Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: B6dcUYB3IG6gbjmK/5kfaq9w8jfnoH6QVVCJzcZIepI=
Subject key identifier: 2C:56:1E:DE:E7:0E:DD:65:B8:7F:76:A2:01:F7:51:A3:BF:B2:4C:58
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 01974C69F4DC52C99EEAA4BEA6C35E4BBD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0BEC
Signing time: Sat 07 Jun 2025 22:01:41 +0000
Manifest this update: Sat 07 Jun 2025 22:01:41 +0000
Manifest next update: Sun 08 Jun 2025 22:01:41 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: g9Qjl1yBEITpVvp/0viQ5YACEFxeeAUbA5m1dJfCJv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:f4:dc:52:c9:9e:ea:a4:be:a6:c3:5e:4b:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Jun 7 22:01:41 2025 GMT
Not After : Jun 8 22:01:41 2025 GMT
Subject: CN=2c561edee70edd65b87f76a201f751a3bfb24c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:a3:fc:f0:e4:1d:29:19:ab:f4:5d:90:db:
a3:a9:6d:e5:a2:43:45:26:1d:10:36:de:6c:85:e1:
9b:2d:7e:3a:e2:9a:a2:ea:3f:c4:22:e8:f9:a2:86:
a9:90:0f:8a:92:95:08:ee:4c:2d:71:9a:81:f6:e3:
ae:30:54:5c:f6:a3:b4:a9:b6:55:9e:69:57:74:f6:
f8:72:36:f5:45:c8:21:c2:49:dc:27:db:dc:88:b4:
4b:74:31:18:9f:d4:0d:b0:bf:70:ab:c9:29:25:cc:
37:59:1f:d8:02:90:b6:71:c1:9d:06:85:31:d2:63:
3d:59:d6:60:b6:87:3c:a0:da:40:06:d7:a4:d0:1b:
3f:21:2f:10:02:5f:96:00:35:be:b5:00:17:34:08:
5b:12:e8:34:3c:b6:e3:e1:8f:7f:6a:38:0f:d7:d3:
eb:6d:f8:9d:f5:e8:51:76:80:35:25:a7:06:5d:34:
dd:0b:e7:8f:93:a5:ff:30:4b:15:29:e2:8d:a7:16:
31:f4:e1:ec:7e:d5:4b:cf:80:05:f4:0d:0e:27:96:
e8:44:08:b4:67:2b:55:54:9b:79:cb:0f:4a:47:00:
50:21:02:d8:ad:9a:af:73:4f:be:39:14:e3:6e:89:
ff:93:fb:1d:05:85:dc:35:76:bd:cf:01:08:e9:12:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:56:1E:DE:E7:0E:DD:65:B8:7F:76:A2:01:F7:51:A3:BF:B2:4C:58
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e1:14:d2:66:c5:28:b6:b1:17:a9:96:58:a1:d1:14:c1:f2:
0f:53:93:ba:bf:f3:b8:31:e4:0d:a4:39:93:ae:b6:7a:be:6e:
ca:3b:d6:72:72:fd:fd:b2:13:6b:68:7b:66:20:8a:4c:91:f0:
88:00:12:e7:ea:b6:73:0c:66:14:4b:53:06:16:47:c9:cd:a7:
22:50:8f:a6:fc:c2:c2:4e:4e:30:15:bc:7c:8e:b9:54:39:7e:
c7:66:fb:fe:f3:ee:7f:a2:09:96:ab:26:e0:0c:c7:d4:7c:43:
85:7d:c9:d2:72:9b:64:b5:4b:06:af:04:20:5a:a7:fe:f2:cb:
9f:ee:13:dd:21:db:d3:63:9f:d6:06:16:bd:98:dd:c7:f6:ce:
83:e1:b5:8f:2b:84:25:b5:3b:04:b8:6b:74:c6:08:80:96:86:
2e:fe:17:c9:3c:58:80:62:07:e8:c2:5e:fb:fb:84:df:3d:0e:
cc:c3:a3:ab:c6:04:18:35:7f:bb:b4:df:f3:11:d0:b7:e2:fe:
a0:a5:60:ae:07:43:53:86:b8:13:f8:c0:b2:54:1a:cc:36:a3:
6b:84:e8:c5:d3:d4:d1:ef:bf:f6:6e:e4:c4:0a:99:8e:19:39:
36:7a:69:39:cf:7b:b4:bb:93:90:fc:d9:67:40:61:bf:28:22:
c6:e1:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:03 2025 by rpki-client