Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File: GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier: BOjBZEkyzzxFiFyjMbdnzklbVYv3NEWgFiSaLYonNg4=
Subject key identifier: D0:CB:03:F0:BF:40:08:01:EF:08:59:0E:6A:CD:09:85:FF:5A:88:D1
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 0197B77C65950ADDECB8CB069E0452D86566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number: 0EB8
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: GMiGJIQPkTJHbljDh9-Qbgs-ofQ.roa (hash: gehqPfu1dznuITregHu34HVG8SqD/GP87okupLZENG8=)
2: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: V7Qz4Q/cOzWU25hNDm9FEV3TQX5gcZ8pdFJldsZti+s=)
3: v9KM8OQ-DWpjdph76UHaqdPxykY.roa (hash: ZEWsWvyNwHDggCDXVB+qSLAsmH44pX9075p3IA13cVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:65:95:0a:dd:ec:b8:cb:06:9e:04:52:d8:65:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=d0cb03f0bf400801ef08590e6acd0985ff5a88d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:57:53:f0:cb:0d:6c:dc:37:7d:20:6d:f6:
ea:b4:fa:4d:4f:39:82:0f:89:6b:44:ea:62:fb:9e:
0c:1a:2c:a7:25:de:0c:ee:24:d4:ba:25:94:0b:35:
38:fe:95:b0:38:e7:26:9d:62:49:7f:b6:2b:d4:c7:
f2:2f:c7:66:ca:7b:05:b1:98:2f:58:a4:c7:a4:84:
aa:78:58:71:f6:dc:a8:86:b1:54:e2:1f:29:eb:13:
fe:f1:ac:0c:61:99:9b:9e:b1:19:3f:05:70:ea:77:
e9:85:43:85:a3:2a:a4:2c:fd:76:b6:fa:96:29:a4:
e7:8c:65:35:88:7f:ef:c2:3d:bc:ca:47:35:15:90:
e7:29:68:b8:af:e8:6b:8a:8b:93:8c:a4:a5:67:72:
10:c5:3c:15:93:ed:34:31:10:08:27:a1:fa:18:0f:
a0:0b:a3:15:75:69:71:ff:02:d9:f9:cd:6c:0b:39:
25:f8:7c:ff:3a:db:b4:03:43:21:92:28:64:77:14:
f6:41:a5:43:a0:e1:6d:d2:84:b6:b1:df:14:84:e5:
75:18:9e:b1:94:5a:c6:48:85:60:48:4c:cf:06:52:
2e:89:35:79:aa:1d:11:58:26:93:11:30:e9:21:56:
f1:78:f5:d4:37:da:57:18:f7:c5:69:a9:84:e6:f0:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:03:F0:BF:40:08:01:EF:08:59:0E:6A:CD:09:85:FF:5A:88:D1
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d1:53:61:cc:35:e0:e3:a7:52:cb:ec:49:c4:30:b9:02:66:
b6:f3:3b:78:91:c4:b2:01:23:b7:9d:64:73:91:27:f1:bf:63:
5b:78:57:fa:28:5c:21:98:10:2a:86:3e:39:5d:aa:1a:c0:36:
88:31:8f:35:78:a8:0a:22:ab:8a:af:c9:25:7b:80:23:b0:da:
ec:b1:12:41:31:71:fa:82:8a:14:fa:1f:76:c2:b5:e2:11:2c:
92:4e:89:04:75:b5:9a:a8:92:93:80:bb:f3:66:74:0d:3d:fb:
c1:3e:55:84:9b:a5:73:3e:10:e2:40:64:7c:f6:20:f5:56:8d:
10:d1:4f:fb:0e:dc:4c:0b:de:f5:8d:e3:c5:b3:67:c5:45:83:
48:f9:21:60:32:5b:5d:fc:f3:f4:23:b3:ca:9a:d3:6c:2f:3f:
7b:43:1d:db:aa:3f:1b:3c:50:cc:01:b2:bc:f0:d0:cb:29:5c:
ff:a6:4f:e1:b4:6a:bd:42:b8:01:3e:82:54:d0:5e:64:87:6c:
51:cb:40:5c:ce:c9:ad:d8:c2:c6:1c:04:b4:a4:fc:92:d6:9d:
c2:5f:01:d3:aa:65:83:98:a3:b9:a5:95:0e:18:4c:d2:21:a1:
b0:0d:ca:7a:a8:c9:e8:7e:f2:6c:18:c7:9b:e4:64:d0:c3:7f:
47:20:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:09 2025 by rpki-client