Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: MnUSduQ2+O4UZc8HDB81eq8/bZ8J0bFj56OM+IFRz80=
Subject key identifier: 8E:CD:67:36:89:11:DA:A2:A0:04:AE:74:8E:AC:DD:0D:FC:AB:95:25
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 0197D1AB5DE7E72DA108396262B0BCA6D29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 07E6
Signing time: Thu 03 Jul 2025 19:02:38 +0000
Manifest this update: Thu 03 Jul 2025 19:02:38 +0000
Manifest next update: Fri 04 Jul 2025 19:02:38 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: +tlvPeILtx7TM9yuqNptOrhjteGfQPz/iyhsPqceoPY=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:ab:5d:e7:e7:2d:a1:08:39:62:62:b0:bc:a6:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jul 3 19:02:38 2025 GMT
Not After : Jul 4 19:02:38 2025 GMT
Subject: CN=8ecd67368911daa2a004ae748eacdd0dfcab9525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:2d:c8:2b:66:23:e4:bb:9d:d3:54:4d:75:
47:1e:2a:3e:3e:e6:95:be:c2:98:47:14:5f:d4:7b:
01:e5:d1:b9:3b:f5:2b:ce:89:f5:d8:8f:0d:85:dc:
13:5f:ac:ad:95:d2:74:6f:f9:5e:04:25:f7:d0:fa:
0d:68:9f:f2:e7:59:0a:13:94:73:fe:c4:db:af:4f:
5c:2a:b1:14:70:ba:ef:80:1b:cf:ae:b8:22:03:d8:
00:31:7b:20:0f:b7:df:8c:a1:e3:c9:0d:29:54:09:
34:5f:6d:c0:6e:37:0c:c2:16:51:33:18:95:32:1a:
85:02:c4:58:d3:ef:94:78:4e:6e:8f:25:f2:6e:0b:
c1:ed:07:35:af:3d:cf:29:38:aa:46:f1:de:b2:1f:
61:e0:c4:5d:db:74:54:36:ab:2c:62:95:8a:c0:6f:
44:bd:59:f0:d4:9f:4b:2b:37:0f:c0:2d:c7:4c:98:
64:53:8f:73:08:f3:d0:71:c0:d0:b2:fb:92:94:ec:
a3:20:89:d6:e8:78:c9:10:51:42:0c:3e:29:87:ca:
8c:31:e8:67:5f:80:8f:4a:bc:e9:22:d1:6a:69:86:
d2:81:4b:af:a2:76:8a:8a:42:34:6c:81:fd:29:40:
33:23:e3:78:1f:34:42:8c:ef:5d:e5:fb:d4:ba:ec:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CD:67:36:89:11:DA:A2:A0:04:AE:74:8E:AC:DD:0D:FC:AB:95:25
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:83:29:f0:44:ea:c4:00:d8:9c:01:17:6f:1f:03:79:02:f0:
7d:66:a4:bf:76:05:ba:a2:ce:1c:06:4c:8b:fa:f3:9c:52:88:
a4:66:23:2d:59:f1:b4:be:f9:7f:2e:85:90:fd:88:c7:a7:be:
7b:8d:3b:b6:63:fe:eb:6b:8b:61:45:ab:71:62:56:c0:f0:07:
d7:70:9d:4b:cd:0f:91:8e:d3:cc:65:1c:b3:8d:42:f8:84:d4:
0f:e3:ad:a3:e3:6e:1d:44:60:0a:4f:84:8d:f0:bf:99:a9:6a:
b4:67:b7:85:cb:c4:a1:e6:3d:68:a3:65:0c:cd:85:cc:df:41:
3b:44:69:a1:bd:86:b9:40:83:c6:4b:8a:b6:a7:72:35:e5:e1:
60:54:f8:17:d9:a5:64:34:40:bb:90:2d:b1:a7:0a:1d:90:e4:
cc:11:f7:69:e7:0a:a6:6f:4e:d6:49:bc:eb:b3:e3:75:b1:c0:
c2:cd:a4:df:3d:47:5a:b5:87:d3:6d:be:5e:a1:6d:2f:c6:ff:
1c:5c:85:0c:47:0b:5c:c9:f2:b1:fa:d6:c2:28:ce:2f:0e:8c:
93:1d:4d:67:75:ae:60:9d:5b:16:73:6d:db:8b:44:a2:a2:39:
86:c5:f9:a0:03:f2:4a:a5:b5:ea:81:0f:71:3f:69:a0:4f:e6:
9b:f4:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:30:59 2025 by rpki-client