Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: azD02ociuv86qBjVjRW23nHWZTXYAn+wJn1aI5x2avQ=
Subject key identifier: FB:BD:4C:F0:9F:83:03:15:30:B1:F4:C1:9F:58:B6:E4:3B:89:79:74
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 0197B6A0EE0AC7853ACD053FDBE6F6728BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 0E4A
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: CZgfe1vDsdx1ActvFP0BGrzii3XfnJ2JvXjY7PpxCqU=)
2: ZdLIbn9HJxp8pdvNeDczvn0TQ4Q.roa (hash: rg+IefpKLZ6BZTDP0ZlvyqCjjEypkuxTFlnDiZulEgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ee:0a:c7:85:3a:cd:05:3f:db:e6:f6:72:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=fbbd4cf09f83031530b1f4c19f58b6e43b897974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:44:19:bc:d9:1b:0a:50:aa:5c:c9:19:01:
2a:c8:c2:a3:07:99:32:fa:06:14:51:f5:86:f5:3b:
b4:00:f8:0a:17:22:5f:10:dc:a3:ea:b5:9c:75:6c:
14:bc:4d:36:17:94:f4:a4:ef:08:14:df:4e:f6:de:
bb:d8:2b:1a:3c:23:48:53:15:fc:6c:9f:26:64:b6:
a1:71:ce:e0:65:74:24:df:cb:81:fb:a7:77:93:bc:
1b:62:b6:42:1a:f3:d3:dc:28:5c:94:44:d4:91:d7:
de:86:41:53:e9:76:9d:5e:64:26:b1:02:a2:57:e9:
bb:49:74:36:3d:27:31:55:5b:ca:aa:6d:c0:06:8c:
8b:7d:bb:74:d1:cc:db:d3:8d:f0:f3:6c:55:4d:81:
98:32:1d:11:69:76:e9:f2:d3:c5:a4:ef:de:5d:ba:
d6:0b:ff:90:5f:f6:e1:dc:d2:ba:4b:0c:1a:4c:f0:
d1:a1:13:66:39:7f:12:a2:fb:69:0f:14:0b:07:f7:
26:c0:cc:a7:ee:d0:2e:e8:0d:4e:34:d3:af:6f:7e:
0e:b9:36:bd:0f:4c:cb:99:1c:08:12:f2:97:cb:e8:
c2:48:15:7b:b3:89:a5:57:ff:14:67:c8:b7:00:42:
26:a5:aa:78:0d:cd:4a:1e:9c:56:4b:ef:77:76:e4:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:4C:F0:9F:83:03:15:30:B1:F4:C1:9F:58:B6:E4:3B:89:79:74
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:05:c8:e4:f3:4b:19:bb:60:cc:29:7c:be:00:d9:1d:f3:9f:
fa:5d:0f:97:81:8d:37:ad:98:5d:f4:cb:2f:6f:1e:ef:4a:37:
ea:c4:28:e9:49:30:31:81:11:c2:be:d8:4a:73:83:f8:c6:e4:
11:21:d2:94:dd:f1:08:0d:a4:9e:ed:81:91:ff:06:0e:e7:bd:
d6:8d:35:78:8b:10:be:5a:23:ec:ef:fd:c1:b8:d4:4c:a6:69:
81:ac:e2:d3:37:87:da:0d:f9:bf:34:ac:e9:13:d2:0d:64:8e:
14:26:69:a0:73:99:bb:51:8e:29:d6:7e:b9:6c:83:27:54:10:
04:e8:b1:a9:e4:c3:ce:3c:27:74:e6:bb:64:f5:18:7d:76:22:
63:d2:62:cb:39:08:1e:bf:3f:27:88:9a:5f:94:f4:ba:16:ff:
fb:a9:23:ad:5f:ed:78:92:eb:fa:3b:2d:ab:05:10:13:87:a4:
e0:e7:48:66:97:6e:c6:3b:60:89:6b:47:bf:77:57:67:39:16:
d4:95:66:0b:85:8a:77:34:39:73:9b:5f:18:f6:f4:66:d0:70:
eb:3c:62:35:8e:ec:82:11:bf:56:65:a1:1e:81:d5:27:cf:8b:
0a:bf:6d:ae:c5:6d:d3:06:20:42:2e:94:9b:e0:30:e0:4d:5d:
79:5b:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:42 2025 by rpki-client