Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: 9IlJGyS6PCDBHiL16oZH0sGu4Qbent+qy0Qrlc1pni8=
Subject key identifier: 1F:F0:90:16:EA:34:28:8B:3C:88:94:F7:F3:FC:11:47:D5:63:0B:84
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 0197B70EA0D6C48FAC74B086975E8EE5BE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 074D
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: jnoDNd2/xkSxI4yxwUPSEaJezhfdtgjFhmTimU14K8E=)
2: jXrYu6LJxwivjMZClD5ZjOpwIqA.roa (hash: ck7XGlXmTp2bXTd8xLW029LSmXtDoPF5+uZ9OUYHI7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a0:d6:c4:8f:ac:74:b0:86:97:5e:8e:e5:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=1ff09016ea34288b3c8894f7f3fc1147d5630b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:4a:79:a1:0a:de:c0:cf:05:f6:30:5f:ee:
1e:00:65:9b:f7:c6:3f:3e:36:b7:2c:a0:97:92:cb:
f0:f0:de:d1:73:08:eb:12:a5:e9:9f:93:fc:9d:ae:
0d:e7:04:f6:df:e1:c2:dd:ad:6c:b5:fd:ca:dc:f2:
19:6d:61:25:02:41:3a:fc:8c:63:ac:9a:00:34:e3:
69:6a:aa:ef:7e:85:d0:5c:0e:e8:d9:f9:fc:7d:11:
62:b7:ae:e2:33:ae:2f:7d:9b:85:28:00:ca:db:ba:
55:af:0e:25:e6:db:62:ff:ce:1f:84:6f:ea:44:65:
f3:af:08:34:0b:34:f9:e8:cf:ee:05:71:5a:2c:8d:
d4:d3:8c:81:38:4e:f1:73:72:2c:1b:b1:b0:c0:e0:
29:ed:c1:4b:76:ce:70:e4:a3:47:57:3a:8c:92:39:
12:a3:14:9c:cb:1b:d5:3c:21:9d:04:d7:8d:ea:35:
8e:3b:3d:70:f9:ef:d5:a4:d4:28:15:2a:c2:94:0b:
f3:5b:d2:99:32:aa:8f:ae:cb:b0:c0:f4:ad:16:8a:
6e:bc:c6:67:75:5a:f7:b0:4a:1e:32:46:a2:02:dc:
7d:a1:54:a8:50:18:a5:8f:f4:d8:05:03:28:c8:3f:
b9:62:ea:47:6a:0d:82:85:9b:4b:b2:47:8a:28:9b:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F0:90:16:EA:34:28:8B:3C:88:94:F7:F3:FC:11:47:D5:63:0B:84
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:62:9a:bc:2f:b4:02:29:0c:94:a4:fc:18:39:b4:72:56:9f:
02:f9:30:2c:2c:91:26:78:b6:60:54:12:23:57:ed:11:d4:1c:
89:e8:87:c1:57:7a:dc:b0:28:17:c9:d1:96:a6:4c:2b:21:cb:
4a:f9:a7:f6:22:ed:8e:26:81:81:21:b4:e4:1f:79:ee:b1:36:
f0:44:fb:1f:b9:87:28:74:4e:cd:63:cd:56:db:ef:b1:84:dc:
e8:b5:58:5a:a9:ce:2a:28:8a:5c:c9:f8:a4:8e:75:7c:ab:3d:
5e:98:e9:6c:ab:18:ff:5d:da:46:cc:7d:ad:76:49:a4:82:fb:
ad:5d:78:e4:f5:81:e2:9f:3e:f7:fc:75:b8:75:22:3a:37:c8:
0d:85:63:9d:6d:0e:1d:22:be:8d:5d:79:0d:2b:ef:5b:c1:66:
26:be:20:eb:97:cb:8e:b6:91:1f:40:46:d3:9f:c9:eb:d2:00:
a1:b6:cf:17:ad:9c:e3:b4:0a:ca:46:04:22:ca:76:73:a4:25:
8d:92:03:fa:3b:d8:1a:14:d1:ad:00:14:6a:62:12:01:60:ed:
ad:c4:d3:45:9b:41:e2:f9:31:d0:d2:4b:9b:2e:19:41:f6:29:
75:b2:73:17:07:52:5e:18:0d:5d:65:87:d0:f8:77:6e:eb:ba:
7e:10:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:22 2025 by rpki-client