Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: 1/2kKGacqUM3zmscTu52aBtUzKtlDymZzQhD6ehG3B0=
Subject key identifier: A2:92:27:77:DF:A7:5D:EB:8A:B4:42:A3:DD:A6:E9:68:65:3E:FF:59
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 0197C6B868FBF2FC571F958C33F68D3818B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: E5
Signing time: Tue 01 Jul 2025 16:01:03 +0000
Manifest this update: Tue 01 Jul 2025 16:01:03 +0000
Manifest next update: Wed 02 Jul 2025 16:01:03 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: uDbvAE5ATNv/JTx8Wsr3QKwlYmbOfzbjBRlQ7zLq3J8=)
2: rGfdr756R5fC-L5KExb4TDe2AiU.roa (hash: 0pA9T2WOS5lidpDpCE8oBEOCaFYY8cP9PqllXsuIgTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:b8:68:fb:f2:fc:57:1f:95:8c:33:f6:8d:38:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Jul 1 16:01:03 2025 GMT
Not After : Jul 2 16:01:03 2025 GMT
Subject: CN=a2922777dfa75deb8ab442a3dda6e968653eff59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:99:21:b8:d8:e5:5d:af:36:91:7b:10:40:
90:03:b9:6f:5d:23:f3:52:cd:87:05:e2:73:8f:65:
64:c5:f0:0d:16:02:db:51:ce:cf:d3:fd:4a:c9:84:
37:49:bc:a2:7f:2a:95:70:9f:55:d7:19:84:b8:f0:
4c:07:00:24:ff:9d:df:7e:7a:29:2b:5e:86:a0:e9:
48:ac:a2:57:a5:de:cc:87:fb:7a:e2:33:ef:cd:7c:
f2:c7:47:d3:88:25:b6:b4:a8:5c:2f:66:00:02:c4:
11:31:8e:5e:bb:58:f8:b4:3f:73:9d:1e:cf:10:c1:
c2:39:74:bb:3e:4a:6f:2c:2e:54:b9:c9:e8:1f:e6:
9c:55:89:41:24:ac:9f:cd:c6:a8:c1:3f:86:f7:fc:
25:fc:9e:de:d7:eb:09:5d:ea:0e:9a:22:5c:30:2b:
62:5f:0c:e4:20:a4:e3:f9:b2:9a:8c:53:a7:4c:32:
0c:5b:41:fd:ac:bc:55:ab:2f:4e:f3:ba:ae:57:06:
7e:63:44:97:67:c0:94:0f:79:7a:88:88:86:c9:7b:
27:1e:37:6b:d9:f5:78:0b:43:1c:ac:f3:3a:bf:12:
88:b2:ac:18:fe:d4:76:47:bf:93:c3:48:f6:64:c1:
ea:d9:c5:16:98:df:21:54:12:96:33:2d:dd:ef:3a:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:27:77:DF:A7:5D:EB:8A:B4:42:A3:DD:A6:E9:68:65:3E:FF:59
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2b:bc:c4:78:5d:fb:46:ac:45:9f:2d:f4:ea:0a:62:8b:f2:
73:c4:07:6b:01:d6:36:77:39:7e:87:a0:fc:f1:50:e4:71:eb:
2f:eb:38:e5:60:9f:df:6d:db:ae:3d:ce:3a:43:1a:0a:8c:3d:
ff:07:4d:0c:98:ce:1d:28:87:62:78:49:13:bf:1c:de:ab:11:
e9:0c:2e:39:43:23:d0:c0:6a:66:a1:0f:cc:0a:96:c0:ba:9b:
bf:2f:a1:18:97:1e:c9:e2:66:56:10:f1:d5:fc:c2:c6:eb:6e:
ab:ad:09:1d:5f:9d:53:5c:e7:e5:61:f3:02:d7:e5:c1:45:bd:
f4:3e:b3:95:96:b2:fd:f9:40:d3:7a:8c:2a:08:2d:f7:44:ab:
0d:93:65:5c:86:87:61:c5:1f:88:da:2a:16:af:e0:bb:19:c2:
e1:5e:5e:92:0e:70:bb:db:a2:a3:ef:d3:0b:8b:fa:12:92:f4:
7c:f8:75:b1:df:8d:ed:82:78:65:1f:6a:2b:2b:a6:1d:86:67:
c2:63:f1:b0:47:db:81:1b:85:82:52:6c:4b:d1:ef:52:aa:92:
05:36:40:4a:39:09:97:89:07:d9:58:52:ce:c0:9e:00:9d:c4:
94:89:81:72:eb:bf:96:71:28:5c:a2:46:8d:46:7f:05:e0:b3:
5c:4a:25:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:31:41 2025 by rpki-client