Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier: pd5Al8uqsQ6wO55Wd4GDunyLPCI94LwudPjCzU2brKw=
Subject key identifier: A9:38:5B:4F:1F:FF:3C:DB:9E:D3:AD:B1:F8:A5:F3:06:27:79:2F:64
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 0197B6A08B74BC324A2D3F75083AE1A9C7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number: 14B1
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: quiOu6Uz1rqSLz9zCZAjgFXGHUpPXxl6XndxynCGDSw=)
2: o1l5BPG8TRspXIfZdrd0blYAUfY.roa (hash: 5xBU1dsBZ1CJDSiFKF5L8bb4B1rGVOEs++4FXuZA5ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8b:74:bc:32:4a:2d:3f:75:08:3a:e1:a9:c7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=a9385b4f1fff3cdb9ed3adb1f8a5f30627792f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:d8:97:19:1e:e1:bb:0d:eb:7c:d4:53:af:
f1:a3:d1:27:16:63:91:64:b1:06:fb:9f:31:84:6a:
d5:93:73:98:f2:fa:86:d5:d7:05:b0:84:f2:59:30:
8c:4d:31:24:4b:1d:63:a9:63:ba:94:26:7b:04:c8:
ac:ec:81:e8:21:3a:b7:b8:08:ba:0f:3d:77:d1:02:
ad:bf:cb:a1:00:44:41:15:98:8c:96:3c:b9:4a:80:
1c:a4:b5:23:04:4a:69:d1:7d:ac:79:d5:43:41:96:
80:ca:4b:26:4e:cf:7c:53:4d:0c:e0:cc:d0:51:51:
e0:29:e3:dc:a1:0d:c2:8c:d6:b4:d6:7b:d2:2a:7a:
e8:3c:cc:53:28:b4:88:a0:b7:cf:18:1e:b7:77:9c:
5a:3d:78:73:e4:64:2a:0d:ab:6c:38:e3:90:39:0b:
8e:e9:1c:33:c5:58:76:e7:d4:bc:e7:f8:ae:88:72:
87:40:b8:2b:54:8c:d4:6d:3d:f7:50:cf:11:b5:4d:
63:7a:3c:0f:39:54:63:16:66:9d:d7:8d:5b:0f:56:
0d:45:0e:e8:15:d9:21:df:04:06:8d:dd:bc:6d:1c:
35:86:32:ef:18:a0:f0:d5:0f:96:79:92:7b:eb:80:
4b:b7:4e:94:d2:ca:77:40:82:e9:6a:33:16:99:9f:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:5B:4F:1F:FF:3C:DB:9E:D3:AD:B1:F8:A5:F3:06:27:79:2F:64
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3c:c0:42:42:68:70:b4:e9:30:5d:54:75:0d:96:58:eb:92:
68:eb:9c:cf:a7:b9:06:fa:46:fa:d8:27:03:21:82:63:6e:e2:
14:30:0a:dd:63:80:aa:b7:54:00:04:93:21:84:22:27:99:bf:
ae:31:4c:6e:d9:68:a4:75:b7:03:56:04:ed:8b:45:4d:21:77:
58:58:43:8f:ab:b5:1d:8a:7c:6d:51:c9:bf:94:bd:0f:34:aa:
4b:47:14:d8:ff:68:e6:5c:94:e7:15:7d:26:f3:66:10:e3:1a:
32:96:a4:c9:b1:54:cd:68:ba:3f:5a:e2:cb:8d:49:9e:ce:bd:
46:ac:04:e9:93:a4:f6:0a:26:b1:17:6c:25:01:ed:ff:8d:23:
38:6f:6a:45:9c:98:f5:49:29:d8:62:6e:ee:10:50:83:95:28:
3b:44:b5:9e:29:1d:c3:d5:c9:88:92:a3:42:0e:f8:36:4d:6c:
57:c0:2f:10:a1:ba:a2:12:88:7d:3d:63:91:98:ec:0b:fc:f1:
17:90:81:5c:34:57:57:1a:22:db:05:80:2d:65:cd:6b:b2:00:
76:88:df:88:fa:4a:85:46:7a:53:90:05:f2:4c:db:bf:3a:33:
41:b5:f2:4e:e1:64:57:a9:39:54:ef:ff:84:bf:4d:5e:e5:35:
3a:17:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:42 2025 by rpki-client