Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: bKGtqOhUxJuPbjN/O6HEcX2sduYyBPAd89aXJZseKeE=
Subject key identifier: 84:F7:49:C2:7D:6D:9B:2D:2A:FD:4F:CA:63:AB:01:F8:6A:76:0D:0E
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 0197BA0F74A8326B5940EB10945C72D6C444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 0B4E
Signing time: Sun 29 Jun 2025 05:01:04 +0000
Manifest this update: Sun 29 Jun 2025 05:01:04 +0000
Manifest next update: Mon 30 Jun 2025 05:01:04 +0000
Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: R67knbZOjECKgrthSktSWx3ZSFcEywMLI5hXaaZ0YWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:74:a8:32:6b:59:40:eb:10:94:5c:72:d6:c4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: Jun 29 05:01:04 2025 GMT
Not After : Jun 30 05:01:04 2025 GMT
Subject: CN=84f749c27d6d9b2d2afd4fca63ab01f86a760d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:9c:c2:4e:94:84:d5:72:c1:03:ce:bb:8b:
b5:8a:40:21:d6:df:b1:27:ae:ce:27:b4:56:e2:57:
6b:94:03:31:c2:a7:39:dd:a3:7b:5f:5b:90:7b:40:
4d:e7:01:f5:be:74:b8:ff:c9:5e:e0:6c:6f:11:27:
de:b5:16:b0:c3:86:d7:19:de:c2:a1:0c:11:86:f9:
bf:6d:d8:e8:c5:47:35:af:12:ee:8d:d0:9e:61:d8:
50:af:44:07:7d:de:8d:08:94:a1:c0:ac:dc:25:90:
e6:b3:0b:69:87:8f:27:87:d7:ae:b7:a6:50:88:36:
0c:29:c8:fb:e7:25:43:98:7d:49:0c:5c:42:ce:df:
59:8d:d2:f4:9f:73:48:ca:9f:a9:7b:fe:51:1a:df:
90:a2:8a:eb:f7:32:87:90:5a:23:54:4a:59:ca:b3:
6e:0b:dc:eb:3d:41:a8:80:0c:5e:31:40:f2:42:5b:
1b:04:54:5d:d8:08:9c:4f:1f:4d:8d:00:54:bf:23:
1a:4c:3a:9a:9f:ab:c4:f0:04:0a:52:c8:67:d4:c7:
2a:0f:f7:f8:db:f4:e8:a8:df:ea:71:dd:dc:8d:06:
51:59:60:06:83:36:60:95:63:bf:a6:93:37:2a:d4:
2a:3c:bb:f5:18:41:16:9b:b2:32:fd:f7:f9:a0:1e:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:49:C2:7D:6D:9B:2D:2A:FD:4F:CA:63:AB:01:F8:6A:76:0D:0E
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:eb:c5:c1:1d:16:47:85:1c:57:d1:f3:41:b8:a8:ea:88:67:
85:a1:f6:45:52:8d:b6:cb:9b:2e:3e:24:bd:03:5c:55:eb:9e:
5b:2f:d6:f7:ac:f5:36:38:94:ea:a0:52:d9:7f:f0:2c:da:7a:
42:fe:f8:e6:6b:68:fb:44:7d:47:33:8e:44:d6:36:47:cd:55:
a2:70:a1:71:a3:2b:c6:bb:87:38:95:a2:8d:69:22:38:b7:a2:
68:93:ca:76:af:9b:6f:65:79:8b:e0:90:7b:07:c2:df:08:bb:
b9:dc:71:12:8f:bd:d8:a3:a3:c4:ea:a1:46:c1:de:8c:91:42:
fa:a6:7c:78:1c:64:4f:7b:49:aa:4a:e4:c1:1c:c2:e8:91:cc:
5b:ef:a6:7e:f3:4f:9e:83:87:3d:58:f1:87:58:f3:96:32:62:
d6:52:5a:e9:f7:a5:c3:cd:3b:73:46:6c:06:f0:d3:96:a8:c3:
64:0d:17:13:14:73:27:91:b5:cd:07:cb:2a:06:cb:e9:2e:dc:
e5:0a:9d:d0:c2:76:57:dd:ae:56:ee:da:52:99:6e:3b:4b:77:
be:4b:3d:1a:98:61:90:78:a3:af:7e:df:0c:a0:8b:db:ad:16:
74:8d:7d:d0:d2:e1:41:4a:a0:69:a2:3e:67:af:f4:35:4a:87:
0e:bb:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:43 2025 by rpki-client