Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: PgnliKFT7nRpmM1paSOYjaiPUZlEOHlG+tOl577E9N4=
Subject key identifier: 67:A9:76:F3:AD:1A:4D:BF:5F:D6:65:21:81:AA:E4:8F:CF:4B:63:8B
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 0197B7B2F5E5C299D2CE07D1B639EEEA2EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0D6B
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: CSSEySfg-kMM1glbJN0lrihqMrE.roa (hash: i80/t4BIajLc8cgICSb9zNCBrmIiB9z2e81bg2ShuPY=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: IXcVwd2C+1IhlvBeCY/Pyeplc9lxB9frjq9nI98iDT0=)
3: Q-Q316aVXjaSDF_zXdBAZDqfQi8.roa (hash: pbIGWJtvDyC8Gs/UzFer1NbNeCFqgi6grLGP2phHoj4=)
4: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (hash: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f5:e5:c2:99:d2:ce:07:d1:b6:39:ee:ea:2e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=67a976f3ad1a4dbf5fd6652181aae48fcf4b638b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:94:7b:fd:39:30:fc:6f:74:4b:bf:db:bd:
43:10:2c:f2:06:fd:cc:e2:11:5d:4d:24:2f:6c:1b:
74:fd:dc:46:26:be:10:4f:e7:a2:ac:dc:79:85:a6:
f0:bf:f1:4f:8b:36:f3:c1:74:08:c3:0f:46:f3:f8:
9e:32:74:0c:86:7b:ae:63:bf:4f:46:c8:8e:88:27:
b8:ca:3f:68:6f:d6:b3:d2:8e:02:53:a8:f4:db:58:
4b:8f:75:fb:29:a7:40:e3:fc:e0:f1:5c:bd:06:1b:
a2:26:37:86:64:0b:a1:b0:de:d3:43:57:32:b6:a3:
79:1d:f9:71:be:b9:2c:cb:9e:ec:06:0b:94:ab:8b:
a1:8d:50:f5:c7:a5:68:4c:65:1c:51:e2:ff:09:10:
33:04:a6:fc:04:b9:5b:29:05:85:00:b3:ef:21:1e:
5f:47:d0:76:67:87:5f:bd:48:c1:f2:df:f8:01:77:
51:04:11:51:d8:f1:85:a1:db:4c:46:a7:36:3d:01:
5c:ea:a6:3f:77:51:0d:69:58:7c:43:d2:9e:28:04:
0f:63:9a:14:7d:58:6a:65:41:81:62:30:70:46:37:
ef:35:58:c8:e8:2f:3a:e2:90:6c:cb:23:ca:02:8e:
a4:50:89:f4:49:16:78:c2:b1:6a:67:7c:06:ba:82:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A9:76:F3:AD:1A:4D:BF:5F:D6:65:21:81:AA:E4:8F:CF:4B:63:8B
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7a:4c:1f:4f:b3:10:0a:80:ae:06:12:7e:8e:ca:29:0e:51:
02:31:64:57:eb:c4:89:c0:ad:bf:16:ad:04:2c:ad:48:c1:4c:
11:2c:d2:6b:56:93:31:a7:df:16:bd:73:40:7d:4d:ea:83:46:
6a:a3:ee:cf:0b:be:75:69:aa:1a:90:47:54:2d:c4:5f:d0:72:
55:ff:81:08:44:cf:57:12:ce:f7:63:75:09:f2:12:5f:5b:3e:
a5:6d:e7:7f:c7:f7:e2:70:3a:d8:6c:36:c6:62:ec:3b:87:64:
bc:1b:1f:06:6c:87:88:3a:51:1b:63:f2:0b:7f:f7:b3:65:8b:
c8:6f:ac:33:c8:eb:68:82:5b:00:a4:3f:b3:6a:c6:49:07:d4:
16:3a:93:a3:49:d7:1d:8f:9c:1f:67:ca:5b:8b:18:a6:15:05:
43:66:1b:39:28:58:fb:b9:99:04:6e:23:43:1c:c2:6b:9a:cc:
10:0b:f0:e9:59:a1:c0:57:b8:4a:e2:fb:17:6b:4f:c9:4c:b2:
d3:8c:d7:6e:13:e5:75:ef:58:1c:2b:ef:32:1c:7f:4c:cb:5f:
2e:55:ae:82:34:d8:80:83:c8:be:31:9d:d8:1d:29:eb:ae:37:
fc:be:61:e1:ab:47:9a:9d:36:5a:48:16:56:e3:67:ae:60:df:
95:e8:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:24 2025 by rpki-client