Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: a5Pk3ifPVj8lFKbqJBw8Z87RWtRwDchBv1DqEmmLFTo=
Subject key identifier: CD:52:5D:E2:FF:5A:33:17:18:98:1C:17:BD:45:7D:20:5B:9E:EC:A7
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 019748C2EF7D5125DC2F8B195B4F2E15A118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:24 +0000
Manifest this update: Sat 07 Jun 2025 05:00:24 +0000
Manifest next update: Sun 08 Jun 2025 05:00:24 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: hfll4rlo0WRuvQdNKrtjpweibJizOfGYde0HM94xx70=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:ef:7d:51:25:dc:2f:8b:19:5b:4f:2e:15:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Jun 7 05:00:24 2025 GMT
Not After : Jun 8 05:00:24 2025 GMT
Subject: CN=cd525de2ff5a331718981c17bd457d205b9eeca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:a0:62:a6:6a:71:c8:79:de:2a:88:81:44:
8d:95:9f:35:48:03:1a:e3:7a:0e:fc:c4:41:45:e9:
58:e0:6e:fa:c0:9d:6a:62:a3:9f:e9:d4:7d:a0:ac:
7c:a6:ea:f8:df:c7:a1:6b:1d:57:05:37:e6:33:32:
a7:d1:55:77:1d:61:7d:1c:52:8e:39:89:56:45:69:
0e:53:02:db:f0:25:92:b8:ff:1a:59:96:35:ef:8e:
6e:53:d5:b2:f0:9e:a5:f7:34:d9:43:67:c1:4d:2c:
3c:bb:ca:e7:1e:8b:3f:ad:ab:8e:d8:be:a3:89:3f:
9c:e5:80:55:d3:4f:12:01:ba:cc:b9:e5:9e:5b:34:
e8:3b:0b:8c:6e:e5:36:63:18:ac:82:16:71:93:e8:
c0:e7:2b:c4:8f:7e:6c:28:92:d1:7e:56:a3:07:c8:
81:69:b7:e8:6d:42:a8:13:55:2c:2a:91:bf:31:f6:
50:ea:33:c6:74:72:60:6e:8e:90:1a:0f:42:f6:8a:
19:5b:97:1a:bf:cc:86:4b:16:71:00:5d:91:61:c7:
6d:ac:64:ae:cf:a1:b3:ec:f0:f7:ed:3e:e9:30:42:
59:17:0a:cc:24:ad:6e:ba:07:50:a3:a2:ba:7a:cf:
fe:8e:5c:01:d0:6c:16:ca:ff:fa:80:34:8d:46:d3:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:52:5D:E2:FF:5A:33:17:18:98:1C:17:BD:45:7D:20:5B:9E:EC:A7
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:05:2a:67:50:78:cf:5c:a8:67:06:07:bc:a3:28:df:5f:76:
cc:4c:a2:b5:94:b3:96:41:50:7a:b3:23:ba:79:64:7f:4e:aa:
38:e9:4f:68:21:be:a8:25:d9:b4:3c:9b:d5:75:c6:cc:ff:f4:
88:f9:95:38:47:e9:19:7b:41:e8:69:60:4c:e6:d9:a5:85:fb:
f5:e0:2c:fd:6b:3c:29:51:c9:55:36:60:b2:58:cc:7e:92:ed:
9f:35:e3:5d:aa:74:2f:9a:19:25:21:e6:e2:8b:c7:29:f3:57:
c0:52:f7:8f:c4:a6:ff:09:15:78:7c:18:46:34:b5:6a:0d:4d:
dc:79:c1:9f:35:82:c3:4a:3a:1c:51:3f:f7:b4:96:be:5e:2c:
1e:7f:32:54:97:52:7f:13:28:9a:23:9a:5d:e8:77:d0:a0:97:
a3:49:eb:88:48:58:7b:3d:e4:c8:82:c6:60:8d:68:05:d7:fd:
cf:fb:84:5b:d1:20:64:19:02:bf:0e:a2:d0:52:d3:14:04:78:
6e:1d:60:78:2e:f3:86:0c:1c:43:ee:e8:ac:7a:db:f2:df:cd:
23:32:f2:ae:6b:62:c6:c4:c1:b3:d7:e0:fc:d4:ef:4b:9a:9d:
3b:20:f9:d8:a2:57:f6:1d:50:3c:0b:9b:ce:da:0b:51:0d:1b:
43:39:cc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:30:40 2025 by rpki-client