Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: GNFP5tIDIPgUg42GNYCllijUPTo+iUEgYPyrZPlmU3I=
Subject key identifier: D5:45:BE:31:AB:A8:03:82:11:1A:80:A9:49:CE:82:70:A5:36:A3:62
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 0197B6A0968955717765EEECDAFA1360B192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 075B
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: ZPaFARlCDhHyAMlhX6fIDXKvyDcU+fheRNvNcP5EvzE=)
2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:96:89:55:71:77:65:ee:ec:da:fa:13:60:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=d545be31aba80382111a80a949ce8270a536a362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:7e:78:3d:d4:79:02:66:a0:47:e4:59:39:
56:84:f4:2f:7b:f5:6f:7f:b9:0e:f4:e0:24:74:ce:
9a:05:7e:26:01:de:07:49:22:42:d8:ca:ec:2f:49:
d6:ff:52:34:59:22:21:ee:a9:cd:28:e6:f3:66:2c:
bf:31:a5:b2:31:fb:b2:e0:11:e5:79:3b:3f:ea:93:
f8:43:36:fe:b2:7d:45:24:41:51:f4:db:f5:4a:04:
db:8b:ed:74:8e:6c:e4:97:0c:49:fe:6f:fb:53:99:
21:2a:95:91:b7:94:d2:69:f4:0b:72:c9:bc:fa:78:
b2:e4:9c:60:38:6f:00:54:9e:d8:82:f4:6a:c5:6e:
bc:98:e0:52:c8:c4:62:f5:9e:90:7a:c6:49:f9:4b:
37:2c:3c:38:b3:88:b5:e4:c6:27:ad:04:01:c2:4a:
64:5c:8b:9d:0f:a3:a2:d4:c1:f6:d5:61:9e:6f:27:
7c:e9:dc:0f:b3:33:d6:66:e8:92:cd:8e:91:d6:21:
ac:5e:7e:7b:47:24:a1:eb:52:d1:5d:69:9d:ba:eb:
d3:d7:46:e4:9b:9f:00:d0:a2:a3:8b:9e:90:23:4b:
e7:88:6d:66:2c:5e:d3:e9:fb:ef:89:e4:2c:12:56:
e1:2d:28:29:71:bb:e4:ab:bf:37:c0:4a:67:b3:bf:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:BE:31:AB:A8:03:82:11:1A:80:A9:49:CE:82:70:A5:36:A3:62
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d5:61:cf:7a:22:c0:9a:8d:cd:58:28:00:b9:d3:27:ed:a4:
04:c9:9a:26:ed:ac:e2:01:0d:5b:e6:9d:d3:34:10:53:bb:fa:
66:aa:f9:48:d5:2a:76:15:09:80:ad:82:eb:75:0b:df:bb:2c:
4b:84:77:6a:be:1e:da:2a:7b:4c:39:f5:ab:95:e6:7a:88:d6:
fc:7e:96:43:23:58:ef:30:b3:de:26:37:41:6a:ac:39:9d:4c:
0c:ba:86:81:d4:ba:24:38:f2:c2:6f:e3:0d:74:3b:1f:3d:56:
8c:94:8c:8d:0d:dd:03:54:8d:6f:33:db:74:a4:c8:2b:ce:66:
c3:49:71:ec:51:4c:40:ed:4a:72:3e:b4:4b:5c:a8:83:bf:19:
0e:b4:c7:a4:09:ee:89:a4:26:db:12:fe:cf:5f:32:9a:d3:e5:
1d:1f:20:57:7a:74:c2:fe:2a:03:39:7e:50:ba:75:a3:e8:ab:
55:d2:bf:49:58:3c:c4:75:cc:f5:c9:1b:9c:db:f6:5a:ff:2d:
e2:6b:10:d5:e8:d5:82:fc:a8:d4:74:4c:1c:71:d3:86:53:3e:
55:26:e3:94:61:0e:be:66:b6:c6:4a:0e:d3:63:ff:c6:74:fc:
e4:5a:64:47:20:0d:4d:67:09:85:ff:10:45:99:be:67:a8:24:
cc:c9:ee:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:20 2025 by rpki-client