Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: WGSazQlrKJ+yKhb6W2wtiT3kBy5eHNgnXj1fF+MBBiw=
Subject key identifier: D2:64:52:C2:C5:9C:B8:EB:0B:5B:E7:8B:85:98:2B:BE:F2:48:BA:35
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 0197B70EE2E052EF5F447FCE39287E534143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 1296
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: TEAsR3dDu1jS6cXWuLRviNVM6UN/gDQcSKbcKawMQGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e2:e0:52:ef:5f:44:7f:ce:39:28:7e:53:41:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=d26452c2c59cb8eb0b5be78b85982bbef248ba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:60:25:29:5a:0e:68:e8:53:a4:82:b4:15:83:
6f:70:21:b0:9e:72:52:1e:48:59:25:0a:2c:35:7c:
4f:9b:15:1b:fd:f6:5d:23:bb:d4:22:59:79:08:b9:
90:68:ec:f7:f5:17:d0:9b:4c:ae:1f:f5:4f:dd:e6:
35:cb:6b:3b:17:c8:3b:97:85:5b:c1:d6:12:a8:13:
d2:40:cd:de:86:59:21:af:b4:be:11:b5:60:4e:56:
51:6f:3e:b3:f4:d6:21:47:9a:ed:68:0e:a2:c0:7c:
2b:d0:d4:8a:16:73:4a:af:c4:15:7a:8a:5c:82:f4:
4d:71:8e:8d:23:7c:05:b4:41:67:f9:ce:6c:99:4c:
82:c4:af:8d:ca:e6:d7:7b:f5:91:85:f4:58:fb:f6:
27:37:33:b1:fa:67:f2:03:05:58:9d:52:3b:ca:45:
92:00:6f:cc:51:e1:33:ce:59:62:48:3f:3f:23:f6:
78:49:c6:ae:98:d7:43:36:cd:fa:d2:b2:eb:25:1b:
46:dc:33:87:b2:72:56:8d:03:8a:89:3a:21:46:f6:
72:cc:25:af:86:0d:57:aa:3c:f2:1f:2d:87:ae:f4:
93:02:1d:b5:31:94:7a:d9:33:36:46:2f:c0:9d:70:
42:62:64:d6:9c:48:da:b0:8e:4a:28:6d:66:dc:70:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:52:C2:C5:9C:B8:EB:0B:5B:E7:8B:85:98:2B:BE:F2:48:BA:35
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:de:ca:a6:22:ff:a2:5d:f8:31:f6:94:37:f3:f9:13:b7:96:
55:f3:78:b6:15:3c:50:b5:f4:ce:e2:fc:1e:59:3a:96:d8:7f:
f8:32:e1:c6:b7:95:81:a4:a6:86:16:0f:b0:ed:0b:ac:af:8b:
ee:e4:2b:52:db:d4:1a:9b:1f:ce:21:cc:c8:40:02:ab:59:8e:
8a:f6:c0:c2:bf:18:bb:49:c1:e1:fc:a6:a0:11:1c:8d:84:51:
67:a3:06:33:df:ba:cf:ef:9f:6e:c6:8c:d3:99:d5:e1:e8:b9:
c5:a3:f3:7a:66:dd:2d:e6:35:93:11:59:eb:7d:4f:3b:ab:1a:
0f:f3:03:f9:87:df:1a:92:a4:96:f8:be:0f:e1:99:c9:23:1b:
7d:14:2f:cb:8e:5c:3c:31:77:44:3c:1b:46:f0:b0:41:2a:1c:
6e:5a:5f:2b:5f:fe:7b:09:e8:84:4b:ec:85:7d:e1:7a:1c:0e:
b3:f1:5b:c4:ba:4a:1d:ef:1c:4b:c5:9c:a4:33:d6:f4:90:6b:
72:3c:8e:ce:f6:4f:65:ed:5e:4b:d8:66:f0:29:ab:a6:90:60:
c9:78:ea:ca:5a:2e:14:6a:f4:f0:2c:75:64:3f:7c:b5:30:88:
aa:66:89:13:ee:fc:3d:1f:ca:08:36:55:4f:a0:c5:0c:90:67:
f1:65:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:40 2025 by rpki-client