Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
File: gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json)
Hash identifier: SDnff/thBtaidXf3hpsEnGYGjtCjUfR6lRtLCgJbsoI=
Subject key identifier: 3C:A7:AA:56:DE:5A:F7:35:A8:ED:18:78:55:B0:88:CA:A6:7D:72:1E
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 0197B821403D32D728AA68B9837825E64823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: YsPCa2LhHTzsReR9IeNzv5T3mos.roa (hash: LDFsTcsV1AxqY+xNyJv9Hm+hGyPSKYS1sTcP7lh9G1w=)
2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: 6m2NrynAtCbZkSYdTOAGnNlXZ/yY0iiSKKSyx1MIrbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:40:3d:32:d7:28:aa:68:b9:83:78:25:e6:48:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=3ca7aa56de5af735a8ed187855b088caa67d721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:cd:c2:40:0a:bd:03:a2:9a:a6:b5:f1:11:
33:f0:8b:38:73:8a:62:9c:63:ed:07:b1:40:75:3b:
1f:e0:50:7d:36:68:55:55:21:c6:b8:54:7e:43:4e:
50:c3:9b:96:10:7b:71:35:c5:04:23:e9:f0:f7:4c:
59:01:9c:d0:7f:0c:e9:b4:de:d7:37:bd:3b:69:c0:
96:9f:e9:e7:36:04:3f:25:6b:c6:bc:6a:1d:7a:03:
4b:8a:90:04:18:b2:bc:2d:8c:fb:e6:56:5c:2a:05:
ef:4e:ea:90:a3:c7:bb:8d:1c:65:7a:02:25:4e:e9:
d5:97:fe:8c:68:0f:4d:7e:fd:b9:8b:fa:cf:4c:90:
57:3f:a4:19:ef:c9:54:a1:e3:39:74:3a:ff:df:32:
62:db:67:a6:c7:a7:fb:a9:d5:39:2f:b5:32:b8:0b:
fc:14:a4:4c:24:e9:59:d3:87:2a:6c:2e:fb:ae:bf:
d0:49:1b:ad:37:56:5f:5d:ce:05:d8:c1:f4:b7:f4:
4d:00:d8:ea:28:a8:10:d6:7b:88:dd:7b:cf:5c:35:
75:4a:e6:f0:84:42:bd:70:ff:d0:b9:4c:de:ea:0c:
83:c8:91:9c:23:3c:cf:67:36:80:5d:27:c7:44:86:
2c:b1:7f:f4:b4:16:2b:2c:65:69:fa:24:8c:07:f5:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A7:AA:56:DE:5A:F7:35:A8:ED:18:78:55:B0:88:CA:A6:7D:72:1E
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3d:86:ea:d3:2e:0a:9c:92:8f:3b:8b:20:85:b0:4c:81:ff:
b7:c9:3b:ac:0e:04:6b:77:0b:ab:c1:c4:59:89:6b:15:fd:ae:
99:c0:28:61:ed:1f:63:79:98:1e:08:d0:7d:af:58:7b:12:81:
87:eb:38:0d:65:2e:9c:e1:81:af:6b:17:24:d0:f7:35:fb:f6:
38:d5:e3:de:93:46:8b:c7:41:55:ae:82:38:fe:b2:df:1a:af:
3e:c2:9a:8e:95:ad:24:99:3d:07:74:cb:f0:7b:7d:a6:0e:cb:
a6:1c:90:4f:8a:f6:ee:6a:ee:38:15:18:d3:6c:a3:cc:c9:2c:
f9:ca:e1:c2:45:2e:fb:54:3d:19:5f:c3:4c:ab:90:de:d6:8c:
44:11:8f:a5:91:53:d2:ea:b3:5b:a1:ba:ac:dd:4e:01:6e:c3:
8b:31:49:be:68:4f:3e:53:6a:a7:4a:bf:7a:ad:6e:b3:22:67:
fc:71:69:22:aa:11:28:91:10:87:ca:0e:69:09:e6:54:d5:c4:
a0:de:ee:6e:56:a0:5c:8c:60:e8:5d:26:62:fd:bb:cf:a3:97:
b9:c7:69:a8:45:a4:28:b0:97:55:ed:e8:40:06:27:e4:2f:49:
8d:19:e1:bf:13:35:81:cb:f5:8f:3a:53:b1:54:34:40:08:21:
e4:0e:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:35 2025 by rpki-client