Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: aVLJThM8eRlMepV7QWNPYpkehqFaqo3rXwQVxKIHTto=
Subject key identifier: 01:9A:F8:F1:C5:24:C2:A0:00:7B:4D:57:8E:96:E1:D4:DF:E4:63:0B
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 0197B6D75DA96066A5F2E81D837D46373313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 1302
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: vaV9ZYLa0L6OyZBSzQWgShtaVzWUZxV1u1l1hju6GK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5d:a9:60:66:a5:f2:e8:1d:83:7d:46:37:33:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=019af8f1c524c2a0007b4d578e96e1d4dfe4630b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:ae:b6:7e:a7:4d:10:f6:fd:76:16:a3:26:
2f:72:65:c1:c3:5f:a8:4f:9d:b8:55:24:c9:03:8b:
da:7d:45:fa:67:43:c3:96:fe:cd:f8:43:9f:c6:96:
5e:d2:a3:dd:4b:39:e9:86:95:22:0a:e8:9f:68:66:
6b:c5:c2:28:25:ad:ef:70:5e:2a:e4:fe:f8:b2:fe:
0d:09:43:cc:0e:18:12:e1:66:46:01:60:d9:c0:0c:
04:9c:87:c6:6d:e6:f4:01:85:43:62:0c:28:c0:17:
54:f6:e0:b1:e7:f8:9e:19:19:08:8c:e8:05:ec:0c:
a2:b0:eb:eb:97:f6:a0:d3:40:44:33:0b:c6:3d:fd:
a5:8a:b5:10:6d:95:c7:44:e8:13:21:c2:75:7a:67:
fb:25:04:44:19:79:24:1d:b3:c3:f6:ed:7f:d8:b1:
65:37:dc:4e:f4:2f:12:31:fb:fd:9d:74:67:cf:be:
59:c9:ca:da:e5:d1:a9:01:1b:03:05:b6:08:91:0a:
c1:05:f1:e8:5f:4c:56:36:16:fd:19:19:bd:55:c7:
e5:a9:e0:9a:1a:ad:0e:49:75:55:a0:57:d0:94:dd:
0f:5b:33:74:c3:44:11:da:55:04:cb:29:d9:55:06:
f8:2b:17:dd:f4:e4:e8:db:eb:d6:1c:7c:33:be:5d:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:F8:F1:C5:24:C2:A0:00:7B:4D:57:8E:96:E1:D4:DF:E4:63:0B
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:4e:d8:4b:7d:e9:a3:f3:be:1c:00:df:2e:ba:e1:5f:1e:
d6:4b:e9:09:37:fa:9f:0f:77:a5:f3:15:61:c1:00:43:57:0d:
bc:ab:51:ed:88:e1:63:83:de:62:5d:5b:c4:16:6f:ea:7f:49:
7c:b7:6e:25:ec:d4:b9:64:8f:3d:40:d4:fc:c0:a5:71:96:9e:
fa:93:b0:e4:ae:4c:8d:fb:9b:4a:f5:90:62:18:95:ae:0e:e3:
2d:33:fd:1b:05:a2:1f:12:97:e6:d3:8e:d8:10:0a:4f:3c:df:
2a:1b:7a:66:7a:c8:89:17:cf:d7:4d:71:e2:f3:cd:f9:59:12:
8d:a8:1f:9c:e4:a2:42:da:86:4b:98:9a:3b:26:1e:16:ee:80:
26:28:aa:0a:d1:80:c5:c9:0a:26:8d:e3:df:55:8b:02:b8:74:
c0:5f:1b:39:98:12:9a:5c:df:2c:40:6f:43:50:a1:44:58:68:
12:49:ce:e4:0c:ae:66:23:04:96:01:6e:4e:f8:76:7c:6f:ac:
e2:e8:fe:1a:80:e5:14:63:d0:09:85:f2:d6:ac:90:e1:64:10:
fb:d0:c7:5d:c6:4e:6e:42:04:17:7f:10:7f:9f:a0:48:15:76:
6a:1c:37:23:67:53:73:bb:01:a9:35:b1:72:3e:c2:a8:00:24:
c1:ad:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:47 2025 by rpki-client