Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: i3MJxK8q7PSp00YZxipx6hwEYUpeqKb16UNBIKNnktM=
Subject key identifier: 69:23:D2:5B:44:9B:70:14:80:57:66:73:1F:6E:23:D0:98:F7:6C:A2
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 0197B7457F7F6ECD76BF672262454FF5A1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 02CE
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: Gy8U9zTtGZlobWQKQX76bSa72YPhwhjb1Usx1shXHjg=)
2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7f:7f:6e:cd:76:bf:67:22:62:45:4f:f5:a1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=6923d25b449b7014805766731f6e23d098f76ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:c6:16:02:85:bd:4f:c9:a5:ff:b0:f2:b1:
cc:0f:eb:0c:4c:03:06:f5:65:a7:bf:4b:47:95:6e:
f2:82:61:27:22:fa:cb:c4:b4:65:67:4d:84:6b:85:
88:e9:cd:24:5c:dc:f4:e1:aa:da:c7:19:5c:aa:47:
bc:36:0f:56:7e:18:8a:d1:42:ab:84:6d:73:c8:98:
b3:d6:85:f6:67:2d:eb:59:b3:fd:02:56:52:f1:27:
d1:1e:da:46:45:95:fc:d9:99:92:39:ea:c3:8b:9e:
27:d7:45:6b:d7:4a:5c:37:00:ac:60:93:a3:f6:93:
df:e6:af:96:ca:2d:98:58:1b:7e:ff:fa:66:36:e3:
18:ba:34:01:76:8f:c0:6d:cd:fd:81:88:b7:37:fe:
cc:98:11:b6:a7:0c:46:ac:75:0c:37:1a:73:0d:a1:
d9:41:d3:86:00:21:45:c8:79:12:3e:c5:11:4f:9a:
98:f0:c1:f0:28:de:2f:37:7d:70:c7:c5:d0:37:0a:
b3:cc:b7:f7:8a:88:9a:b9:a4:66:f1:a4:88:8b:39:
09:d5:a2:a7:cb:7c:88:7d:a0:5f:99:1d:3d:c3:3e:
59:86:f0:52:81:99:8b:30:10:06:a2:4b:ee:0d:ba:
bd:3e:3c:6f:f3:77:73:72:80:91:67:55:55:09:c3:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:23:D2:5B:44:9B:70:14:80:57:66:73:1F:6E:23:D0:98:F7:6C:A2
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1c:77:73:66:b4:3a:08:8e:0c:06:2f:3f:ba:38:bf:d5:62:
43:0c:ae:37:44:5c:db:c5:09:87:dd:bf:73:cf:11:23:ad:7d:
84:88:0f:ba:61:e4:75:26:a0:e1:66:7f:ff:92:7b:41:a9:a0:
f6:c6:1d:f0:d3:90:66:e6:17:33:33:fb:97:a6:69:ff:00:f8:
f1:41:19:f0:1d:3e:55:05:d5:d8:23:e8:b7:ad:d9:1f:90:c2:
4f:95:36:c6:10:e6:63:a2:29:66:03:ae:1e:39:af:4f:0e:0d:
34:1e:e0:f4:90:be:8f:ea:21:cf:df:b3:c2:c9:47:d4:d8:b3:
ec:3a:c0:09:b3:e4:54:9c:79:ef:57:33:e1:cd:1c:3c:74:71:
9e:8d:6d:b7:ab:76:2d:54:71:7a:bb:e3:ea:2b:7c:1e:35:bd:
25:5b:61:1e:39:0e:da:26:e8:1c:49:e4:ea:be:86:b4:5a:c4:
d3:5c:da:71:01:9a:25:3b:c7:07:fc:78:c7:48:80:63:07:af:
36:cb:d5:2c:fa:d4:c9:50:c6:be:a3:69:21:38:c1:e5:2c:5a:
ee:42:0e:dd:ce:8f:59:38:18:60:de:d2:ad:31:c0:5d:e6:21:
96:4d:f2:c9:8d:7f:46:52:f2:03:86:90:25:80:2e:b7:3b:e5:
de:75:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:59 2025 by rpki-client