Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json)
Hash identifier: iy43tJdA6UJOuvLkMuEfEM8qKrip011+ZJTNoXVVnrg=
Subject key identifier: 5A:48:C1:59:79:E1:70:C5:7E:9F:D9:6C:2E:F2:41:95:04:81:F4:6D
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 0197B6D7658C3C5566795A3A8C8A36F14A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
Manifest number: 012F
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: 3rbnDYFhdBckEotfuadd533z59A.roa (hash: ax/QAEo9x6wJqdZmMwU9VRLc1EBYBU51K7GtG1XG70c=)
2: 9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa (hash: l74BXIsr9tFoOgjbmMSDMd1UV/QSFnTI8Mvo9Udf3LM=)
3: EYgXdph0ad7x7RpPlZyOENzd-oA.roa (hash: Hrugq5ntPmxP93lV9SDtZJap5r0QftcRWf7OkP/hZyI=)
4: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: Tvg4rCOEHSmQvnJH2dWqjqcF+RVIWwerIDAhW90UCBE=)
5: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=)
6: bReAPrtVMcAEhriuG0ae1idZpA8.roa (hash: +5/eycLGuxYpcqgi8DwCHJgtB3o69zqZ/uUvDsZXonw=)
7: gD3woXUC-WqortYqBWCfUTbN-6s.roa (hash: 4m9GD86eXZHIDuKu5606dRxx8eCf4kOZ5e1eJk9t9m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:65:8c:3c:55:66:79:5a:3a:8c:8a:36:f1:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=5a48c15979e170c57e9fd96c2ef241950481f46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:e1:7c:9b:b4:28:09:17:06:48:4c:3c:ac:
02:27:22:a7:db:6e:70:3a:34:ef:c0:ee:8d:af:1a:
48:7a:01:e3:77:62:51:64:31:6a:6c:32:67:8c:64:
ca:83:d4:4e:e0:03:14:2d:c1:66:a6:90:80:ec:1e:
74:7e:5a:c4:47:33:9e:70:95:33:74:9d:8e:99:d0:
c7:32:f7:0d:0f:e2:d3:24:66:83:c4:05:09:4b:d4:
e0:86:3f:a8:28:f1:8d:45:4f:85:05:de:92:f4:02:
cf:eb:0e:0f:01:f9:06:8b:03:58:c5:99:3b:f8:d8:
f5:ef:51:fe:9c:66:52:31:a4:5d:8b:a4:91:b7:89:
59:55:0b:bc:0b:8c:5f:65:3f:ed:f3:88:04:9c:66:
f4:4f:a0:cf:3e:68:69:f5:f4:d2:86:a7:36:ad:f0:
d5:63:38:2f:a3:0b:5d:ad:b8:14:f1:84:0b:e6:ad:
62:0a:0e:cc:97:ea:2b:1a:85:ba:81:92:84:ee:9c:
b1:e1:ec:6b:bf:ec:46:6a:94:bc:4f:71:63:e2:2d:
d9:9d:04:ed:81:14:20:8b:cb:2a:9b:f4:d3:ea:7c:
c8:37:dc:55:46:5f:9d:bd:75:a7:f5:ae:39:9b:d1:
4f:26:96:25:fb:7c:fb:e3:01:a8:a6:b8:c6:b0:fa:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:C1:59:79:E1:70:C5:7E:9F:D9:6C:2E:F2:41:95:04:81:F4:6D
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9c:26:84:76:d4:6b:68:36:4b:5c:b1:1e:d9:d8:db:d9:20:
d3:ed:16:98:58:03:e9:ee:db:da:98:9a:93:60:18:19:00:15:
96:91:5f:f0:a2:06:57:2e:b7:56:a0:6e:cb:9b:a1:ea:ce:01:
96:dd:e9:b0:21:b3:54:68:25:48:c3:74:c5:35:43:cf:87:fd:
b9:d6:65:8c:54:89:b8:a1:2a:9d:ef:95:7e:2d:6e:05:97:25:
00:1d:12:3b:2f:0d:29:9c:92:e8:d5:b1:02:c5:c9:ed:f7:3d:
1b:c1:58:8b:0d:19:b9:7e:15:d7:79:ea:f1:37:61:4a:94:89:
78:60:db:5c:f8:2c:51:47:6a:e9:1d:d1:41:c6:b6:f0:b7:80:
50:57:12:c3:37:32:5d:75:17:62:92:63:06:27:96:05:bc:97:
24:91:02:cb:e9:06:d1:60:51:94:95:9d:18:d7:33:0c:5f:03:
d6:00:bd:ff:05:9c:1b:97:2d:9d:37:57:5a:3e:ef:3b:2d:9e:
3d:97:39:bc:79:0c:d6:2b:3f:7f:e3:24:dc:60:8b:ac:52:2e:
32:12:c9:5e:5e:de:9c:c8:34:f9:d5:1f:00:d6:92:8f:35:37:
7f:65:e0:ba:87:c2:38:1a:ec:7b:30:2e:68:64:29:20:4b:e3:
9d:40:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:07 2025 by rpki-client