Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: 93wO2t8lmB2z0kzBRQiLv6AOwPN0MFxIrKFob760FJI=
Subject key identifier: 36:58:6E:5B:56:89:B1:61:2A:3F:FD:39:DA:11:CE:8A:97:94:00:74
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 0197B8FD2C67184BE905D21A2757AD8047B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 12B3
Signing time: Sun 29 Jun 2025 00:01:29 +0000
Manifest this update: Sun 29 Jun 2025 00:01:29 +0000
Manifest next update: Mon 30 Jun 2025 00:01:29 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: pGtnVfyJjWpeYbPFKEYykGcw7gSXOk1h3nfokKwaCrA=)
2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:2c:67:18:4b:e9:05:d2:1a:27:57:ad:80:47:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Jun 29 00:01:29 2025 GMT
Not After : Jun 30 00:01:29 2025 GMT
Subject: CN=36586e5b5689b1612a3ffd39da11ce8a97940074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:69:1b:6d:e0:ae:33:c4:71:08:a0:bd:42:
98:bd:67:f9:0c:97:5d:1d:e2:f5:9a:8c:4f:0a:1f:
b7:cf:c7:1b:6d:a8:b7:3f:9f:47:87:9a:52:d1:a0:
75:e1:ef:c4:05:79:bb:17:50:71:6f:85:3c:27:a0:
f6:6c:3b:6b:29:ae:6a:53:bb:5e:2f:7f:b8:b1:60:
8e:0a:58:ce:19:c4:69:79:33:df:ee:84:03:bb:b1:
49:42:6c:e3:1c:d2:bf:09:db:ee:1e:96:b0:d8:e6:
e1:cb:61:49:e7:6b:df:14:0f:f3:c2:b3:3e:78:29:
c7:8a:a8:cf:81:03:9d:18:e9:b3:17:3b:b8:9f:fa:
9f:10:7f:2e:f4:d7:bb:49:ca:af:40:3f:51:d6:38:
6d:21:d0:fd:5a:9a:6e:09:19:29:51:de:52:3f:e3:
09:7e:3f:c4:50:16:de:39:d8:59:88:ad:b8:75:40:
90:ae:b3:a2:94:6f:a5:5a:1b:82:18:d7:14:bf:0c:
ef:7a:4e:74:a3:ce:6d:44:df:cc:bd:d9:2d:79:72:
d5:82:e5:67:65:13:49:a6:55:97:87:7d:81:69:85:
4b:00:3f:59:e0:4f:58:e5:2a:10:84:a1:7b:7f:99:
79:0e:7d:d4:49:14:af:e2:34:ec:dd:81:78:2d:62:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:6E:5B:56:89:B1:61:2A:3F:FD:39:DA:11:CE:8A:97:94:00:74
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7f:b4:ef:11:fb:80:f4:38:0c:9a:3f:69:e1:d8:24:a0:26:
ea:f2:13:27:7e:2a:ad:3d:ba:63:e4:87:89:11:6f:64:8e:10:
7f:7b:60:bf:98:01:1f:33:b4:46:54:ad:d3:92:18:e9:52:71:
d2:b3:0d:16:7a:51:17:7d:cb:56:b3:b0:ca:b9:45:ba:ff:9a:
15:16:85:18:eb:3c:39:71:45:45:37:60:56:90:d2:36:ba:db:
38:55:cd:0a:ee:66:9f:51:48:5e:90:1c:4e:46:5b:4f:49:79:
5f:87:d9:2b:1e:bf:ee:b8:c2:c0:95:4e:45:3f:72:80:27:30:
9f:14:72:b7:71:32:a5:67:69:85:62:e2:c3:8b:c4:f6:f9:e9:
fb:b3:8e:c1:bd:22:b6:76:31:73:ac:ec:09:37:a2:bd:6d:30:
52:96:94:37:ba:49:1f:73:43:2f:b0:2a:05:e2:96:01:ec:d5:
d3:ed:73:e9:d5:71:48:d7:1c:fb:1e:8c:6c:ee:8b:13:a1:53:
f7:8c:2a:c8:3e:ba:fd:c5:0d:66:11:7b:ed:ea:3b:19:97:f5:
f2:9b:63:9c:5c:46:8a:c1:09:c5:64:59:07:f0:e1:3d:0b:03:
c5:b9:bb:6c:78:c5:ef:fb:ff:77:b9:78:91:48:65:61:1c:49:
26:13:23:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:00:05 2025 by rpki-client