Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: +6SaIgbAI+4mM+5NZqNGUHaSNpcXnaXedqOkkzC83uI=
Subject key identifier: 78:A6:6C:B2:88:B3:2A:47:4E:EA:45:7C:0D:76:7E:32:0B:73:7B:F9
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 0197B7EABAA42665D6C49CB48E0E5F16A8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0B1A
Signing time: Sat 28 Jun 2025 19:01:43 +0000
Manifest this update: Sat 28 Jun 2025 19:01:43 +0000
Manifest next update: Sun 29 Jun 2025 19:01:43 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: m33ggZ9dKe9lSknnV/NCr3qQVymqEDDh+IgJ2YHGaFU=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ba:a4:26:65:d6:c4:9c:b4:8e:0e:5f:16:a8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Jun 28 19:01:43 2025 GMT
Not After : Jun 29 19:01:43 2025 GMT
Subject: CN=78a66cb288b32a474eea457c0d767e320b737bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:88:db:cf:1a:ed:f4:87:44:b0:bf:ee:d8:
1e:43:ae:f1:78:5d:8d:1a:3d:6c:ec:12:6c:67:18:
1e:93:ce:cc:39:15:10:ce:82:be:06:8b:ac:ee:42:
ce:5c:12:ca:3c:f9:f7:98:b9:55:8e:30:3c:f6:dd:
d3:79:46:86:f6:f9:c7:85:bb:65:b5:47:7a:83:36:
6c:b8:0d:0b:3e:e7:de:bc:e2:7d:f7:b5:04:47:a8:
b1:eb:37:bb:6e:9d:78:6a:dd:11:de:e7:73:1e:07:
fb:1e:e2:b0:12:c2:b3:9b:36:c8:a7:f7:71:d2:b9:
52:e1:ec:b2:57:25:72:a4:76:61:e1:af:2c:84:9d:
e1:f9:b7:82:e6:96:7c:3c:06:ff:ac:36:7a:55:ce:
65:ad:4e:c9:fa:30:f3:81:a0:f1:73:79:64:25:09:
0c:83:51:b5:3f:e5:45:9c:1f:a2:59:db:16:d6:96:
6f:00:74:4a:7f:16:e7:a8:a8:32:15:f7:ce:c0:a2:
19:37:c6:8e:3f:eb:bb:d0:32:c9:e4:54:90:34:51:
c5:da:0c:bf:25:54:0f:3e:e1:62:13:99:2f:55:ba:
0d:f3:2f:41:eb:81:59:f6:6f:bd:1d:6c:8e:dc:f0:
7f:94:69:c6:c2:d0:6d:2e:e3:51:3b:a5:8f:57:f8:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A6:6C:B2:88:B3:2A:47:4E:EA:45:7C:0D:76:7E:32:0B:73:7B:F9
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d5:be:bc:60:f9:43:e3:ba:70:39:8f:de:45:f4:e0:14:18:
27:a3:36:b6:2b:be:0a:31:87:b1:63:d9:88:2a:c4:69:30:a7:
30:49:6e:27:d1:81:14:d2:1e:6b:5b:0f:c3:03:d5:94:19:44:
03:ec:e7:b2:06:98:1b:ad:42:c5:94:dc:6f:7d:d6:7b:9b:20:
b5:c0:35:46:c2:bb:21:a8:a8:b2:4e:ee:88:f8:30:27:c6:05:
d9:05:e0:e3:0c:71:64:90:b1:28:1e:d1:e4:a7:87:a9:f4:94:
03:96:0c:4e:32:f4:3b:5e:ce:d5:d2:f1:4e:1d:94:a7:ad:4a:
8d:f5:b4:e0:7c:1a:c8:95:69:c3:f5:d6:a0:44:18:bf:2c:9e:
00:ef:26:5c:7e:c9:70:0a:5a:20:b7:23:a7:03:a7:f4:80:50:
c3:03:49:1d:31:a6:46:03:db:7b:1a:ad:5a:70:06:bd:ba:78:
62:d2:c6:b9:9b:af:a7:1c:e0:59:88:b5:79:e5:99:d1:db:c2:
15:c6:9b:38:c3:26:43:63:b9:b1:66:4c:18:d0:d3:c1:e7:ab:
f9:c9:bd:5e:f0:41:3f:28:62:7d:b1:0d:01:ab:ec:56:28:be:
d9:bf:da:1a:cf:bd:7c:d7:12:1a:30:4d:d1:07:ce:b9:0f:1a:
af:a4:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:27 2025 by rpki-client