Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier: LrzIRRj+Xxl/PJb6sBW4uhe0AeHo6fM8dCoPeP118Qs=
Subject key identifier: EF:03:31:00:68:EE:1A:E5:E7:55:49:EB:9A:04:01:01:AA:33:75:3A
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 0197CBDF7259437926564FC0F264CE29E1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 16:01:47 +0000
Manifest this update: Wed 02 Jul 2025 16:01:47 +0000
Manifest next update: Thu 03 Jul 2025 16:01:47 +0000
Files and hashes: 1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: gRyDvz5onD/ojP24WlII26AZI9H4UvLVxQxfugQo6AY=)
4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:72:59:43:79:26:56:4f:c0:f2:64:ce:29:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Jul 2 16:01:47 2025 GMT
Not After : Jul 3 16:01:47 2025 GMT
Subject: CN=ef03310068ee1ae5e75549eb9a040101aa33753a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:fa:ff:76:96:0c:66:e9:3e:cc:e1:18:39:
98:08:a8:00:54:e3:15:95:3e:c1:92:c7:70:7c:b9:
54:62:42:a0:76:22:90:8c:d6:a3:fc:35:37:ba:df:
3d:3e:42:fe:e1:b8:04:b7:7d:7c:a2:28:89:44:88:
79:13:c6:ed:92:07:e2:c4:f0:c5:ab:20:2d:d9:57:
5e:02:48:1d:d0:b5:8f:1e:4d:8f:f2:62:e7:71:46:
28:6c:7f:d5:fc:43:c1:4f:7e:f5:10:ae:08:09:98:
e0:7d:b0:e1:66:4c:d5:7c:7e:a7:0b:0e:3c:79:1f:
a8:6b:58:8d:fd:c7:59:4e:ac:19:ef:47:71:92:db:
d4:a6:d7:50:95:a9:79:f8:17:eb:3f:63:b3:82:c0:
3e:1a:38:6f:14:c0:06:43:fe:2e:10:c4:cc:3e:d7:
e3:69:6a:1b:b6:be:b3:d4:4d:d0:83:1c:86:00:90:
11:91:94:1b:96:b4:03:35:ee:f6:3e:0b:ba:4e:3c:
3c:59:47:9e:9b:fa:00:a8:bf:97:ee:8e:e2:d5:11:
13:24:55:95:b0:7e:37:94:b7:71:e5:d1:5e:7e:89:
08:a0:0f:6d:fa:5a:ef:44:0a:9c:74:59:8d:72:25:
cf:e3:ae:a5:87:a5:81:65:24:df:dd:cf:ad:2f:63:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:31:00:68:EE:1A:E5:E7:55:49:EB:9A:04:01:01:AA:33:75:3A
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2e:27:5e:19:dc:f4:bc:37:3e:77:fc:85:bc:8c:36:f6:57:
d3:d5:42:40:94:28:a3:6f:c6:71:7a:e8:dc:dd:fa:fa:d8:90:
d4:0f:41:15:eb:56:ea:57:6d:fa:8f:65:4d:08:3d:5d:42:06:
90:76:44:52:22:05:a1:f9:ee:25:5e:63:98:cc:f4:a9:cb:b8:
ef:49:3f:e8:02:5f:a6:e1:28:7c:e3:2e:b2:3a:dd:28:db:78:
95:70:cc:76:15:31:2a:d4:ae:6c:a8:b0:e8:df:d0:d8:d2:34:
5b:81:11:97:68:06:cb:e7:0e:d0:3a:83:5e:d1:aa:82:26:31:
f0:71:36:2a:81:70:49:df:44:94:7b:f9:0c:60:8d:9c:6e:1f:
30:74:bb:16:5e:8a:f9:1c:e6:41:c5:01:d7:28:69:d8:e2:0e:
96:d1:b7:0a:34:4d:43:10:f2:53:8a:6d:7c:47:de:95:3a:6c:
71:5a:08:86:de:b8:0c:0b:85:ef:d1:a6:72:2e:b6:fa:9c:20:
6c:53:d0:2a:f0:5e:50:f2:88:29:a3:e1:7f:b3:e4:e7:77:e9:
47:e8:ee:b5:5c:af:5e:fb:9f:bc:c2:01:4b:2d:a9:66:79:c2:
e9:82:a3:ba:b4:c7:bf:98:6e:0c:05:14:3c:09:7f:e6:8f:d3:
ee:a0:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:19:55 2025 by rpki-client