Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: dTMDHJrURAtiu3kvmA/0042T7JYjIxVCCv1X+cZrkNQ=
Subject key identifier: 61:06:BC:71:46:08:AA:1D:E2:B5:86:D8:CA:4E:2A:46:FA:4A:BA:70
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 0197B933852EA83CACAC8A8240FDC0D49708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 01:00:50 +0000
Manifest this update: Sun 29 Jun 2025 01:00:50 +0000
Manifest next update: Mon 30 Jun 2025 01:00:50 +0000
Files and hashes: 1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: uAIwNWb2z9+6KKTQ3U1RqMuwXAJ4cZkVs06VOzl7/lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:85:2e:a8:3c:ac:ac:8a:82:40:fd:c0:d4:97:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Jun 29 01:00:50 2025 GMT
Not After : Jun 30 01:00:50 2025 GMT
Subject: CN=6106bc714608aa1de2b586d8ca4e2a46fa4aba70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:4c:1c:a1:d8:66:5e:96:96:9e:bf:91:b8:
eb:bd:f7:86:71:35:71:b5:2a:3f:bf:8f:83:b1:fc:
33:65:5d:ce:30:13:62:7a:4b:f1:25:2c:d3:f9:84:
9c:05:43:51:08:df:17:b2:24:1f:02:a1:6d:7a:1a:
b7:da:e4:51:a0:de:53:74:85:df:83:46:80:e0:0d:
b1:ca:f4:d6:c9:52:fb:c2:51:52:dd:6f:0a:d8:17:
78:1d:f7:9e:6b:51:84:36:2a:c3:e5:da:ac:7b:e1:
65:e4:40:02:94:1a:97:fc:32:ff:37:94:92:fa:28:
06:0a:03:9a:6a:99:2f:bb:83:e9:dc:55:30:02:c8:
c8:8b:f9:88:65:18:f1:69:85:c4:3a:6b:90:d2:5e:
f8:56:eb:01:d4:55:a4:4d:99:d6:37:01:a8:56:48:
31:83:af:ac:5d:b5:39:65:e3:f9:be:9e:69:c1:b1:
6a:88:b7:40:c9:66:8c:eb:51:16:5c:9e:8d:29:88:
b7:c8:90:a7:54:c2:6a:29:c3:a8:b2:33:ef:28:e9:
39:03:54:8c:62:d4:be:fc:67:89:0c:d0:07:2c:9f:
00:89:7c:cc:dc:d2:cf:0a:e5:bb:65:f3:a4:ec:8d:
59:37:eb:58:fe:e8:39:95:76:c0:20:35:d3:7d:b7:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:BC:71:46:08:AA:1D:E2:B5:86:D8:CA:4E:2A:46:FA:4A:BA:70
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e0:5f:9e:f0:b8:e4:e0:d6:a0:db:6a:f8:2c:f6:59:d5:e7:
f7:6e:d9:81:35:ca:4d:2c:87:06:12:ec:de:e8:a7:7f:05:14:
63:72:99:29:05:3d:c4:23:b2:56:eb:37:09:1a:d3:39:25:3b:
95:5a:dd:ee:85:51:e1:32:88:ed:1e:b4:17:1c:f5:cf:82:4f:
bd:5d:78:56:b1:55:c7:1b:e5:45:60:18:5c:2b:13:df:96:9b:
6e:ac:60:0f:36:22:f5:85:49:da:07:b1:32:96:58:cd:84:a9:
f1:70:0a:2d:94:a7:00:21:c5:88:c5:bf:7a:6d:9e:94:64:43:
c6:70:32:11:27:a8:8d:87:96:89:d5:a4:e8:30:e4:f3:99:4b:
46:45:47:74:4e:d8:70:20:7c:6d:66:a1:d7:94:fb:d8:c0:3d:
76:9a:1f:62:1e:c9:0e:7f:37:90:f4:23:af:ce:74:74:70:b4:
78:d8:e1:41:59:54:11:55:7d:19:69:72:14:fc:6c:5c:57:b6:
fc:68:dc:50:04:1b:5d:94:b5:c8:e7:be:88:a3:95:aa:3a:58:
f7:47:53:93:90:39:74:74:6e:e7:7c:a8:de:aa:e8:ce:f6:96:
e8:69:fc:c0:11:ff:31:50:72:19:ed:c5:a2:11:0d:7b:2a:85:
1a:7a:b0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:45:02 2025 by rpki-client