Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: TibioF9otfvSJzpUNzmFVjxOSuFjLp+hiTa8/4u9T/0=
Subject key identifier: D2:66:D2:8C:A8:18:AA:C0:58:80:85:69:79:A4:6C:7B:3C:D3:BA:66
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 0197C681A9395A783438C18529FA971BA50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 15:01:15 +0000
Manifest this update: Tue 01 Jul 2025 15:01:15 +0000
Manifest next update: Wed 02 Jul 2025 15:01:15 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: UsJ+nOUiIUqmgIS9oauqBOH6Qg2+dzuUCrMb8/ZlbCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:a9:39:5a:78:34:38:c1:85:29:fa:97:1b:a5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jul 1 15:01:15 2025 GMT
Not After : Jul 2 15:01:15 2025 GMT
Subject: CN=d266d28ca818aac05880856979a46c7b3cd3ba66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:d7:aa:91:ea:b6:6e:fd:0c:9d:90:bb:06:
ef:80:80:bd:5b:57:c8:25:d9:d1:98:e8:24:a1:93:
12:6e:8f:9a:19:58:ca:cb:58:f0:12:13:54:60:7b:
a8:53:c2:fa:5f:7f:bd:e6:53:92:05:b2:63:4c:48:
f0:09:b9:1f:be:71:c4:84:2a:01:78:26:43:39:e7:
6a:0f:02:e2:da:a1:4a:97:28:e3:3f:81:8d:af:0e:
66:2a:69:00:12:eb:16:22:59:94:db:14:9c:9e:8c:
4b:a0:4f:8b:d4:e6:fd:1d:bb:2d:c7:d6:4b:b6:f3:
17:33:29:26:23:fe:9d:2c:f5:b6:64:11:a6:b2:66:
97:3f:87:f6:3f:f0:bd:24:b8:8a:63:79:87:bf:b4:
26:b8:87:cc:5e:93:ac:98:03:37:34:b7:59:55:a8:
82:64:f8:a2:59:e6:ed:b3:4e:7b:83:5a:03:86:5d:
2e:32:76:3a:9c:e4:49:cb:a8:ab:d5:4d:2d:50:7d:
85:75:94:6a:c0:e5:a1:21:85:97:25:7b:81:45:fb:
75:f3:52:11:7b:27:34:a8:14:a9:d5:c3:82:64:12:
83:f6:5d:ca:ea:d2:6d:06:7e:65:2c:de:c3:a3:d9:
9e:ee:35:f5:05:48:4a:cf:1b:e5:3d:07:71:6c:74:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:66:D2:8C:A8:18:AA:C0:58:80:85:69:79:A4:6C:7B:3C:D3:BA:66
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f2:5b:bf:f4:89:11:e8:50:f0:c0:fa:25:82:e2:98:4e:cb:
bb:10:1e:03:24:a1:94:fd:3d:8f:60:d6:b0:15:4d:c3:38:04:
67:0d:be:10:ce:fe:f8:a4:a7:eb:cb:29:a8:dc:c8:fa:a9:8c:
f6:3b:45:b9:e5:f9:ef:4a:7e:75:07:6b:d0:03:7c:55:e1:a5:
c9:dd:71:2a:97:c8:89:d4:2b:08:4e:13:ce:27:d6:0e:2b:1d:
39:27:e7:46:ad:46:18:44:a3:55:7a:f3:4a:78:ca:e5:3d:0f:
0b:9d:8e:d3:50:5b:1b:32:24:4e:ff:aa:1f:c6:c7:dd:32:5a:
d0:17:e9:e1:5d:e0:1c:d3:63:d1:13:30:12:58:6a:ec:d9:0d:
d1:df:4d:63:c3:6c:19:80:1a:32:a9:99:e4:3c:90:71:1c:8b:
59:b0:41:01:7b:e4:f0:64:d4:c6:5e:df:49:3b:aa:05:3e:08:
38:07:08:4b:86:95:1c:bc:02:92:1e:de:fb:98:2f:b2:f7:0c:
40:8f:15:e2:d4:8f:06:8c:98:91:fe:e0:66:60:5d:01:b9:85:
39:ee:b8:fb:b2:b7:4a:b0:32:41:64:97:46:2a:d4:c0:fa:f3:
11:88:8b:82:cf:53:92:5f:cd:a5:2c:99:e5:44:71:a9:88:37:
cf:a2:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:46:54 2025 by rpki-client