
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: egy/svHV5yXvEwtvTxaqmJvz6Ly9RPSISBYRuNmI6Bo=
Subject key identifier: BA:73:E7:42:3F:4C:59:41:F6:D9:E9:67:81:12:74:92:CC:6E:FD:23
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 0197B70F35067F1B0A1A4ECC9D86E6B7B57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 158A
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: Lg8wlRloJ/d38BP0bbDUNI23EYOxOiPqA39K/66pbsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:35:06:7f:1b:0a:1a:4e:cc:9d:86:e6:b7:b5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=ba73e7423f4c5941f6d9e96781127492cc6efd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:fc:d4:7c:c6:26:c0:46:6c:f1:89:19:99:
14:47:7b:db:65:16:30:bc:ec:45:b1:55:05:3b:10:
26:fb:dc:cf:c2:08:c6:5e:03:c9:a6:95:e6:19:a0:
28:54:2c:91:0d:80:d1:b7:af:8d:34:66:fb:9b:21:
08:1e:b2:8e:c1:15:58:c7:72:6c:bd:d3:00:c5:2c:
49:f0:45:b6:0a:37:14:50:51:e0:15:42:45:52:81:
ec:32:ef:48:41:89:8c:aa:d9:d7:aa:83:a8:1d:cc:
99:8e:75:8c:bc:62:90:75:dd:38:40:8a:40:68:a3:
1b:c8:cc:83:4f:7b:1a:c2:33:38:08:88:92:87:ea:
91:28:9b:d0:23:a4:16:d6:5f:91:1c:ff:d0:3f:87:
1d:89:67:85:eb:49:9b:d5:5c:ef:a5:ae:84:df:b1:
7f:2f:a8:d4:0e:e3:6d:bf:61:45:ea:d1:ba:82:d6:
95:42:56:97:dd:e9:75:ae:0c:95:c3:41:e7:7b:45:
db:32:eb:89:32:60:1c:a9:47:bf:e1:f9:c3:cb:79:
71:bf:c9:33:ad:81:b8:21:55:16:23:1f:7a:b1:9f:
d9:bd:0d:fb:f0:78:7f:43:e1:d3:a6:ff:78:52:60:
4a:4b:ba:75:34:65:4f:da:fa:e2:6b:dc:b5:e1:8d:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:73:E7:42:3F:4C:59:41:F6:D9:E9:67:81:12:74:92:CC:6E:FD:23
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cc:82:b2:85:9d:bc:80:5d:5a:81:d3:1c:de:e4:cc:23:db:
7b:b6:1d:92:d1:f8:b6:7a:32:79:ff:72:36:28:3d:6d:5b:91:
9c:b5:d3:35:07:6a:69:ee:62:b1:ac:26:3d:45:e5:fb:aa:a3:
c4:4e:72:2d:65:6e:4f:30:0e:c6:4d:36:c6:fd:67:c1:3a:a1:
e1:33:58:4e:99:b8:54:67:f1:ae:df:c6:64:e0:35:1b:e7:f2:
00:c2:26:0e:7b:ec:08:3b:af:09:aa:d1:5f:e9:bd:c0:fc:f7:
a5:7c:e1:d5:43:32:7e:9a:09:de:d7:ea:35:88:af:bd:76:21:
a3:67:0a:b5:c5:59:66:ac:49:f9:7a:d4:7c:67:d6:b3:f8:e5:
e9:71:72:88:23:00:98:c7:45:09:05:82:de:d5:16:f6:9a:ee:
f7:9d:0d:a8:91:06:e2:58:0e:28:f9:12:41:ee:b8:fb:0d:27:
f8:15:a3:f1:9c:20:33:26:0b:9f:5e:96:90:c8:e0:05:75:ad:
c0:95:9d:5f:de:35:ae:71:08:6d:71:ac:b4:b0:50:ef:87:65:
9b:cd:0f:2c:7b:ee:05:ba:cc:70:e7:f4:a0:ca:25:33:78:ba:
1c:53:3b:e8:4c:0d:71:27:42:59:a9:72:71:7e:88:da:d9:f1:
4b:48:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:24 2025 by rpki-client