Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: BeE+AjAMbBnuDOpkWgByY/kUZ6ev+45YBb9VQb8Nt/E=
Subject key identifier: 37:26:83:73:03:1D:1F:F6:AD:C5:EE:8A:B3:BF:B9:20:A3:F4:FC:D1
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 0197B7EACC19092216A2D8D0C672191A3933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0CE6
Signing time: Sat 28 Jun 2025 19:01:47 +0000
Manifest this update: Sat 28 Jun 2025 19:01:47 +0000
Manifest next update: Sun 29 Jun 2025 19:01:47 +0000
Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: bfFlNBUxxm/KxV4gA91qJ1LhA+9Q1Zk+EDgh17F5UUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:cc:19:09:22:16:a2:d8:d0:c6:72:19:1a:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Jun 28 19:01:47 2025 GMT
Not After : Jun 29 19:01:47 2025 GMT
Subject: CN=37268373031d1ff6adc5ee8ab3bfb920a3f4fcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:aa:1b:15:56:4a:f8:75:2c:1a:c8:f2:79:
d0:cf:a9:16:d3:02:3e:88:d3:03:5d:92:21:28:68:
28:da:c9:d8:4b:1d:b6:f0:f8:a9:f6:85:82:2a:de:
e2:73:a5:24:1a:dd:a9:e9:14:18:d2:50:e4:15:2b:
6a:a2:a0:c8:4e:4a:21:32:ea:89:af:97:dd:dd:45:
af:d0:10:ad:73:49:2d:cf:b5:80:a5:18:d8:9c:d7:
dc:cc:f9:98:b2:90:b4:49:33:90:84:eb:b5:df:6a:
ed:68:af:26:8b:09:ad:f8:5a:33:82:7f:58:25:92:
17:0b:83:17:b8:32:f4:64:cb:cb:b2:09:24:dd:82:
99:fa:0d:8b:15:0c:4d:9d:ab:19:d3:bf:7f:03:f5:
09:07:ed:b7:c7:96:3c:53:e3:d8:71:ce:cb:64:4e:
9a:34:7c:8b:37:cf:ed:68:82:b7:4e:30:7e:8d:f0:
c2:2f:fa:35:cf:40:ca:f4:46:ef:06:e3:17:85:57:
16:01:4b:9d:00:60:30:32:59:b1:38:7f:0c:3c:98:
7d:55:b9:02:e7:86:e2:67:19:0d:b7:dc:b4:20:f0:
3f:a1:bb:66:6c:7d:e8:7d:80:b6:55:70:cb:b6:b2:
06:84:26:a0:5b:c6:47:99:6e:3a:0e:ab:71:d0:b4:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:83:73:03:1D:1F:F6:AD:C5:EE:8A:B3:BF:B9:20:A3:F4:FC:D1
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:73:49:af:ce:ae:49:ef:e3:4f:d6:1b:73:1b:ad:53:76:ac:
83:07:05:84:0a:38:78:4a:0c:87:76:34:1c:91:1a:0f:38:1e:
5c:e8:c5:5f:f2:0b:40:9b:20:48:6e:02:35:a5:67:08:c8:80:
41:d2:0c:4c:3a:f4:f6:7f:30:a1:69:f1:e1:0f:ef:c4:d6:c7:
fe:b8:2b:45:9b:c0:b1:50:5a:f7:d0:ab:95:28:ed:6d:8a:75:
fd:b7:ba:4d:1a:f4:a8:5a:6f:54:8e:7f:1e:47:92:f7:c9:25:
56:ce:5c:2d:3c:64:b0:aa:96:cb:a2:38:fb:16:9e:0e:87:c6:
16:1a:0d:3a:26:37:6c:0a:8b:4d:29:f3:73:55:e3:08:5d:f5:
a4:66:2d:ba:f1:bd:f0:cb:8a:7f:6b:a6:98:7a:ab:47:0b:76:
7b:b1:a3:6a:ea:82:85:44:39:25:28:9a:f0:6a:e3:c2:1e:d6:
d4:a2:32:4e:b0:ee:e2:d7:87:6e:d3:db:a9:93:e1:39:de:ad:
e0:f5:0d:19:b6:92:5f:16:a7:c2:46:14:22:f3:b5:8c:ce:9b:
fe:4b:02:6d:77:d2:41:84:85:5b:b8:1a:17:ae:ac:ef:a2:cf:
6b:23:0b:c0:ce:28:05:70:80:97:42:a2:30:51:33:31:4b:c1:
18:dc:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:24 2025 by rpki-client