Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: yU4kRsQTKgBjbV7efsaWXhnNSq0rmXJQADk00LV9lJ0=
Subject key identifier: 38:F7:BB:54:E0:16:C5:21:51:8C:84:C6:95:93:ED:66:CB:41:93:4D
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 0197BA7E52330E483F6C106892E46CC369E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 07:02:09 +0000
Manifest this update: Sun 29 Jun 2025 07:02:09 +0000
Manifest next update: Mon 30 Jun 2025 07:02:09 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: s3FQXvsTbJwH7JGnqu6zXFqZbLX+hnB4Lr6TxM/sRgw=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:52:33:0e:48:3f:6c:10:68:92:e4:6c:c3:69:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Jun 29 07:02:09 2025 GMT
Not After : Jun 30 07:02:09 2025 GMT
Subject: CN=38f7bb54e016c521518c84c69593ed66cb41934d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:93:bc:a4:ab:19:d8:dc:1e:ce:eb:af:fa:
51:58:e6:be:75:a9:72:6f:7b:bf:9f:f4:a5:9a:c1:
29:2a:5b:83:b0:da:21:c3:73:af:0c:09:2d:53:26:
53:ed:b6:fd:bd:ac:71:54:e1:41:eb:81:54:ef:ca:
e1:11:a2:10:a0:30:f3:d9:d5:d2:62:cb:04:d5:94:
e2:2a:0a:22:6d:92:fd:10:62:bb:f2:b8:11:b1:ed:
06:5f:87:33:6d:5e:cb:77:f0:09:8e:6b:86:8e:d4:
1d:a8:3c:20:db:b9:1d:84:ef:7f:cc:94:4d:5c:03:
b6:cf:ad:bc:08:07:0a:12:58:be:66:b1:85:41:ef:
f8:9d:e8:d2:27:6a:59:3f:d2:1b:97:0a:39:51:03:
06:2c:f2:f5:bf:43:ed:83:64:28:16:6d:c2:73:66:
0a:01:23:9f:e7:c8:bd:3e:41:b2:de:b7:08:ad:7c:
a0:86:03:9a:2b:14:d5:3f:33:ec:57:3d:0f:df:99:
83:83:64:02:77:f4:b7:5b:94:a2:2f:70:95:08:11:
af:d6:0f:66:07:4e:ee:5e:e4:f1:b2:23:8a:10:88:
cb:c1:54:45:4c:d3:78:d5:07:86:23:94:fb:43:bf:
2e:a3:55:d3:3e:e1:0f:17:f7:b3:53:7e:64:58:30:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:BB:54:E0:16:C5:21:51:8C:84:C6:95:93:ED:66:CB:41:93:4D
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d0:cb:d1:3d:e0:23:56:51:5b:0a:7b:af:05:1a:e1:ed:39:
c7:ca:8c:77:71:fc:c4:bf:4c:0e:6f:48:41:e7:dd:a5:ee:ea:
a6:8f:b2:4c:96:52:ee:92:23:58:1c:0c:3b:73:2c:8b:36:ce:
dc:51:8a:6b:c3:41:6a:a5:4e:a9:fb:59:17:de:0b:36:fc:e1:
d3:b6:75:bd:fc:b7:51:f5:98:5b:61:f1:62:47:3a:e7:06:68:
c9:da:dd:59:b9:5c:d9:95:33:8e:0d:a2:d8:53:74:f8:74:24:
bf:e6:c1:ca:4a:c2:d5:cb:e6:79:62:4d:02:4c:a7:f9:c6:be:
5b:45:fa:33:23:57:47:db:20:2d:98:14:b3:b3:17:fc:ce:e2:
29:f8:e9:06:74:f6:73:05:39:22:cb:1b:d2:f5:12:3a:84:70:
09:43:cc:d3:86:f9:7d:2f:70:f6:d6:7d:b5:80:23:1f:7b:01:
7c:17:01:b9:16:13:6a:c9:26:73:5d:08:3a:6e:45:e4:43:5d:
96:9e:b8:bd:f3:22:15:01:f0:c7:54:69:01:72:13:2b:c5:9d:
10:b8:4d:bb:e0:df:98:48:f2:3e:bc:53:b5:8f:f4:9b:27:e5:
23:64:3d:91:5d:da:5a:a7:91:89:4a:6d:84:4c:97:03:22:28:
0c:e0:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:23 2025 by rpki-client