Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File: gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier: Kj0shNKHhuXVyOGjGWvFW5J+b3wPgLQl7uu89CDd0Cw=
Subject key identifier: 8D:00:E9:2E:44:34:BD:74:B8:76:A7:93:20:DF:08:F1:54:18:78:0F
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer: /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial: 0197B820F6A4D4C03305501CD2022A627514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number: 04C9
Signing time: Sat 28 Jun 2025 20:00:57 +0000
Manifest this update: Sat 28 Jun 2025 20:00:57 +0000
Manifest next update: Sun 29 Jun 2025 20:00:57 +0000
Files and hashes: 1: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: rWaLmUjkNPOb4L27EFdcRz5zVXZaSmpllnDZPlWftK4=)
2: kwCip9bpks_MxIN5r8NE5b6pcCA.roa (hash: ZeSOKj/aYYMZXd7Dug4q1iZDEoHYeGkqnVSfcCaU2uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f6:a4:d4:c0:33:05:50:1c:d2:02:2a:62:75:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Validity
Not Before: Jun 28 20:00:57 2025 GMT
Not After : Jun 29 20:00:57 2025 GMT
Subject: CN=8d00e92e4434bd74b876a79320df08f15418780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:d2:e6:15:cd:5e:d9:87:83:98:c7:48:7a:
3b:12:6e:2d:c8:b5:3e:61:59:bf:f0:54:5a:5f:d7:
e2:a4:f1:26:14:f2:21:3b:a4:56:8c:3e:d2:79:1f:
fa:44:53:90:bb:a4:7a:01:fe:d7:2c:97:9b:c8:b5:
0f:bf:f9:4e:87:16:da:83:31:ea:7e:ba:7a:3e:e3:
2d:4c:d5:5b:d3:4b:75:26:7c:83:1c:74:bf:bb:df:
18:8e:88:38:2f:71:d0:88:f5:41:68:54:0c:22:13:
2f:73:58:1d:cf:16:cc:a2:b2:43:4c:fe:b5:8a:1a:
7f:5f:68:99:34:24:6b:dd:62:a5:d6:fd:43:3e:7c:
09:16:4a:29:ea:7b:90:23:8b:f0:18:29:ac:ae:5b:
44:b1:56:aa:fd:be:53:76:95:73:17:ff:f2:7a:54:
5d:27:6c:bd:4f:77:79:b4:c8:2f:9a:a4:c0:33:45:
54:09:85:c7:16:53:e4:bd:dc:6a:d0:0a:de:f7:44:
3c:0c:69:62:61:5b:78:57:bf:a1:f1:0a:31:b5:57:
d0:94:00:75:58:bb:72:c8:5f:17:14:c5:f3:58:7c:
36:28:e8:5a:f3:43:43:74:eb:c7:0b:49:c6:5e:ad:
bf:b5:d6:5c:44:7c:b2:03:1e:8b:88:72:16:fd:a4:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:E9:2E:44:34:BD:74:B8:76:A7:93:20:DF:08:F1:54:18:78:0F
X509v3 Authority Key Identifier:
keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dd:12:5e:32:0a:4a:33:e3:94:90:3b:0f:4c:fc:f3:aa:37:
5e:26:d5:84:08:4d:05:df:90:86:67:d6:52:4e:75:e3:af:db:
9b:84:77:80:f1:f7:37:ee:28:fe:e0:60:ca:17:2c:d5:a8:c6:
af:67:2c:af:33:15:0a:f4:ba:5e:a8:ca:00:08:f8:f3:c7:a7:
09:c2:16:80:70:55:ad:8e:77:dc:01:92:91:d8:e3:df:16:d8:
c3:f9:33:d7:50:ba:1e:21:d1:06:2d:e7:b7:15:91:d9:be:41:
e1:2e:98:e0:97:36:bb:b5:ee:55:ae:ef:52:4d:bd:c1:63:b1:
e7:0d:97:77:49:c7:52:e3:2b:02:1d:b6:9e:e6:44:95:ce:92:
66:ad:4a:84:09:57:ba:4a:61:4a:0f:3f:6e:d0:21:4f:39:ea:
d2:08:5f:9e:fc:31:ab:5f:37:46:00:53:77:c9:8e:79:ea:af:
bb:ac:03:be:86:19:a3:fa:d6:e8:50:f7:2f:19:03:02:a9:93:
7e:42:7a:56:ad:b6:a5:35:a9:51:9b:5d:8d:19:4e:03:fe:f2:
9d:9a:08:79:f9:b6:a3:46:d2:85:1d:89:cf:57:a2:a4:60:15:
65:ae:60:d0:c1:d5:79:e8:2f:64:33:43:4b:25:9f:fa:fc:26:
4e:46:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:21 2025 by rpki-client