Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: ofvPCaUrcRYtlplXbEuFkhrwOia8etNNJoBIto4gW00=
Subject key identifier: 43:AB:4A:16:AD:1F:B1:D9:1F:71:2B:6A:A4:17:A5:59:32:B2:9B:B7
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 0197B9A14F32C34B4E86B2FD0B07113D72F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 03:00:45 +0000
Manifest this update: Sun 29 Jun 2025 03:00:45 +0000
Manifest next update: Mon 30 Jun 2025 03:00:45 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: TQufEeGiu2YpyGUarvCslfkc5Ifa73zBmQSMmGzPs7E=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:4f:32:c3:4b:4e:86:b2:fd:0b:07:11:3d:72:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jun 29 03:00:45 2025 GMT
Not After : Jun 30 03:00:45 2025 GMT
Subject: CN=43ab4a16ad1fb1d91f712b6aa417a55932b29bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:54:17:ac:e6:84:25:6e:ef:d2:81:4f:b6:
d0:1f:bc:0f:3f:d8:fc:b9:3b:22:de:16:72:ce:81:
42:11:1f:b7:96:a8:f2:1d:db:de:77:d4:d2:7c:fd:
68:40:81:88:53:9d:e0:ea:39:29:7e:11:b7:15:72:
10:fc:ad:43:8d:58:0f:44:14:81:77:c4:09:f7:fa:
fd:57:4e:67:02:ee:6a:a2:69:90:d8:4b:26:5a:4a:
3e:f5:c9:40:26:e2:f2:9a:21:73:a6:25:2c:b4:28:
e2:a5:34:55:a5:d8:ae:fa:15:c9:98:5f:2a:0e:24:
bc:74:be:ee:f6:1e:fd:1d:fa:de:9c:7f:2b:5e:db:
8d:fe:5a:2e:fc:f4:a8:2f:36:ef:45:4a:77:91:46:
b1:8e:51:f7:8c:9a:28:6c:52:80:7e:24:64:e5:eb:
77:ba:04:c1:ee:98:10:4e:6d:16:7c:b3:8c:7e:18:
96:c9:e7:dc:7c:bc:77:7c:d8:6e:ee:dc:13:83:f3:
b1:94:65:2c:d0:97:10:07:fe:98:15:07:50:a8:4d:
7d:e3:4f:bd:44:fd:a0:53:86:31:26:83:a0:5f:ef:
a5:b7:aa:7b:03:ab:f3:74:65:b3:f3:9e:35:c7:28:
24:ab:4c:51:b2:34:12:fe:af:17:1e:65:48:34:4d:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:4A:16:AD:1F:B1:D9:1F:71:2B:6A:A4:17:A5:59:32:B2:9B:B7
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cf:24:c8:32:b6:e5:99:2f:a8:53:72:55:2d:39:ac:f0:18:
17:ce:c4:1c:24:0e:0f:ed:c4:c9:6d:b1:04:ff:04:9e:07:d9:
b7:1b:c3:54:cd:0c:ae:f4:79:6f:97:64:23:17:f9:60:4e:8f:
ae:98:7e:2e:58:77:53:e6:e0:a7:ff:96:a9:d0:85:44:2c:c9:
28:77:9c:c5:95:7a:6d:53:45:52:e8:26:1e:48:00:54:e0:4d:
3d:1e:64:3d:0c:68:2f:2d:2e:96:56:c0:a9:64:c8:d5:1e:5c:
bd:c2:b4:9f:a0:b8:d8:fd:f0:ec:9a:8f:b7:89:f7:89:3e:2e:
e7:0d:4c:c2:8c:e4:ce:1b:45:dd:7f:c4:b6:c9:df:74:d4:98:
c8:cb:33:9c:fb:a9:67:9c:0e:37:0d:cc:a7:41:d6:2a:69:05:
b0:8e:a6:7d:47:15:ae:2f:d8:12:ec:73:2c:7c:9f:d2:11:74:
ef:b6:d2:15:9a:51:a0:54:a5:71:4e:eb:5a:0d:2b:63:2b:b8:
9b:56:ff:0b:49:6e:e8:5e:82:17:28:c1:36:dc:f7:6f:ed:4a:
b6:27:60:79:c4:c9:1d:b0:de:f2:ef:52:d7:f0:ff:d8:d6:59:
25:d9:8e:eb:88:68:0a:f4:45:dd:fd:8b:d9:c4:95:bb:14:ac:
4e:04:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:18:54 2025 by rpki-client