Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: bl2ixiyuVZpJvuQwFLg/lhswQPc4BeV0lTwBSFxatkQ=
Subject key identifier: C2:4D:12:CF:9E:F9:23:75:9A:FC:3D:B8:53:AF:A5:A2:80:2D:E6:39
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 0197B63288B697916F115EDD304B7BC4A4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 11:00:54 +0000
Manifest this update: Sat 28 Jun 2025 11:00:54 +0000
Manifest next update: Sun 29 Jun 2025 11:00:54 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: in8uxCqTpq6eiHAmyVIHbZpbkhUHxlosWNtB153t/F4=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:88:b6:97:91:6f:11:5e:dd:30:4b:7b:c4:a4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jun 28 11:00:54 2025 GMT
Not After : Jun 29 11:00:54 2025 GMT
Subject: CN=c24d12cf9ef923759afc3db853afa5a2802de639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:b0:70:57:c6:11:90:af:7f:e4:d8:bb:b7:
cc:ae:02:16:c4:ab:63:60:85:d8:9b:98:1b:3a:7a:
67:36:64:55:0a:1b:d0:cc:8b:e6:4a:78:db:16:46:
ad:ee:06:04:2a:a3:4c:26:97:ac:9c:fe:05:f7:e4:
c9:9d:78:53:c8:f3:dd:e3:92:97:f8:bd:ed:38:a4:
69:3a:04:0c:13:7e:8e:6e:58:5d:c4:1a:87:96:ae:
ab:63:0b:dd:d6:1b:ac:81:1e:97:53:75:67:eb:82:
78:aa:be:c6:ce:0e:8b:b0:80:44:3b:8b:36:be:53:
1b:2b:d9:c1:a3:17:5b:de:0e:ff:56:ea:30:d4:f7:
81:d1:88:aa:34:c1:de:c0:47:07:c1:3b:55:2b:c5:
33:23:e9:b4:09:83:80:c9:85:53:5f:58:1f:0d:fc:
ff:7b:da:fe:a1:bf:c3:f1:e5:44:49:19:1e:b5:5d:
c9:37:87:39:82:58:56:91:1b:22:0c:cb:36:51:25:
97:89:01:40:1d:95:72:25:86:8c:ba:22:70:f6:1c:
5e:57:14:14:ea:55:b8:06:79:03:cb:17:42:83:c8:
8c:4e:4a:d5:10:de:8b:9a:99:fb:d4:cf:d4:8f:09:
fe:6a:8f:9d:94:20:27:bf:1b:86:f2:bf:f7:73:7a:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:12:CF:9E:F9:23:75:9A:FC:3D:B8:53:AF:A5:A2:80:2D:E6:39
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d9:34:8e:2c:20:25:c8:2c:f5:71:8b:4d:cb:39:e9:2f:77:
14:ad:6a:06:f4:a7:45:a9:c0:eb:cc:ae:53:f5:78:cf:6b:d7:
1d:67:35:aa:2d:fd:5e:c4:67:a8:99:69:9d:d2:89:ed:ec:97:
82:97:38:ea:55:86:ed:7e:a4:39:b1:6d:c0:56:88:1e:0f:d7:
ff:70:b3:70:7e:bb:62:d7:e7:c9:b0:91:01:37:a9:8d:13:0f:
ca:87:76:84:2c:e9:84:34:c1:57:8f:67:57:a9:3b:38:18:b9:
89:45:19:40:0e:44:a7:0c:3a:f5:c7:58:74:f9:a9:00:7d:f1:
57:c7:e8:c9:dd:08:01:fc:a0:92:4f:60:63:68:97:1e:b8:eb:
60:ec:e9:3f:21:5f:7e:07:f1:27:93:2e:bb:c0:98:38:b6:da:
de:8f:de:dd:0c:69:c0:94:ff:ae:7b:28:58:58:ff:5a:70:f2:
45:d8:05:bb:44:a2:cb:20:45:c1:1b:75:52:e5:61:77:81:6c:
a9:ca:97:24:91:65:0a:aa:40:ad:15:0f:24:e7:63:a9:ba:f1:
6d:3b:3e:ed:48:53:d8:80:21:b8:93:fa:1a:f9:d8:84:49:4a:
19:11:85:0b:a2:df:19:94:81:89:83:fa:3d:51:f2:86:51:b4:
b5:ac:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:13 2025 by rpki-client