Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: mfhe1DvYLTQOGHRa78o5n5KSpZCvQ414TILAdoZGyR8=
Subject key identifier: 09:C4:05:06:83:5B:55:09:BC:DA:91:BB:1B:57:86:8F:79:5C:D2:12
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 0197BB5903A24EF21769DC0772E151B23993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 0F15
Signing time: Sun 29 Jun 2025 11:01:02 +0000
Manifest this update: Sun 29 Jun 2025 11:01:02 +0000
Manifest next update: Mon 30 Jun 2025 11:01:02 +0000
Files and hashes: 1: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: FAbA9mV4YMAnM9CuaCI1xxdsfvWVwtoRUMRV0b4+FdY=)
2: MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa (hash: ImO4oBWkVF+Qx8bpwB2w2UPJr50EG7WrYl+YWVWzFfk=)
3: q6mDakXCczwOucfjGR_MCayBN00.roa (hash: WHAyxlbQLqyJ/G0nYhz0U1oY3c2QkU4OXH4il3FpXbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:03:a2:4e:f2:17:69:dc:07:72:e1:51:b2:39:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Jun 29 11:01:02 2025 GMT
Not After : Jun 30 11:01:02 2025 GMT
Subject: CN=09c40506835b5509bcda91bb1b57868f795cd212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:f4:37:b6:08:22:f4:2f:e7:71:32:a2:25:
87:c4:11:5a:2c:04:e1:4e:92:5d:31:92:fc:61:da:
8c:52:9d:a3:ce:fb:6c:0c:ee:82:51:20:bd:3d:f7:
dc:aa:5c:cc:03:1f:ce:36:17:57:52:83:80:3e:ed:
62:a0:95:7b:0e:40:10:53:c4:25:8b:36:b3:4b:ca:
cf:90:05:3f:45:7f:53:64:81:82:1c:79:05:61:5a:
7f:b1:30:b3:33:44:1f:53:1a:16:43:5b:16:bb:ee:
fc:8e:3b:e7:97:86:c8:fe:f3:91:89:df:7a:f8:1c:
23:be:92:8b:6d:14:cb:f0:14:4d:da:c4:e1:41:33:
3c:c1:5a:1e:bb:d3:f3:23:84:64:ee:a7:0b:cb:a8:
0e:92:43:64:ac:6c:0c:65:f7:2b:95:21:65:69:47:
f2:eb:e6:c6:0d:82:77:48:94:58:1b:1f:ea:6e:05:
07:53:79:d8:db:e3:49:bf:1e:a8:41:60:7d:f6:a8:
88:c7:2e:23:96:60:35:08:f9:f3:a5:61:9a:1f:93:
12:f9:4b:c4:04:8b:89:5e:c5:70:9e:d7:59:7d:31:
5e:26:f7:1f:d4:15:cb:0e:88:80:a1:36:d4:62:4c:
7a:6b:8f:5c:b3:ef:96:c6:80:10:78:fe:c4:c1:f1:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:05:06:83:5B:55:09:BC:DA:91:BB:1B:57:86:8F:79:5C:D2:12
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:99:58:df:6a:e4:ea:77:e8:9b:c5:0e:9a:e5:e0:ab:7d:23:
86:5d:25:3e:47:ad:ea:29:31:0e:b6:85:45:92:04:08:3d:a9:
b0:b4:fd:1b:ee:09:0f:ba:05:cb:cf:08:cc:26:ea:84:c5:34:
db:bb:12:ba:c5:84:af:c9:4c:53:00:b9:b4:35:56:6b:96:b7:
95:44:10:09:27:ec:5f:0a:d7:0e:f4:90:61:e9:86:48:fe:cf:
f8:c9:4f:de:be:8f:15:3b:dc:c0:93:d2:f4:2d:d7:b0:56:cb:
e0:6a:25:c7:9b:53:e4:5e:1d:93:e8:6d:f6:33:20:da:f9:f5:
b3:f5:94:ea:f4:7b:5d:ed:7d:6a:74:cd:f3:3b:1e:58:d7:d5:
98:51:c7:58:74:35:8f:6f:e7:fe:a8:15:02:f8:b8:58:8e:b7:
9b:70:2a:01:0e:c7:e3:88:ee:e3:b2:a4:0b:8f:23:12:25:82:
c2:f0:08:f3:e8:38:ee:25:f0:e4:ee:1f:6b:51:49:8d:dd:30:
b2:57:01:66:b6:86:12:73:b3:04:c5:6b:4f:40:ea:c3:90:ca:
61:6f:0e:79:b3:ed:a5:b1:8f:5b:ef:24:51:42:5d:ce:fb:04:
81:6f:9c:9e:b6:bd:d6:b3:5c:eb:80:f2:fc:98:dd:4a:b2:23:
7f:40:d7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:58 2025 by rpki-client