Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: S8BhOJ3qP0GaMNvUyvpHxQcijPY5IHag2vUXNXpwxN4=
Subject key identifier: 18:C3:F2:15:6A:2F:78:B8:E9:97:75:78:F5:CB:93:8C:2E:34:E4:D5
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 0197B6D7B11CD3533471BA4349DA63C0224C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: EtdaqbX4Nd2Y/9qAtBiVHrVF3C44xYhcAhdVUTFUVBU=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b1:1c:d3:53:34:71:ba:43:49:da:63:c0:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=18c3f2156a2f78b8e9977578f5cb938c2e34e4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:48:ed:70:2b:63:39:8e:4a:38:a5:12:71:
b0:ff:72:03:71:fb:fb:1c:1e:ff:4e:a9:02:66:ba:
e8:57:c2:be:00:fd:77:46:41:60:49:9f:32:b3:3e:
da:eb:87:ee:ca:e3:84:aa:6e:7b:e6:5b:5e:47:6a:
44:bd:5c:da:fa:62:48:a8:f3:f3:90:1e:19:c6:4c:
95:0d:96:47:cc:cf:db:7d:20:9f:60:7d:fe:d6:d4:
8f:84:26:5a:61:51:af:cc:e6:21:d9:8b:43:39:ba:
cc:5a:0a:f3:0b:a3:e7:76:f9:fb:f3:31:0e:99:f7:
80:4d:65:b4:48:29:66:8a:30:86:ba:d2:48:f7:8b:
fa:b0:6a:c0:ed:6d:ce:47:42:c3:6b:ee:c2:67:36:
46:d8:c1:df:94:3b:5a:14:a7:5f:57:8d:4e:94:9f:
36:11:35:0c:75:94:d7:7c:84:87:92:02:b3:50:9d:
1d:d4:7c:34:5c:be:49:55:52:f7:9b:b2:e8:93:66:
40:87:b6:a0:ca:f8:d4:aa:99:04:bb:2d:b9:27:ae:
33:b5:81:fe:43:9e:a1:e8:31:3f:1b:ac:9d:73:0b:
3a:f5:cd:b8:9a:a9:77:66:e6:83:1a:12:e7:a2:75:
eb:5a:6a:1d:77:a3:c2:4a:ab:3e:b4:1a:88:81:e7:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C3:F2:15:6A:2F:78:B8:E9:97:75:78:F5:CB:93:8C:2E:34:E4:D5
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:28:ca:f4:ce:d0:d8:f4:a8:38:26:3f:87:b4:08:9b:08:30:
44:f5:f9:47:8e:7a:b9:ea:b2:61:e5:8c:71:b8:8a:19:aa:b1:
7d:d6:16:07:a5:97:91:ad:78:9d:c1:5f:14:5b:f4:1e:79:59:
8a:23:75:43:fe:1e:58:84:bc:29:a5:7d:0f:df:2f:27:9a:76:
a6:ba:be:68:bf:b0:1f:6e:70:37:66:5c:a4:15:da:08:6a:33:
a8:7d:dd:60:5d:a1:f9:35:14:a3:21:4e:02:0a:fc:2e:6c:ed:
3e:44:64:1c:e5:e6:f8:86:05:cc:ef:20:6a:65:dc:a2:0c:ce:
f1:90:57:4b:7e:38:e2:12:a5:4f:ff:63:7d:c9:b8:76:c0:ce:
dc:a9:91:cb:38:19:40:99:46:6c:98:e6:fa:f1:cf:52:0d:eb:
f7:bf:ab:10:9b:13:b3:a2:84:d2:31:42:32:80:50:47:44:18:
2a:6f:a4:a2:63:8f:b0:ff:9d:bf:8f:39:ae:ae:dd:4a:2e:6e:
c1:49:2c:e9:18:d5:38:9c:fe:2b:8b:52:2c:e2:06:e0:23:2e:
61:89:c2:7f:77:27:4a:2b:1f:2b:9d:c2:94:3e:52:6a:cd:c3:
a9:36:60:52:6f:ed:ae:72:b1:5b:99:5d:63:a8:bf:bf:a9:1b:
29:fa:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:36 2025 by rpki-client