Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier: 7FSoly8s1FOlfglobHnKOEZvCYWsVhKSMnmJ3R1FrbQ=
Subject key identifier: 77:39:2E:B3:84:5D:20:77:AF:6B:81:42:9A:B2:9A:37:A8:5A:D0:34
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial: 0197B7452E4243922EFF1E2BF16D2A82114C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: NoK584LcbfSXEhX+uUYBH1+ggYr9n95yEpyjsdwD0S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2e:42:43:92:2e:ff:1e:2b:f1:6d:2a:82:11:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=77392eb3845d2077af6b81429ab29a37a85ad034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ac:8e:55:47:92:e7:77:98:36:3d:e6:a3:e6:
c3:f8:a1:b2:33:19:c6:17:28:73:37:fc:30:61:73:
59:dd:c6:e4:da:f4:a8:8e:48:be:d2:91:9a:9b:0a:
c0:a6:ce:09:c0:eb:78:4f:49:64:37:08:84:c5:61:
e1:e7:a8:7b:07:3e:35:32:fc:28:3f:22:f2:de:eb:
d4:aa:9c:14:c3:8f:79:31:cc:5d:a5:bd:90:12:c8:
e7:d4:e5:c7:5f:92:de:a0:9e:17:0b:30:0b:2a:a8:
2c:c5:4e:48:be:16:b9:10:f6:5e:bd:6b:e0:a5:99:
02:38:0e:02:d1:e5:a6:e3:5c:72:61:5e:b5:63:5e:
5c:00:55:5c:ef:f1:c4:f0:12:fb:8f:cf:41:5e:fa:
6d:e4:95:00:16:e2:a7:a8:a3:0e:86:cc:7a:9c:bb:
54:79:bf:15:11:ba:79:a6:13:7a:8c:91:37:cc:ff:
b7:aa:f5:23:fe:d8:d6:4c:23:8d:55:cb:91:bd:20:
83:f9:7a:e4:c3:92:b5:8a:80:da:58:70:58:b5:a7:
7f:15:fb:7b:34:c9:7a:46:22:0d:b0:04:bf:45:09:
6f:ca:25:8a:42:a4:df:de:d9:8f:90:df:f5:e0:19:
d5:5b:5a:95:87:00:c4:06:13:9f:44:0a:a1:2d:64:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:39:2E:B3:84:5D:20:77:AF:6B:81:42:9A:B2:9A:37:A8:5A:D0:34
X509v3 Authority Key Identifier:
keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:04:00:80:83:2d:69:04:bc:cb:ad:9b:22:a5:6a:cf:0d:f1:
39:d2:f7:36:e4:86:61:a9:db:34:b4:99:bd:15:aa:97:0d:bf:
e7:36:a1:9c:3b:b8:5f:c0:8e:b2:c8:27:d8:82:fd:2b:79:9e:
aa:14:2a:a5:d6:44:ee:23:c0:66:17:02:98:a6:3e:7a:84:d7:
b8:ab:e8:e7:9d:9f:60:88:65:43:32:a1:d1:1c:af:d9:08:7c:
02:e4:4f:6e:4e:83:f4:27:98:f7:59:65:5a:c1:b2:c0:68:0c:
8d:ae:93:ee:6e:e6:b6:1b:51:84:0e:79:36:14:64:b6:f8:67:
91:28:fc:bb:08:d1:60:db:9c:93:8e:27:6b:f0:01:8a:08:9b:
9d:08:27:55:70:8d:77:e0:9a:53:61:16:c6:7d:5d:e6:04:62:
6c:46:4c:e2:3b:0a:91:ea:bd:d7:19:de:ed:17:7e:b8:d1:7c:
0f:a3:f3:c8:69:3f:b9:8c:7d:92:c5:c2:77:ed:12:d8:e9:84:
bf:3a:cd:96:7c:cf:13:71:96:97:e1:69:44:cc:12:8b:76:fa:
d6:26:98:14:a8:ee:8d:2a:52:dc:55:6d:be:36:28:d9:71:df:
76:82:26:27:c4:9e:03:ec:49:52:45:44:93:5d:c3:92:8a:89:
fc:58:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:59 2025 by rpki-client