Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: rIX03MXl1TrHuKFAIwiRaOSUYt0GvDiMypwL7oLrfXM=
Subject key identifier: 49:15:F6:DF:8C:A0:D5:6E:EE:67:39:A7:73:A8:6D:25:C3:23:4F:FC
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 0197B6A192CBF3B72C7521CA901385083B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 02DD
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: mmeWfP+/60c2BcXJ/9qCCLpb5LVE877eVYBK7qbxKYo=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:92:cb:f3:b7:2c:75:21:ca:90:13:85:08:3b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=4915f6df8ca0d56eee6739a773a86d25c3234ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:2e:c3:55:ea:94:2b:9a:a2:14:ef:02:ce:
d6:30:28:f3:26:e8:0e:ba:71:b6:53:4c:36:00:fb:
e6:35:21:99:87:4a:cf:5d:f3:7f:62:0b:3b:33:be:
f7:48:57:2c:37:64:fb:d6:5a:23:12:ea:0e:fc:19:
ee:a3:47:42:8f:62:5d:eb:65:79:40:0d:b0:ce:e8:
97:ca:67:aa:18:e3:bd:d4:71:c0:82:e4:38:dd:27:
bf:42:21:45:f7:60:79:61:44:f0:1d:d9:ea:bf:66:
45:9a:11:77:0e:41:85:0e:aa:a8:5b:ff:f1:03:6e:
7c:4e:54:72:53:13:ba:f2:63:aa:4b:e1:27:67:c2:
a9:04:61:35:7d:df:4e:71:89:b4:db:16:09:7a:fd:
72:f9:a3:26:a1:f9:c0:82:c8:32:0e:43:3e:7b:9b:
fa:45:99:4a:51:8d:4a:66:1e:20:17:26:b6:0e:b9:
fa:ab:c8:7e:ff:66:d5:1c:e8:c3:2c:2b:c4:0c:26:
f1:ea:a0:67:cd:12:24:a9:47:58:05:d3:37:0f:36:
bd:08:3b:1f:96:66:f3:fd:78:3e:6b:4b:d6:18:de:
18:27:80:75:90:86:0b:fb:31:14:64:35:f8:2e:a8:
8c:f9:3f:05:60:4b:a4:15:cd:09:83:ce:6d:93:4a:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:F6:DF:8C:A0:D5:6E:EE:67:39:A7:73:A8:6D:25:C3:23:4F:FC
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:80:cd:ca:ef:6d:c1:9a:c7:63:4e:5f:93:1d:ac:fa:ed:27:
09:41:5e:2c:58:fc:a2:33:7d:ff:cf:72:3d:b7:7d:e2:21:30:
b1:22:97:3d:89:b5:55:01:56:25:5d:04:35:27:78:fc:bb:94:
c6:4a:1a:4f:4d:01:a2:e2:db:4b:c4:e8:69:1f:24:04:a3:70:
f0:71:58:58:eb:a5:c8:e5:24:b9:c3:62:e3:cd:25:c0:31:42:
2f:51:6b:64:39:e1:9f:2b:f4:7e:0e:b2:91:94:b4:fb:1a:75:
51:b7:4f:e4:ba:eb:fa:92:90:2c:88:2e:36:df:16:d5:32:4a:
c1:21:24:f9:82:0c:16:a3:db:18:23:11:af:bd:a1:cd:1d:b1:
d3:33:29:fb:a5:a9:ac:d8:7a:c3:24:c3:c8:b2:7e:15:39:c5:
fa:0d:d1:61:1c:b2:e0:46:f2:e1:f4:68:ea:3b:ab:dd:6a:e3:
24:e9:d2:88:d5:ea:33:68:01:45:18:d7:58:a1:9d:54:1b:ac:
d1:9a:f7:c6:29:15:41:33:71:31:a5:e7:d3:db:40:37:c6:45:
31:01:94:b5:46:34:52:09:0a:1d:a4:b4:b5:e5:84:93:8b:a2:
a0:3f:36:33:2a:d4:60:cf:ff:f1:8a:b5:05:55:d6:ce:e3:52:
ea:e9:16:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:57 2025 by rpki-client