Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: RwGlNX3b5ZSF0P3fdPByFRdKymueWOIs42RxJU8k09w=
Subject key identifier: 3E:00:5C:39:BF:13:FE:44:D0:C1:2D:62:BF:68:0E:DC:CA:87:C3:36
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 0197B9A1D06D85BFF7CB8349E3146CB7283D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 03:01:18 +0000
Manifest this update: Sun 29 Jun 2025 03:01:18 +0000
Manifest next update: Mon 30 Jun 2025 03:01:18 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: G1MjN5H5EZEAnh6fNL5Ae1/dKlauQz0QCVl3fVONnMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:d0:6d:85:bf:f7:cb:83:49:e3:14:6c:b7:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jun 29 03:01:18 2025 GMT
Not After : Jun 30 03:01:18 2025 GMT
Subject: CN=3e005c39bf13fe44d0c12d62bf680edcca87c336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:18:1b:b2:7a:81:29:25:61:9f:e0:60:fe:
ec:4f:a2:40:c8:a0:de:62:b1:ba:13:1f:e7:03:3c:
a9:bf:ff:d8:a2:a4:4f:17:af:68:fe:64:6a:7c:ca:
60:7e:39:d8:d3:f0:cb:67:dd:a6:1e:13:32:8f:87:
26:6b:ec:c6:27:99:b7:d6:c9:04:72:74:41:78:a9:
4d:31:7b:fe:e3:8d:4f:fb:6f:fa:02:48:77:00:91:
00:14:fc:a2:28:20:9d:22:84:dd:e4:de:2c:ea:6c:
f5:a7:59:f4:6d:52:72:5b:d1:89:ab:f7:42:c2:0e:
72:28:37:78:9b:a6:10:11:4b:8f:9b:5e:3f:7f:46:
03:4e:99:5c:b6:f0:58:43:8b:90:a5:48:5a:eb:b8:
96:c4:21:77:e6:ab:ee:75:e2:e5:ee:b3:09:3d:79:
e6:33:3d:d2:8f:bd:19:52:d3:85:b3:a8:b4:77:ab:
df:54:73:0f:bf:c6:c8:10:cc:8b:c2:e7:73:5d:99:
01:16:36:2e:6a:ab:11:ce:7d:a9:94:b2:d9:59:e9:
ef:3e:c0:8c:0c:c0:f4:0b:82:dd:c8:4f:c8:4f:9f:
eb:32:51:07:39:a7:fe:37:10:6d:32:a5:79:93:60:
2a:01:48:3e:90:29:e2:21:28:a5:82:56:68:8c:71:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:00:5C:39:BF:13:FE:44:D0:C1:2D:62:BF:68:0E:DC:CA:87:C3:36
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:aa:b5:9d:02:c1:fb:6d:5c:c6:d4:0a:ad:5b:a7:b9:67:c4:
81:bb:18:5c:97:a5:d3:22:e6:94:78:c5:bf:89:15:18:ed:71:
28:78:70:1f:2a:04:1e:98:c6:24:ec:c3:ba:54:8c:99:26:b4:
78:83:ff:c4:df:ec:fe:b7:d0:9b:cc:75:14:55:43:ea:56:64:
cd:51:31:20:8e:46:9d:4e:0c:45:9f:68:9b:a3:da:91:52:68:
26:46:9c:04:9c:17:97:c4:53:81:5a:39:ef:de:d4:1a:c3:54:
12:2a:53:51:7f:5c:57:52:eb:2f:23:50:9c:85:61:9e:9a:90:
48:1b:23:86:db:aa:9c:3e:63:b1:d9:04:ba:d8:c7:80:db:62:
e4:d4:23:65:40:3c:aa:1d:b7:46:28:f9:3d:8d:09:aa:86:25:
2a:36:6b:db:16:49:0f:c6:ec:90:ea:51:68:fe:28:f3:9f:6b:
a9:89:c0:82:fe:de:ff:c1:65:c4:b1:bd:28:59:86:7d:16:a5:
0a:3b:c7:c9:c1:58:6a:77:68:0e:4f:48:05:bb:8e:8a:3b:34:
8e:8e:be:df:03:5d:da:a5:76:ee:ed:63:04:09:9b:d7:aa:e2:
6f:ea:41:76:59:5d:a3:a9:bf:92:16:17:e9:1e:fc:5f:2a:ad:
7f:f8:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:52 2025 by rpki-client