Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: VKqbY1HJ1gK8xnd1AXBvYVmtI3mocnHDYKFbfNXsNiU=
Subject key identifier: 22:2B:34:49:81:20:4A:C0:B4:D2:36:39:99:C2:AD:7E:EE:B6:57:26
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 0197B6D7967E2E5A819C2EFE4860D800D286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 0725
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: Gm9h4CAZzXv846ePSgJSdGqzKYQ+pSJGGkgB6bMChZQ=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:96:7e:2e:5a:81:9c:2e:fe:48:60:d8:00:d2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=222b344981204ac0b4d2363999c2ad7eeeb65726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:ec:2a:3e:98:f9:72:d9:64:5c:ed:5b:29:
db:dc:08:2d:d4:b2:aa:4b:e3:92:68:94:fc:bf:7b:
7e:1c:5f:e0:80:97:ea:f0:23:3f:c2:36:00:6c:d6:
c4:c4:f4:54:31:0f:60:37:1c:44:5e:47:cd:3f:2f:
2c:9b:da:f8:81:ac:ba:53:4a:37:15:d3:d7:a9:20:
3a:ab:bc:3b:4b:cb:c3:9a:c5:18:b4:d5:4f:b7:68:
0b:f2:9a:52:0f:27:7f:88:09:99:7f:42:44:78:d2:
89:b5:a6:d7:fd:05:d4:aa:60:22:b6:c9:b7:6e:59:
48:1c:ff:9f:b0:ff:f5:1b:3d:86:93:ff:ab:0f:da:
68:ad:20:45:7f:ad:bc:37:e8:eb:2a:04:64:8f:c6:
ae:04:ab:26:18:21:01:15:18:40:92:8b:75:30:76:
c4:1b:09:97:a5:d0:51:f5:0e:1f:b4:07:28:5e:6a:
07:72:64:a3:06:91:46:f4:b9:13:ea:7f:03:23:53:
c1:44:fb:bb:7a:90:a8:f0:0c:3e:8b:e1:48:54:4d:
41:bc:e2:10:f7:11:ca:a5:3b:ad:e0:ea:ef:74:55:
70:3b:16:29:0d:6a:aa:cb:e3:4c:34:b6:7b:8c:40:
53:98:a0:78:52:76:f8:fa:71:9e:69:85:c1:c9:8e:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:34:49:81:20:4A:C0:B4:D2:36:39:99:C2:AD:7E:EE:B6:57:26
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:43:12:f6:73:20:23:53:6f:16:6a:c3:72:72:c3:be:bf:
b9:33:ad:52:df:b0:f2:49:97:dc:61:dc:5a:32:e2:2b:27:ed:
76:96:78:7c:d9:e2:46:8f:22:74:2c:8f:94:e7:78:a5:41:38:
0b:56:c8:71:a0:ec:9e:3e:49:2c:34:f0:65:82:33:99:c0:fd:
7b:9d:af:d2:ad:26:d0:f3:5f:0f:cf:4a:d1:4d:76:37:ae:c3:
ae:5a:7c:6a:1a:8d:e7:95:50:df:43:e2:5d:a1:0d:98:13:bc:
9e:53:c2:d6:7b:e7:ff:04:a0:19:85:33:7f:e0:53:2e:0a:9c:
c2:e6:5c:8d:4e:3d:9d:d0:b1:93:fe:d2:2a:b5:e6:87:db:86:
53:e1:de:ea:56:a8:ef:f3:d7:87:2a:ef:3a:8f:53:dc:9c:01:
58:3e:8b:bf:56:a2:4c:f5:0e:45:ba:bc:ef:42:19:82:97:11:
54:a4:61:41:18:f7:d0:6a:04:82:04:2a:e4:1b:24:95:7c:1b:
8f:2b:48:60:3e:84:e7:19:83:d9:f7:4b:53:f4:37:c1:83:78:
80:fe:2f:46:ab:fe:2f:93:f2:6d:4e:76:33:8d:37:ab:2a:1f:
bf:ce:98:ae:78:a3:78:c2:d1:73:e3:83:23:9e:74:05:39:a5:
b1:27:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:47 2025 by rpki-client