Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: Bj6F1b0PcWq0vpx64669Stc5qXTtzEDTHSisGSmEi54=
Subject key identifier: 99:5B:86:5F:46:0E:5C:85:2C:37:16:F5:2E:08:A4:ED:3E:E7:7D:A2
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 01976BBCF059CC44E7DF853D5260FB2403EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 00:00:33 +0000
Manifest this update: Sat 14 Jun 2025 00:00:33 +0000
Manifest next update: Sun 15 Jun 2025 00:00:33 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: eFBrUrv0Dc/I+WZDBsvx5hrwni/RXUxif8CNSwZL4Mk=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:f0:59:cc:44:e7:df:85:3d:52:60:fb:24:03:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Jun 14 00:00:33 2025 GMT
Not After : Jun 15 00:00:33 2025 GMT
Subject: CN=995b865f460e5c852c3716f52e08a4ed3ee77da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:50:44:ac:1b:fb:65:09:40:b3:17:73:fd:
43:05:08:00:b2:e1:ec:7e:7c:91:c8:fd:70:2a:14:
2f:d3:de:d0:cd:c4:38:24:4c:24:7f:4f:b1:c2:6b:
b7:98:32:08:45:2d:82:8e:62:df:70:1d:01:b3:7a:
c4:e1:4d:b5:b9:91:95:3f:33:b0:a3:cc:0a:43:d7:
6a:bd:76:35:f9:3c:72:fd:8a:59:de:13:fc:2a:58:
c8:81:d1:f6:c0:d1:84:13:ef:5d:1f:f3:4e:14:8c:
f2:88:e1:0a:9d:d5:98:f1:43:8c:d9:36:83:95:95:
d8:4e:66:22:fd:49:bd:56:74:9a:4a:41:bd:46:b9:
4b:67:d7:4d:41:b8:5f:1d:01:dd:d7:77:06:d6:61:
df:fc:c5:fe:28:45:29:7e:0d:78:07:56:c5:97:13:
9d:12:fc:8b:b9:f6:b4:41:15:51:69:8e:e0:51:bd:
b7:35:16:38:5e:28:6e:df:58:61:ca:f0:a1:5e:33:
58:5c:42:0e:12:a3:19:14:04:8c:c1:ac:e4:11:6d:
1d:f6:11:1f:94:b1:77:3f:69:20:d2:3b:3c:f2:b9:
fb:68:18:f5:b2:57:e1:3a:68:bf:6c:87:45:68:10:
95:25:78:5d:57:77:70:5e:b2:08:f4:ba:88:c4:5a:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:86:5F:46:0E:5C:85:2C:37:16:F5:2E:08:A4:ED:3E:E7:7D:A2
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6b:33:af:d4:54:26:53:d4:45:09:03:0b:6a:70:1c:27:69:
39:fc:fa:27:e1:d5:87:25:eb:1f:5a:b2:d7:d2:15:45:92:2c:
59:17:08:eb:34:4c:7b:58:19:1d:ef:c0:c7:35:dd:3b:d8:f0:
0a:d5:d4:6f:91:fc:cc:84:bd:a4:f7:6f:b9:fc:d1:ff:09:ed:
4f:4a:b9:7d:de:25:b1:21:31:c7:cd:71:be:07:9f:e4:c5:2d:
34:21:1b:5e:bc:d0:21:f3:3c:da:7e:b8:97:c9:e3:33:0f:3d:
00:49:b0:bf:1f:96:83:83:00:67:8a:6f:36:94:df:03:51:cd:
b7:27:74:59:e7:64:e0:1a:c6:9f:74:61:7a:36:cc:6e:1d:dc:
b3:94:12:64:22:5f:61:29:b0:25:44:ea:52:df:e3:fe:1d:81:
42:87:77:57:f4:76:cd:4c:62:56:a4:88:50:c8:19:a8:62:ce:
28:60:6b:da:91:a8:88:b8:1d:7c:09:bb:03:6e:ca:0e:fb:18:
81:e1:b7:25:1a:a0:77:c4:4a:1a:86:af:36:fd:01:14:84:4e:
87:81:e3:a7:16:8e:70:2d:c6:f0:c8:e0:17:4f:6c:7d:19:89:
71:69:39:49:b3:1b:38:56:d8:4e:3a:b7:61:b9:eb:2f:a4:56:
1d:83:16:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 03:04:20 2025 by rpki-client