Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: Xal6KBtfyD69pvWdmnEwHxykX6YmFqvbOyBicJFvLCU=
Subject key identifier: CE:10:71:BF:99:50:17:B9:A5:20:71:87:33:BC:72:46:7A:00:7F:A3
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 0197B6D73035E0B1C3057B986DD2DA381117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0749
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: Lu4geUiSKwFX1pSOTYhw1qqGABs1/O+ljfWL+I8f7jA=)
2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:30:35:e0:b1:c3:05:7b:98:6d:d2:da:38:11:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=ce1071bf995017b9a520718733bc72467a007fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:bd:80:4f:e5:f1:5e:cd:2e:85:8f:d4:51:
2f:30:41:cd:53:ba:12:87:04:43:06:c8:4e:0d:8e:
36:cb:71:d1:5e:97:0c:45:44:f5:ec:04:e4:91:79:
f8:f3:8c:67:5f:4f:08:22:73:04:11:81:dd:93:f5:
a4:e1:c9:74:99:9b:36:39:d4:10:d3:c2:cd:14:44:
d7:a8:c5:b7:49:25:3c:1f:85:5f:f0:87:9c:e8:23:
32:2e:81:e9:06:65:a1:46:78:ba:36:fa:78:27:3f:
e3:9b:97:c3:fc:eb:7c:01:3a:1c:d1:75:cc:d5:5a:
a9:c8:62:fa:8c:2a:76:41:36:d6:80:f1:23:0e:94:
86:1d:e5:2b:e1:cc:12:e7:fb:2c:7f:ca:e0:c5:27:
07:50:c7:5d:97:93:18:c6:84:bb:dd:5c:7f:97:48:
94:ec:1a:73:ad:16:de:72:cc:fa:d7:16:cb:24:a1:
b6:36:98:35:92:7f:b5:2e:80:df:88:e6:ed:a4:0a:
d9:0b:85:e6:2b:17:f9:4b:87:29:56:23:1b:c3:09:
2c:89:7d:33:cb:4f:dd:55:da:5e:26:a8:bb:eb:7f:
1d:d7:e3:d8:5a:5e:50:fa:3f:33:c4:e6:5a:30:ed:
12:79:41:68:d6:69:e3:60:f1:df:37:26:76:aa:7b:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:71:BF:99:50:17:B9:A5:20:71:87:33:BC:72:46:7A:00:7F:A3
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:75:cc:56:47:ce:36:ac:02:64:0c:54:1e:60:29:09:5b:03:
c9:27:51:f6:a5:f0:9a:19:bd:f2:3b:65:e7:56:0e:5f:05:ca:
5c:cf:5d:26:1d:d4:45:de:ca:5d:0f:a7:a4:96:bf:18:ee:65:
66:4a:17:09:17:eb:8c:f9:76:ca:ef:14:55:f8:8f:9e:de:56:
48:21:45:9f:a0:9b:bb:79:08:66:66:b2:81:5a:79:83:00:70:
0c:d9:21:47:8e:af:3e:57:28:69:68:ec:15:c2:f7:38:27:45:
36:e0:db:a8:f3:ab:a0:a2:d0:f2:08:67:85:e4:e0:e2:11:b7:
57:45:e0:b6:1a:1d:86:b5:ea:49:25:91:97:01:86:03:65:2b:
8e:71:d9:dc:0f:94:37:90:e6:0f:66:6c:e9:86:79:8d:ee:95:
26:9d:03:6c:ea:55:74:61:96:e6:75:5b:1a:d5:d2:16:0a:4c:
ef:fe:71:bd:c6:8c:16:dd:f4:17:d0:1b:2e:2c:fa:70:8b:9c:
99:a8:52:0d:7a:58:17:98:0c:82:63:c6:0b:e5:ef:cc:61:9e:
c8:43:2b:1d:10:0b:49:c8:e5:2b:ed:5c:4b:bc:d8:67:70:cd:
9e:2e:47:20:46:04:52:df:0c:2d:7b:7c:3e:81:44:38:e6:dd:
16:09:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:43 2025 by rpki-client