
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: DzkDxrJwBqYrXlQltlu0zw8wleWbTkqSNp+Q9UydkGw=
Subject key identifier: B0:E4:5F:E5:A5:DA:06:57:6D:33:F2:6F:43:E2:D1:72:EF:99:BD:63
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 0197B7EA92B5471611F02174881F26EECB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 0EB2
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: MTk/Wns/+j6pXvo8Jv4eK35AR//DKZC7+sM5PZg8Nns=)
2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:92:b5:47:16:11:f0:21:74:88:1f:26:ee:cb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=b0e45fe5a5da06576d33f26f43e2d172ef99bd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:21:1b:8c:c3:52:59:65:06:9b:f7:f8:90:
8b:c2:26:96:6e:1a:de:60:8d:04:d3:39:ea:fa:96:
d0:72:f7:e2:c6:22:a7:f5:27:8b:6c:f9:22:38:a4:
08:2a:93:8c:7b:83:e9:30:ed:99:e9:95:72:ae:37:
3d:38:bb:b6:e0:21:b2:fb:76:a8:9e:34:eb:74:54:
97:0f:dc:3c:d3:78:13:60:31:2f:ed:97:b9:8d:61:
7f:fd:2e:fe:a5:7a:8c:f9:eb:05:45:98:64:24:94:
bd:de:35:92:56:d7:ed:10:3f:31:80:5e:59:d6:5d:
7e:c2:c0:69:92:78:3e:a4:b6:3b:20:78:21:e1:79:
b4:06:1b:29:16:52:b1:95:62:56:0c:b6:e6:b8:3e:
23:c4:a1:07:ee:99:99:28:d7:b5:68:38:ce:22:aa:
22:13:aa:1c:69:a5:3d:5d:72:32:6c:78:c0:15:cb:
23:96:39:c0:1c:30:97:0c:d9:d6:b4:43:06:16:9d:
92:ac:f7:e0:76:7a:2f:61:b4:1a:7f:9c:b0:45:b5:
06:ef:28:93:52:00:8b:6a:f2:2e:89:15:4b:50:95:
65:ea:a2:c6:09:77:8f:04:ce:96:90:6e:97:9d:6a:
95:43:b0:87:05:fc:6d:d8:e8:fa:44:76:64:27:34:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E4:5F:E5:A5:DA:06:57:6D:33:F2:6F:43:E2:D1:72:EF:99:BD:63
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d9:df:29:f8:55:e2:36:fd:3c:43:ce:c5:a9:0a:f8:8a:34:
a4:d2:71:e7:0f:c0:07:39:a6:75:56:90:92:98:f1:eb:5e:35:
d0:5c:dd:18:3e:20:a7:f4:25:c7:0d:ba:65:8a:6d:bf:f5:7a:
15:e6:6f:53:c9:06:fa:2d:58:0e:c1:55:b4:45:1a:fb:c1:84:
e1:b4:30:b1:f3:d3:6f:c5:8a:68:89:6f:55:48:9c:47:33:72:
83:ec:87:94:6c:21:7f:24:b7:6c:34:c0:24:a6:53:e2:d4:c4:
95:0a:78:57:ee:e4:51:75:52:a7:a7:01:fa:b1:c9:4b:bd:e9:
07:d9:86:69:63:c6:b2:b6:99:7e:cd:65:d4:ed:ff:23:11:4e:
61:5d:d7:8c:07:e5:6d:2b:0f:ad:39:2f:6d:3a:e6:02:b6:cf:
c4:ef:b5:bd:f8:74:60:03:73:2b:f4:f3:6b:28:39:9b:4e:ae:
79:ba:6f:4a:d6:9a:c4:bb:35:fb:ce:86:5f:f2:49:b6:a5:a6:
1b:49:18:fc:21:34:7d:19:86:8d:ec:9a:96:04:d1:52:85:60:
99:6b:c4:ad:4c:7e:73:9d:87:c2:3a:8d:82:bb:b2:10:f8:91:
e6:2b:1c:61:ff:c1:65:4d:bd:98:83:89:f9:87:c7:ac:94:3a:
de:40:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:31 2025 by rpki-client