Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: F2BFAxn0m5RMLcNc5WMVKXEo6HYgRwAUvQtxoLN8x48=
Subject key identifier: 15:C8:6D:20:05:21:17:B9:42:1D:EC:5D:1B:AB:E3:32:2E:DB:F8:D0
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 0197B88FC035A620C7775BDCCCD8DCD5BC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:57 +0000
Manifest this update: Sat 28 Jun 2025 22:01:57 +0000
Manifest next update: Sun 29 Jun 2025 22:01:57 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: kXwRjbtmjL+hpSmZ5vP6fqon/YmEZGe0YrP8MWCo6oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c0:35:a6:20:c7:77:5b:dc:cc:d8:dc:d5:bc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Jun 28 22:01:57 2025 GMT
Not After : Jun 29 22:01:57 2025 GMT
Subject: CN=15c86d20052117b9421dec5d1babe3322edbf8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:67:e3:1f:74:8b:ee:60:95:0b:a0:11:9b:
7d:c9:2e:61:9e:72:fa:d4:2e:65:a4:35:90:b8:5f:
cf:33:6f:9d:9d:bb:9f:4a:76:e2:83:7a:5d:10:b5:
4b:e3:3c:6f:2f:2d:c9:81:42:2a:6d:bb:28:85:7a:
b4:d1:a8:b5:c7:40:4b:ad:b7:f9:be:cf:b4:25:33:
cd:50:cd:f7:0b:6d:42:97:00:6c:ba:09:37:53:46:
72:30:05:c8:fd:3a:94:f6:96:3b:04:47:cb:f2:7c:
4d:39:fd:a5:df:46:9f:4e:48:14:52:93:3e:3a:86:
01:9b:2f:4b:fe:7e:0d:40:79:28:ba:4b:93:fc:fa:
87:f3:2f:c2:e6:0f:b4:5c:25:18:38:57:c6:44:98:
43:d1:00:55:76:39:07:a7:28:d7:d3:8b:6b:f7:a7:
23:16:80:d7:c8:d8:01:fc:44:59:4d:2d:d0:41:69:
42:da:ad:9d:dd:76:60:42:a0:9d:7e:ce:68:10:b0:
60:f4:34:85:1e:00:c4:ae:27:2f:15:20:31:99:5e:
ca:e9:5d:34:be:ee:4a:56:8e:23:01:6e:8f:28:2e:
8d:f5:25:5c:d5:5b:d2:43:0d:cd:04:47:95:f1:25:
0c:fc:de:7f:32:53:13:4c:93:6b:24:bd:e3:30:6a:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:6D:20:05:21:17:B9:42:1D:EC:5D:1B:AB:E3:32:2E:DB:F8:D0
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:49:11:f9:cb:11:2f:4d:96:3a:d3:91:f0:e3:d9:8d:40:95:
b2:9a:43:7a:8a:4d:24:88:c9:77:1f:45:0d:2c:dd:ef:fa:d7:
9e:ad:f7:18:51:9f:a1:59:a0:08:0a:16:1b:80:a7:7b:ac:5a:
be:9e:a2:ce:0c:ad:68:1b:8c:e3:a8:c4:0f:d3:ef:4a:ce:0b:
e7:2b:68:20:b7:3e:bd:15:3c:24:53:e8:57:94:7d:4d:2b:11:
fb:1c:d7:5e:f9:09:61:4d:63:fa:1a:18:50:07:50:a7:01:33:
2c:98:b0:13:d4:ed:37:f4:7f:12:ea:99:6b:33:71:9d:07:6a:
56:64:5b:7f:80:7c:12:59:2a:9b:d3:c2:65:1e:6c:c4:ca:e6:
f3:e9:0a:7a:68:b3:be:cc:b0:32:93:81:db:6a:7a:e8:b0:bc:
c5:fa:8a:50:9a:e3:bf:85:9e:0d:50:9a:5c:00:78:bb:fd:d8:
88:5f:8e:c8:ef:ae:c5:08:16:4e:f7:d5:5a:ca:72:0c:2d:70:
1f:5c:ef:22:37:f8:d2:70:05:c6:92:67:7b:15:95:0f:df:68:
f0:06:35:c8:77:d2:d6:f0:4f:fe:47:b4:ef:89:c1:99:c8:15:
a0:42:aa:a6:93:b4:fc:65:3a:81:4b:49:71:48:25:57:6f:8f:
da:24:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:54 2025 by rpki-client