Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier: giL6hLWQnPhzHdCRXuruD/ALlZaSSp5t4xTYGTYyKv8=
Subject key identifier: 75:4D:58:DE:A8:3A:6F:F2:14:6B:6E:05:94:74:32:FB:D6:5B:44:EF
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial: 0197B7B347B758309C44EBBF5BBD6C650F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number: 159B
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=)
2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: eTH236jjbA3ji7Ja9bLewtgsmppwkyWflWxJFj9suWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:47:b7:58:30:9c:44:eb:bf:5b:bd:6c:65:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=754d58dea83a6ff2146b6e05947432fbd65b44ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:6d:cc:fe:3f:94:66:93:66:84:8f:b1:5e:
1b:d7:45:bb:5e:1a:9e:0f:fa:f0:99:0c:c3:4b:00:
c3:b3:ec:e7:79:30:93:53:ca:dd:d8:5a:37:94:e2:
5e:2f:73:74:82:7c:d7:8d:48:6f:bb:65:be:cc:28:
6e:2e:ba:9d:1f:0b:b0:49:a1:ce:78:f3:fa:22:59:
7f:21:b6:98:0e:99:69:c5:e3:b4:07:c9:25:79:3a:
a3:57:e5:4f:11:94:cf:54:f6:e0:b2:fb:ca:ee:59:
63:d8:bd:77:ce:25:49:8b:a5:4e:44:9d:95:bc:f1:
7c:9f:d2:2b:95:c5:38:d8:56:a7:23:48:d4:83:87:
2d:42:bd:2e:48:bd:64:90:1e:36:bc:d2:e7:38:a6:
33:4d:23:88:ac:9b:a3:e3:66:b5:81:f3:75:2e:cb:
fe:5e:01:1c:79:20:c9:6b:9a:19:3f:00:c1:93:6d:
21:64:af:14:0d:e4:e6:18:36:b9:8c:49:d7:54:25:
76:da:22:56:26:cb:61:3d:ac:f3:46:f3:82:25:b6:
13:75:cc:2a:96:53:e3:f9:bb:40:50:fb:53:6c:d9:
f0:1b:e6:87:2d:9f:96:fb:83:90:de:80:ab:34:c0:
1c:2e:8f:71:b3:eb:56:1b:7a:0c:b4:71:3c:85:64:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4D:58:DE:A8:3A:6F:F2:14:6B:6E:05:94:74:32:FB:D6:5B:44:EF
X509v3 Authority Key Identifier:
keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fb:91:62:6d:27:18:8c:57:70:a5:2a:f9:7c:62:67:cc:6b:
fe:65:ac:d7:0e:bf:a2:0d:1a:14:dc:0a:70:6d:72:cd:b8:d4:
16:22:91:0d:a3:aa:cb:91:9d:88:5d:46:0e:49:45:ff:1a:51:
ef:ec:ea:20:7e:2f:a4:8b:e9:11:6c:03:84:40:e1:fe:27:2d:
ff:3c:d3:7f:96:17:53:63:9a:ef:fa:7a:46:f3:90:c1:0c:c6:
eb:59:80:d9:81:75:5d:1a:93:1b:8f:27:81:2c:f7:f2:31:23:
49:8e:16:a4:14:1e:dc:a5:df:5f:06:ab:6b:e1:6a:e8:f2:3b:
15:d5:43:fd:19:65:71:e6:99:d5:86:e3:85:26:f1:dd:5f:6a:
7a:ef:b2:45:ee:43:86:73:1c:f4:88:d2:d2:7b:55:4a:d8:f1:
a0:0b:b1:24:ad:fd:9e:a8:e4:b1:15:4e:00:a6:80:33:79:0b:
bd:19:8f:13:a6:99:34:fe:be:2b:49:4a:ba:18:83:ea:81:7a:
a1:0b:ea:e0:78:88:c5:c0:d5:0c:8a:0d:a5:d1:f3:67:80:b2:
2d:3f:54:59:85:fd:1b:61:86:35:f4:33:9d:78:2b:c6:cb:51:
fe:31:69:83:c5:56:44:67:c4:f0:e2:ff:5d:40:0c:a9:77:ab:
82:e3:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:27 2025 by rpki-client