Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
File: gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json)
Hash identifier: NL14wwv9pTFAxj2Y28VE6WmI5Znu5+zMlmnv7bJuG8o=
Subject key identifier: 3A:AA:E1:CE:01:9D:A7:D1:B2:23:7D:4B:0A:5C:57:78:96:01:FF:13
Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d
Certificate serial: 0197B88FC017754841BAD52A84DA6BA2D004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:01:57 +0000
Manifest this update: Sat 28 Jun 2025 22:01:57 +0000
Manifest next update: Sun 29 Jun 2025 22:01:57 +0000
Files and hashes: 1: JjOh7wV3uoOnT6pZLsppbv_LAZ8.roa (hash: QPSPPNn3Qn++fdP63nXuDi3yMhHz0vKFIROySBvf1mk=)
2: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: xG3z6cjKD2FC46UahSRlMcNexAf4t1VX66OurI0RxzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c0:17:75:48:41:ba:d5:2a:84:da:6b:a2:d0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d
Validity
Not Before: Jun 28 22:01:57 2025 GMT
Not After : Jun 29 22:01:57 2025 GMT
Subject: CN=3aaae1ce019da7d1b2237d4b0a5c57789601ff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:d1:d3:cd:85:88:96:cd:b3:d8:41:54:da:
b6:dc:75:db:a1:97:50:50:d7:eb:96:05:ef:db:8b:
1d:31:c8:5c:3e:78:92:91:06:24:ad:a5:df:a2:ec:
df:dc:ee:a3:38:70:92:18:92:80:75:ec:c5:ec:70:
39:b0:44:5b:9c:a3:30:96:72:a1:a7:36:72:df:d9:
f7:39:f0:4f:f6:d6:ee:87:8c:73:19:c9:94:8a:dd:
00:90:75:20:0b:16:9e:2f:3e:08:9d:aa:79:f8:4c:
99:bb:64:3d:33:2c:f7:f0:0a:c5:1d:a9:87:de:44:
48:7f:c7:87:e9:11:7e:74:5d:af:78:61:01:a9:8a:
0e:46:b4:ef:c7:61:73:ee:c3:01:6d:35:fd:52:c1:
f0:01:5d:fd:6a:b3:20:37:d2:bf:dd:e1:9d:d3:9e:
6e:06:6f:57:f6:06:60:b8:3a:4c:3c:53:b6:ce:67:
4e:db:89:13:46:d3:82:47:0a:2e:8f:9f:c9:8d:68:
f0:e2:7c:d6:ea:5d:62:c6:f2:cb:80:99:a4:aa:23:
f4:49:da:4f:7d:00:fe:f6:70:76:98:8b:3a:d3:96:
e3:81:a9:a1:09:d7:fd:c2:49:72:8d:c4:e6:ca:36:
cc:f7:dd:d3:c6:f8:e4:a7:d1:34:09:53:ba:d5:39:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:E1:CE:01:9D:A7:D1:B2:23:7D:4B:0A:5C:57:78:96:01:FF:13
X509v3 Authority Key Identifier:
keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:74:07:d7:ec:8f:35:a4:82:90:94:8d:c7:01:1e:af:79:c3:
cc:86:e3:79:89:99:a1:3c:86:bf:f6:cb:af:07:d6:cc:57:e0:
bc:8b:11:a5:5a:d4:96:7b:0b:12:38:03:fb:f1:f7:41:38:ac:
42:3a:09:fb:3f:99:86:40:38:1b:4e:7b:6a:a0:96:bc:8b:4f:
1e:98:29:48:e0:d3:2a:c7:19:ad:48:25:2a:24:f4:22:e8:74:
82:6e:b6:d3:a9:33:26:7d:e1:78:a0:3b:2c:06:a6:02:4f:c0:
14:1e:8c:05:1a:c4:8d:5a:ae:1f:1b:cb:5f:3b:7b:7c:d6:f9:
84:9f:50:39:43:ab:6f:50:b8:3c:0e:99:a5:44:98:40:12:f7:
82:2c:f4:eb:1a:87:00:da:07:33:7c:45:d6:0e:c8:3a:08:9c:
9f:3a:22:17:a0:3c:03:db:9e:c6:18:39:d0:97:13:b2:d2:8c:
be:ac:ba:cb:16:b7:21:00:9a:ee:85:a3:13:f6:40:ac:9b:b5:
5f:53:05:1d:1f:31:33:19:13:a9:f3:a6:cc:3a:6f:ae:95:65:
ae:5c:60:c5:70:9a:80:ec:f5:fc:ea:eb:68:c4:a5:88:82:78:
78:7c:d8:ef:74:47:ce:c2:a8:93:f6:82:2b:65:b1:df:43:08:
7d:c6:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:35 2025 by rpki-client