Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: 5fdhWJryUCB3GN2a+soOOhE2QGx4fDTrfeenWCsfjGA=
Subject key identifier: F0:8D:DC:B4:6F:40:4F:53:0F:E1:E4:F6:6A:4E:11:C7:C8:8B:3D:B9
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 0197B7453449655D21E8B6FF2CC7398A7DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 09C4
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: UxenXBaR4tBjhiE8da7L9SaqN6WEhqhjhRXgLo92sII=)
2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=)
3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:34:49:65:5d:21:e8:b6:ff:2c:c7:39:8a:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=f08ddcb46f404f530fe1e4f66a4e11c7c88b3db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:9d:35:dd:28:19:a2:d8:b4:d3:5d:6b:30:
c3:a1:7b:d2:17:1f:c8:54:59:6e:73:b4:5f:f4:79:
0e:2f:8c:20:58:d0:83:6f:2d:e1:a4:46:b3:26:99:
54:70:51:ae:bd:d4:13:df:e8:08:91:ac:66:aa:d7:
7a:dd:e4:c3:9a:1f:5c:a5:21:71:1a:a5:7c:65:74:
cf:90:7c:4b:c8:1c:6b:0c:4d:e2:2d:99:15:b4:8d:
8a:f7:27:59:b0:9d:e6:f4:6d:bb:26:9b:c6:f4:1b:
ca:ff:83:e3:65:3b:c9:41:aa:d7:bd:3a:29:97:a3:
2f:08:cb:7b:dc:d7:24:45:ab:fa:2f:a6:b7:17:d8:
87:82:fd:59:e2:30:df:a8:ee:fd:db:56:af:6f:1b:
50:88:b0:42:8d:31:d9:4c:13:eb:77:e2:8f:28:46:
74:c3:34:d0:d2:b5:d6:c8:6d:65:b9:bc:89:a6:bb:
9f:0f:8a:f9:00:b1:77:bd:bf:17:a9:f3:4d:26:e3:
38:02:58:76:5b:6d:e2:3c:a8:34:a5:00:2a:64:5e:
21:89:16:f5:20:ec:00:15:fb:d6:58:65:6b:ef:b7:
9c:33:99:63:5b:f4:fd:59:72:04:16:6c:c4:50:bb:
f4:b7:40:3c:4b:a2:6f:d5:21:11:68:fc:31:59:12:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8D:DC:B4:6F:40:4F:53:0F:E1:E4:F6:6A:4E:11:C7:C8:8B:3D:B9
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:39:91:d3:43:68:01:ad:82:b8:3f:c1:53:40:bb:db:3c:d6:
1e:81:3c:17:1d:4c:05:b1:53:5c:f1:63:0c:99:9f:1d:67:d8:
b3:5e:fd:73:57:84:d3:3d:34:5f:d4:71:e8:bc:de:4f:88:41:
46:a3:23:6b:4f:ea:b2:32:59:24:88:8f:c4:6e:8e:24:4b:bc:
ac:29:eb:ce:50:5a:42:59:cb:d1:89:48:a6:19:25:a6:65:a0:
f3:ae:d7:00:74:cd:be:b8:2f:7a:bb:0d:7f:6e:3a:85:65:b3:
fc:39:ea:fa:84:59:9f:5b:62:d0:74:72:59:dc:a0:f8:28:78:
b4:06:6f:f5:7a:2d:03:1f:0f:29:8a:92:44:5d:52:2a:e0:fb:
8f:bc:73:04:fa:12:ab:ae:46:53:f1:72:b4:91:67:8f:a9:ee:
dc:44:2b:81:9b:95:6e:8e:ea:06:01:44:0a:47:11:1a:58:e2:
61:70:62:92:e9:da:9d:c0:a4:2e:17:76:b1:75:ff:3a:81:90:
39:b0:31:a8:e4:68:1d:8f:7f:56:76:8a:e5:18:1b:b2:75:d6:
ed:b3:96:00:e7:cb:11:44:12:47:9f:db:b6:82:4a:46:41:cf:
f9:8b:e0:b8:63:64:1b:f4:ad:92:7e:89:21:09:66:7e:34:c0:
2d:cd:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:53 2025 by rpki-client