Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: NiNXtwqp1PM5UjqSLxiTt+6383Pq6V39QrzjEsWVCuo=
Subject key identifier: B4:4D:70:FF:BF:E6:8F:AD:9D:E6:67:CA:99:F1:85:2C:8F:1A:7E:CF
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 0197B77C5CA256D16FAC17E4E412EDEC4A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0929
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: RKmtjmx8dGmZLS6fAJiBKQnORQs.roa (hash: uAM4Z/WN2c7W0xTj1SOSxZNG72uS1HvTkZghAtYIMtE=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: Zvc3b7HVOM7ZigqcHmG2fKimqB4ccApigHxxVmunt30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5c:a2:56:d1:6f:ac:17:e4:e4:12:ed:ec:4a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=b44d70ffbfe68fad9de667ca99f1852c8f1a7ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:ce:16:61:9b:a6:e1:5a:6a:1d:19:bb:ff:
7f:67:2e:e3:5e:68:22:be:f0:ae:92:a4:2a:0a:e8:
92:7a:57:d3:e0:a7:87:ee:f5:d9:73:57:2a:10:7c:
80:72:de:3c:b1:3b:e4:2a:7c:7c:99:01:2e:4a:dd:
de:36:ad:16:95:27:14:69:2c:9a:aa:44:0b:f8:a6:
9d:1c:5e:09:1b:95:a3:47:28:01:f0:fd:19:6b:0a:
5f:9c:75:e1:ff:e8:63:2a:29:3a:27:6b:af:bc:37:
f2:22:00:2c:5f:7b:e1:66:0a:bb:8d:d4:ac:ba:90:
44:6f:1e:15:10:d7:bf:10:44:e7:58:79:bf:1e:7b:
56:ee:79:dd:22:c1:86:f5:b0:73:21:13:04:37:b4:
db:fa:4e:1a:6b:42:12:86:66:6e:0d:f6:d4:50:4c:
8b:96:24:fa:af:7f:ca:3f:d4:5a:7d:fd:77:6e:cc:
d8:23:9d:b6:31:3e:19:6f:b8:ee:5b:50:d2:20:6a:
bb:9b:b2:c6:57:70:d1:44:4a:d5:08:69:7b:48:f8:
b9:d5:58:90:c6:ee:59:44:3d:b5:06:aa:6e:d0:dc:
84:5c:67:95:1e:6c:ee:85:6e:0b:3e:d9:7f:a2:84:
e6:82:b5:0f:63:79:f0:8d:de:d1:7b:b8:e3:66:9a:
dd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:70:FF:BF:E6:8F:AD:9D:E6:67:CA:99:F1:85:2C:8F:1A:7E:CF
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:49:a9:15:4e:51:46:1d:2d:49:ae:9d:4c:ab:80:b5:97:3c:
96:24:37:70:b9:e3:75:7d:cc:6f:c5:49:d3:52:42:7b:32:5f:
bb:08:cc:6c:a8:d0:73:bc:d8:13:c0:33:a6:9b:c2:5b:b4:fe:
dd:ac:6d:c2:d5:6f:f2:2d:b0:d2:a3:9b:8a:6c:80:69:66:14:
67:02:45:02:32:0b:bd:0e:e1:6d:81:3a:ae:a6:f0:7b:65:11:
56:fc:4b:33:d4:47:d4:b5:3c:5e:cd:30:08:d9:bb:68:b7:72:
07:da:8f:a8:45:fa:15:3f:b5:4c:7d:9b:a5:a8:d7:08:01:14:
58:4b:94:79:71:b6:41:09:9b:01:e5:6f:6f:29:65:1b:91:a6:
a0:d4:25:e3:0c:d1:b6:61:49:25:44:f8:35:70:b7:39:74:90:
a4:54:63:b3:b4:96:c8:f4:42:b1:25:39:5c:af:c2:6b:d4:b4:
8e:a5:fc:93:8d:d6:af:62:a0:3d:d7:1a:50:63:15:27:26:e7:
5b:0f:29:ca:2d:7f:29:14:b2:1a:c5:54:fe:18:81:92:d1:a1:
f7:85:2b:61:c6:49:13:7b:b4:4d:0e:07:01:9e:8c:52:d0:43:
eb:a3:bd:ac:9c:b6:11:a7:3a:15:6e:cf:33:b3:be:11:fc:48:
14:e5:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:18 2025 by rpki-client