Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File: GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier: +AfMObirUwgEnUVsx5cJnejp8PXIpbO3eGHCkRrmMeI=
Subject key identifier: 00:B8:9A:3A:49:D0:8D:8C:A0:1F:C2:0E:87:AF:63:9A:B2:C3:EF:86
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer: /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial: 0197B9A1A2F6B22BB2D202DC971772A71A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number: 0C7A
Signing time: Sun 29 Jun 2025 03:01:07 +0000
Manifest this update: Sun 29 Jun 2025 03:01:07 +0000
Manifest next update: Mon 30 Jun 2025 03:01:07 +0000
Files and hashes: 1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=)
2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: ZgUGfHtxi0H5CjHTKjr11SFHobTY8zy0/apegOQkSjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:a2:f6:b2:2b:b2:d2:02:dc:97:17:72:a7:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
Validity
Not Before: Jun 29 03:01:07 2025 GMT
Not After : Jun 30 03:01:07 2025 GMT
Subject: CN=00b89a3a49d08d8ca01fc20e87af639ab2c3ef86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:6a:d2:0a:5d:f8:3a:f8:aa:dd:6e:ca:52:
25:5d:f3:60:0a:e2:b5:d4:2b:3e:55:5f:90:bd:5a:
e7:b0:7c:97:fb:51:b3:31:04:99:84:70:6d:28:be:
49:bd:11:d1:c4:96:2e:5e:30:74:1f:6d:ca:18:01:
cb:1d:9f:0c:b9:8c:c3:d8:03:f6:d8:c5:27:a4:0c:
45:ce:76:bc:78:ba:71:e6:94:bd:59:fa:b5:f6:20:
bc:71:6e:12:f6:81:e5:cf:c6:fe:12:c7:b7:6e:b3:
f2:78:05:f5:1b:ef:b1:17:63:44:97:c8:2c:17:60:
63:bc:b4:78:ae:9b:1d:7c:6d:5e:0d:35:29:09:3c:
21:6d:f5:cc:73:e5:5e:4e:f6:0e:24:2c:96:2e:a0:
60:41:36:ad:cf:9e:74:40:71:01:3b:9c:7f:1c:f5:
04:87:d9:92:d4:92:5a:39:10:60:ae:e3:36:d0:de:
af:e7:cd:0b:2d:63:47:f9:48:74:88:23:1b:c8:ad:
62:23:1b:e9:63:37:0d:d3:b3:88:35:4c:b5:30:d3:
ae:9f:f4:4e:bc:38:b1:8b:62:cd:76:be:80:9d:cb:
25:32:7c:58:6b:1a:26:54:00:54:5d:77:df:4f:68:
57:f6:0a:6f:ca:0f:41:4e:c4:c5:2a:b5:b1:95:ca:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:9A:3A:49:D0:8D:8C:A0:1F:C2:0E:87:AF:63:9A:B2:C3:EF:86
X509v3 Authority Key Identifier:
keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:93:d3:f0:87:fa:18:72:e0:d7:46:b2:4c:b7:36:6d:09:a3:
54:72:4f:7d:1a:28:2d:e7:93:5d:57:47:b8:2d:f3:34:72:0f:
6c:a8:b0:d1:98:28:8b:c3:c4:29:10:6c:a5:73:a3:62:fb:8b:
15:0b:95:32:10:19:24:2b:ec:5e:84:37:15:58:b1:d1:9f:42:
9d:79:6a:24:b8:98:31:20:e8:43:cf:c2:ae:7d:0b:54:9b:26:
b9:fa:22:69:23:fb:40:47:51:7c:d7:7c:cc:4b:25:29:43:48:
af:08:22:de:c1:cb:3d:9e:91:87:eb:e6:dd:44:12:c3:58:ba:
7a:52:2d:80:6d:ec:4b:ad:e8:b2:6c:97:85:65:d0:e5:99:a0:
b6:fc:c7:35:5b:d0:3c:2f:d3:67:b4:a4:05:76:73:59:4a:ac:
de:47:39:6c:69:28:98:7d:31:9b:b2:95:3b:c9:40:21:c0:fc:
9c:f6:a9:93:9d:a0:f6:36:90:2f:dd:03:ee:82:c4:16:4a:4e:
8e:c8:80:1e:ec:cb:61:91:46:cc:f2:8d:c9:88:48:1a:cf:01:
12:ea:e6:d9:b9:71:e8:94:b4:da:3b:f4:2d:ae:d7:84:bd:32:
7f:f0:73:48:29:ae:19:8f:31:d4:c3:7a:79:49:26:b0:fd:f4:
38:d9:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:25 2025 by rpki-client