:64:1d:0a:77:
2d:09:45:ee:36:f2:58:1c:a6:e8:69:f1:48:1c:16:
92:a0:e7:a4:f9:50:07:bf:7a:8a:1d:10:57:ef:d8:
d1:00:f9:dd:88:0c:1c:e1:9e:a9:da:08:82:c2:d1:
27:3f:30:40:3f:1e:e4:aa:29:38:1c:e8:e4:6b:b0:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5A:1D:E1:10:CB:B4:39:92:3E:5E:9F:F6:5C:B2:BF:6C:C0:24:99
X509v3 Authority Key Identifier:
keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:24:83:c2:1a:b7:85:31:a3:6a:98:56:71:cd:56:5f:93:da:
a4:83:ec:28:6c:50:6b:ce:98:69:07:9d:df:f2:d4:8c:69:c7:
8a:92:95:4c:4c:f1:98:9a:df:71:8d:c1:b8:d3:c0:cf:1d:39:
f6:19:b7:d8:d2:a5:09:96:84:ad:7f:64:74:f1:5d:be:96:84:
99:06:da:e0:6e:47:f0:bc:80:3e:87:ad:b8:a9:64:d2:42:40:
a5:90:61:e5:93:a5:88:fb:ab:4f:1c:a3:71:8a:09:fe:48:e2:
d4:a5:0f:b9:5a:cc:26:ae:3f:50:c9:e3:24:a2:4d:e6:c2:e7:
45:ae:af:02:6d:3c:c4:00:86:69:af:fa:77:40:25:15:c8:d0:
38:b4:fa:e1:40:d2:ab:b5:a6:0c:6d:6c:9f:fa:4d:2a:99:50:
35:03:1b:1d:c9:6f:ae:85:a2:60:8d:df:8d:63:79:32:75:5e:
c1:e0:15:96:06:3c:ef:7b:07:e7:a7:94:58:f6:0f:53:00:5a:
d0:eb:44:48:19:68:6d:02:29:cb:22:d0:77:0e:3e:28:b1:32:
32:d3:d2:cc:8d:18:44:c3:fb:0d:d0:69:82:9d:d0:30:40:19:
50:08:19:77:7b:66:df:40:1d:e0:6e:97:a2:44:b3:ab:66:fd:
b8:8a:7e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:45:04 2025 by rpki-client