Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: NkQyd74U0oBABs6sp+DHiUg27QALd6EIr7wlEDpBCMk=
Subject key identifier: 19:E1:D9:AC:A9:45:03:BB:94:C1:BF:C7:98:1C:F1:B7:D1:84:58:22
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019752A250C1EC1B5B8155C7C9EAEEDA9F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 03:00:58 +0000
Manifest this update: Mon 09 Jun 2025 03:00:58 +0000
Manifest next update: Tue 10 Jun 2025 03:00:58 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: n2b/Wv/vLt3Hk4iTidz1xJo+lzk/ZQjCsLQaP2+fXhs=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:50:c1:ec:1b:5b:81:55:c7:c9:ea:ee:da:9f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jun 9 03:00:58 2025 GMT
Not After : Jun 10 03:00:58 2025 GMT
Subject: CN=19e1d9aca94503bb94c1bfc7981cf1b7d1845822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:36:44:20:77:db:45:ef:d9:2e:2a:a2:ff:
29:49:33:c8:0d:10:64:9c:ad:03:ae:78:8b:3d:93:
36:b0:e2:9c:48:5e:6c:16:60:35:b9:60:63:0a:7a:
30:cd:46:7e:ff:f8:c7:01:87:4e:a5:52:ac:a7:26:
f6:e9:22:c8:21:e7:43:5b:c1:5e:30:82:e9:ad:b5:
6b:97:cd:93:da:62:24:4a:77:e7:f4:32:dc:5a:36:
66:8c:48:50:17:f8:91:3e:11:d3:a2:18:66:b9:52:
bc:5f:ee:07:3e:37:e3:ea:b7:67:47:09:13:73:0e:
0e:92:53:5b:79:74:3f:00:f5:8a:9a:66:29:41:3e:
13:aa:57:c4:f8:90:76:a0:95:6d:25:f1:0e:cf:33:
e9:a5:a3:27:5d:8c:39:5e:08:90:73:3b:45:54:e5:
87:bd:52:f6:67:f3:b6:fe:9d:21:31:f9:b8:98:23:
ce:7d:2b:5c:48:08:5a:47:ef:76:3d:7e:01:9f:5b:
1d:0f:e4:04:fd:a0:ba:32:42:81:6d:3c:64:9d:df:
07:12:10:c0:6e:ff:0a:16:cb:4c:93:c6:13:3d:a2:
9d:e5:75:5e:af:0b:87:7f:23:6e:15:b2:d1:64:7e:
94:2d:8c:e4:4b:dd:de:46:1f:79:24:15:b4:a6:99:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:D9:AC:A9:45:03:BB:94:C1:BF:C7:98:1C:F1:B7:D1:84:58:22
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:89:e5:17:4e:51:dd:5a:4b:e2:d7:fd:1f:3c:ba:4c:88:26:
6d:59:56:d9:77:94:9a:f9:a9:a7:36:be:58:ba:1f:b9:db:36:
c9:4f:d6:18:ed:2a:dd:95:67:7a:a0:ad:a9:cb:eb:63:7b:d0:
9e:4e:6c:b2:12:e0:54:c8:5f:a0:f4:de:7b:49:dd:9b:e9:a0:
a6:5c:9e:77:29:af:3c:8f:ad:4e:84:23:8a:a3:2c:7f:61:0b:
e2:ed:d0:71:40:15:54:c1:da:fb:68:de:e3:14:9e:b1:c9:08:
05:70:34:76:e0:a3:23:90:5d:29:46:c4:39:d5:1e:d6:c1:d1:
c7:a2:34:69:08:ba:d8:d4:90:d8:47:34:75:74:53:4b:8b:d4:
bf:44:94:53:a3:49:ad:e0:76:11:80:01:54:29:74:aa:76:fc:
99:8f:01:08:48:64:93:fd:43:00:04:3c:69:27:8c:00:d2:f9:
4b:16:8c:d6:f1:7f:03:b3:b7:95:dd:32:cd:1b:16:fa:38:93:
69:6b:6a:cf:98:52:3f:b5:fb:85:fb:f5:58:77:94:3c:a4:7f:
53:24:fb:fa:0d:b3:cf:b1:e7:0a:1c:1a:6a:48:6a:ab:84:bb:
ec:6b:b6:51:88:72:82:a9:53:88:93:08:87:3d:bf:65:1c:0b:
bd:ef:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:45:07 2025 by rpki-client