Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: nSotub+7gJoTw6MbSm1y1g3oKcIL/GJ8NRGYXd8/+aU=
Subject key identifier: 44:E8:9C:8E:29:B1:10:F0:10:12:83:73:38:29:55:6A:DF:C1:4F:1C
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 0197B6D798C0C774458EF444628D80828923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0C0B
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: DqE2wz/izIc2VtYV9Hjm2vX4Y+1jKrLoyF9xMVRpHuo=)
2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:98:c0:c7:74:45:8e:f4:44:62:8d:80:82:89:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=44e89c8e29b110f0101283733829556adfc14f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:0e:71:62:e0:fe:b4:5d:c4:7f:3e:e0:66:
60:d7:8e:3e:96:fb:29:20:34:7a:2b:49:94:a4:78:
88:37:ec:f1:ec:4f:6d:fb:a1:e4:a3:31:a5:45:fd:
67:1e:1c:fc:6e:65:d9:b3:bf:ef:a6:6c:48:78:d8:
b8:ea:5e:71:d5:3b:c2:77:85:89:55:b1:18:7b:51:
7a:4b:41:fd:5d:67:c5:2a:27:22:78:32:b3:8f:27:
05:5b:fd:99:b0:dc:d0:02:8d:7b:c6:6d:64:2e:37:
b2:40:33:1d:a4:72:55:a8:d4:db:7f:98:f0:4e:88:
55:e1:46:a7:1a:19:e6:29:42:e2:a4:cd:af:81:ae:
57:a8:8b:da:b9:5b:59:2f:6b:2c:0f:61:fc:5c:f4:
0a:86:9a:fd:fb:e3:05:7f:bf:67:91:62:40:3f:7d:
01:64:f1:e8:0c:ea:95:82:7e:9c:c8:38:96:44:d3:
af:8b:e0:05:d3:df:d1:91:85:c6:ff:82:4b:07:0e:
16:d8:c2:6b:6f:79:7b:e9:99:f3:df:e6:1f:2a:29:
3a:8b:95:73:55:78:07:07:91:90:68:b1:83:5e:64:
96:9d:f7:16:8b:59:cd:5d:f4:ff:12:c5:85:e6:b3:
4a:36:51:63:ae:f6:cd:f7:42:bc:e5:1c:7f:6e:df:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:9C:8E:29:B1:10:F0:10:12:83:73:38:29:55:6A:DF:C1:4F:1C
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a2:a6:7e:a2:15:44:89:0a:c9:e4:33:c3:42:5f:e1:b4:a2:
b8:77:a2:28:a1:b1:b6:15:71:ca:9f:8f:56:50:44:e2:c1:cc:
e9:f3:3c:a5:33:56:cc:5f:5d:52:95:f5:df:67:eb:23:ca:f4:
86:f0:0f:b2:e5:b0:a9:36:b8:59:51:47:bd:ef:a0:9c:01:24:
cf:f7:66:b0:71:95:29:bb:ec:d4:97:68:f6:34:cf:6c:51:03:
02:c1:ff:6f:a0:ca:20:c9:aa:b1:20:d1:36:06:01:a7:3d:cf:
18:e2:51:99:6e:2e:86:fe:4f:96:d4:d4:52:a8:0c:71:0c:43:
61:f8:5c:9c:68:ef:b4:5c:eb:74:ed:33:8f:f2:58:e3:94:b5:
82:1f:06:33:4f:04:ab:4a:c6:a5:1f:8a:ba:bb:de:93:af:85:
1f:d0:14:ee:4c:d7:a1:a5:3c:98:f7:b3:7c:46:bb:fa:79:55:
a2:4d:14:71:36:7c:02:aa:bb:66:eb:79:eb:3c:40:26:1f:8d:
84:4c:41:73:d2:51:73:e5:62:8d:03:dc:8a:c9:9f:94:d3:88:
f3:35:cb:d7:1a:90:ae:fb:44:6d:c3:ee:ad:29:f0:a0:dd:95:
9d:ae:71:20:4a:df:90:f4:71:d7:61:ae:b5:08:cf:02:c9:f1:
9b:f2:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:49 2025 by rpki-client