Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: LCjC+3cjE3tLwNupQcvIRTxtK0+k8WcblmWIiyF5rBY=
Subject key identifier: BC:DF:0D:4F:BE:2E:22:6D:E5:FC:F7:26:1F:D3:D7:54:9F:EE:35:C1
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 0197B7B2E35C283943CC9174A6786CB2D4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=)
2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=)
3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: 6umhmNapr1/eS0l51UnewMw6rpH6obMWzQ0AjpNjUak=)
4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e3:5c:28:39:43:cc:91:74:a6:78:6c:b2:d4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=bcdf0d4fbe2e226de5fcf7261fd3d7549fee35c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:51:82:07:33:2f:ef:d1:e3:4b:a2:40:7e:
38:65:49:87:69:65:b2:b9:f8:6c:f1:10:9e:d0:2a:
86:9b:39:b7:9d:e0:53:17:d7:8c:cf:54:07:df:69:
13:26:51:fb:28:ae:82:f1:86:11:1c:21:de:05:f8:
6a:e2:0c:91:0b:5d:9f:ad:34:7c:5f:e3:97:6e:f3:
57:41:7c:18:92:d3:39:3f:db:a4:2f:65:7f:e1:c9:
35:c4:1c:17:2d:94:12:c3:ac:f0:24:ee:1f:15:51:
23:2a:31:b2:70:37:3b:ed:a5:47:26:a2:70:b7:61:
e3:8e:a1:33:a2:07:02:77:3b:89:83:70:a8:d5:d9:
23:cb:fb:52:d8:60:d6:ef:74:22:c0:53:46:e3:eb:
38:42:db:9c:25:f0:a7:17:a1:be:06:69:e4:3d:53:
0d:74:96:01:a4:5f:5d:9c:59:0d:11:3f:d7:bb:9c:
88:20:29:3d:bf:32:1b:c8:a6:b8:d3:88:bd:4f:33:
05:09:eb:00:3b:51:af:14:43:29:9b:6a:42:48:79:
d6:4c:3d:5f:7f:9a:31:21:cb:eb:0c:78:1a:0c:4f:
d3:cf:e1:c5:e5:0e:02:69:1a:b0:27:d7:22:fd:ef:
df:2d:4a:65:c9:cf:47:80:bb:27:79:bc:66:9e:d6:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DF:0D:4F:BE:2E:22:6D:E5:FC:F7:26:1F:D3:D7:54:9F:EE:35:C1
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c2:05:60:33:3d:e6:c0:e6:11:3b:fc:11:10:2d:1e:43:29:
50:3d:4c:2f:e9:ac:fd:76:05:c7:5d:9d:57:f8:c6:ec:30:87:
b2:2e:08:46:09:99:8d:cc:0e:86:9c:ec:64:be:be:c9:76:9d:
8c:e0:1e:c9:00:1d:58:46:aa:31:63:bc:b0:6d:02:62:80:d8:
54:6f:d7:ff:e4:56:35:d1:c7:04:66:47:c9:81:b8:94:09:ca:
df:7f:84:9b:7a:8a:3c:ca:8f:fb:7b:ca:04:cf:fa:f1:43:d6:
5e:26:4f:84:26:8e:11:72:32:dc:3a:48:31:e3:07:d5:6d:38:
11:a3:cc:6c:e0:04:44:3c:f8:db:7c:a3:d9:8e:c1:9f:04:b9:
d5:d6:ec:3c:68:ac:6f:35:29:37:55:92:1f:a4:f1:0f:4a:e6:
fe:8e:dc:ec:ef:dd:3a:9b:8b:63:a9:33:c0:4f:c9:8a:5f:fa:
c8:81:56:b7:5f:90:db:a9:c8:48:ca:d4:41:8d:20:e9:9e:e1:
dc:f8:01:d8:33:25:06:18:c9:a9:07:bd:16:70:0f:f0:f1:5a:
b8:96:2a:d5:da:1c:3e:3a:f7:32:28:20:40:8c:cd:6c:fa:19:
7a:e1:f7:49:84:f6:66:2a:65:39:17:96:e3:52:1f:71:69:06:
06:44:91:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:33:36 2025 by rpki-client