Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: AyRfuk+hk3+1qsJrj6mD8SQAJSMWUpl5Tdhu8ys5dnE=
Subject key identifier: 45:01:09:52:CF:22:78:00:1D:3C:50:23:50:E6:0C:08:AD:A3:65:F7
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 01976F9A2F205BB12AC019492F5D3AF28574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 18:01:04 +0000
Manifest this update: Sat 14 Jun 2025 18:01:04 +0000
Manifest next update: Sun 15 Jun 2025 18:01:04 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: Md9ZAyP8POJD15m19TK/Q5m/hfgWKo4eQ3u6I1FDE5I=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:2f:20:5b:b1:2a:c0:19:49:2f:5d:3a:f2:85:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Jun 14 18:01:04 2025 GMT
Not After : Jun 15 18:01:04 2025 GMT
Subject: CN=45010952cf2278001d3c502350e60c08ada365f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:dc:f0:8c:60:8c:b3:03:92:2f:87:b4:b6:
ea:db:8a:0c:58:4a:42:ea:6a:13:97:6f:3d:99:95:
dc:46:f6:5d:85:d0:20:16:dc:37:27:9f:ea:92:86:
7b:b7:8e:6c:14:18:a2:3b:38:a5:2b:d8:59:63:3a:
34:4f:89:2e:b1:30:b3:3a:fa:a0:56:ad:d5:f0:92:
44:54:f6:03:1b:b7:4a:af:56:86:24:92:54:09:d7:
47:9b:de:21:92:68:19:94:ec:07:68:c8:e2:e7:15:
37:48:ea:31:59:c9:53:b7:75:76:a3:6a:54:3c:50:
fa:a8:9b:ab:d1:45:d2:2d:42:bb:2c:50:2d:3c:4e:
be:cf:dc:ae:2c:33:5f:1d:5d:9c:b7:80:61:05:48:
e1:10:51:52:a9:c9:23:39:07:68:dd:96:d6:2e:25:
8b:24:7a:11:e1:be:8c:40:50:28:36:30:45:35:09:
77:8f:59:6c:cc:2c:c3:8f:da:aa:36:4b:a5:42:f5:
ae:91:d3:6d:98:76:ee:7d:f0:c5:1c:d8:12:9d:65:
74:6e:6d:e2:8d:9d:59:48:01:3d:ca:2f:c9:d4:52:
2d:fa:30:f5:c7:2b:8a:4a:92:b3:33:e1:b8:fe:9b:
24:d4:04:ed:a1:dd:2b:0e:f1:6d:96:f9:c5:a4:bb:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:09:52:CF:22:78:00:1D:3C:50:23:50:E6:0C:08:AD:A3:65:F7
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c3:ce:cc:75:b6:81:86:d8:71:18:13:2f:2d:ae:56:72:49:
22:ad:1a:ac:21:9a:05:93:a3:fa:7d:0d:4a:03:95:f1:41:f8:
2e:75:b4:19:e2:40:01:3d:51:ad:c8:0e:85:b3:ec:a3:dc:76:
1c:e3:85:72:2f:cf:c2:57:32:9b:d9:51:34:a5:ea:70:cf:b7:
1a:65:13:a3:75:50:5f:12:f4:a2:7b:ff:e5:b6:04:1f:10:0b:
fb:f4:15:23:e1:23:34:2a:7d:f0:ca:00:46:a8:62:5f:a1:00:
d5:a7:ae:92:b8:a4:ca:09:1c:be:99:6c:d6:f8:81:f6:af:77:
61:d4:63:52:a4:71:6e:6e:f1:a5:cd:8c:8b:0c:8e:25:29:a4:
91:3c:77:3e:28:cc:f4:ec:ac:35:43:9f:31:19:9e:eb:44:fd:
20:29:1e:50:90:30:6f:a7:e0:f1:07:36:9a:51:d8:2a:8b:e4:
86:7c:35:7c:7d:46:63:cd:d2:a6:3b:9c:ff:2e:25:6f:e9:48:
00:ea:c8:f9:a8:1e:2a:1c:7a:bc:ff:c0:36:a4:48:3e:25:b8:
f8:36:21:7b:15:5f:9a:4c:ea:49:05:88:fa:ac:99:df:ab:ee:
e7:dc:56:20:5c:cb:cb:63:ef:97:cd:0a:ba:f6:fc:f0:89:9a:
91:8a:9c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:05:48 2025 by rpki-client