Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
File: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json)
Hash identifier: QglZaRGSKny7aGjimhWsYjjTb1gTrsxxM/5oldn3U9Y=
Subject key identifier: 95:9D:37:4B:3C:BC:A1:B9:52:02:ED:C4:EF:36:5D:03:09:8B:81:96
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Certificate issuer: /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial: 0197B7456FA149B679D4F904F327E16CA979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: 2nLsQqPE5llC17hwQkkSOMH6bAs.roa (hash: bh0+wwwfSzTifnsB5Zplv4YF5NGG3Z0ysixgx0plOO8=)
2: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: 3u8Gof0HbZHFr5tDWWBSif55HuKK9gCyZfsuhyUk99Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6f:a1:49:b6:79:d4:f9:04:f3:27:e1:6c:a9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=959d374b3cbca1b95202edc4ef365d03098b8196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:03:14:ac:39:3f:be:2f:ac:b3:fe:13:fb:
4a:dc:b7:ff:4b:47:6f:41:3a:50:82:da:9c:3f:7d:
4a:3e:ac:01:48:f7:e5:a7:76:46:73:10:1f:3b:59:
c7:61:83:9c:92:dd:f7:b9:5f:64:d3:e0:bd:d4:52:
ed:b4:b6:fb:7a:76:90:b2:d6:37:55:29:f6:e5:71:
ea:14:12:e3:de:ae:a1:68:c3:36:0f:85:93:69:dc:
a0:a6:28:6f:af:f6:de:37:73:4e:7e:0f:9b:0d:63:
8d:14:04:6a:8d:c1:11:4b:e0:c9:ba:a8:a2:e7:68:
6b:94:f4:8a:83:fa:b4:69:81:d5:53:9c:2b:08:0f:
14:99:94:f9:5d:ca:91:c4:30:f8:57:6e:69:96:92:
1d:82:7d:ee:b9:12:ad:c9:c6:ce:ba:bc:6c:ef:f9:
cd:0d:4d:02:e2:8e:ca:16:d1:f2:6f:52:f5:d0:c0:
21:c4:d7:fa:26:25:45:3e:e4:01:ff:78:01:31:83:
2a:a6:41:e3:60:69:14:41:70:72:d0:84:54:05:e5:
80:48:39:69:25:df:cb:58:c6:aa:e2:ef:3f:02:c2:
8e:b6:54:bd:7b:31:f7:e1:f3:a1:ec:b3:79:75:95:
0d:77:2d:48:7f:08:a3:aa:ef:c9:3d:fd:47:f4:15:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9D:37:4B:3C:BC:A1:B9:52:02:ED:C4:EF:36:5D:03:09:8B:81:96
X509v3 Authority Key Identifier:
keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:74:3f:a5:94:36:28:af:b6:39:c0:04:20:e6:89:d3:ca:43:
1d:25:9e:33:fc:3d:2a:c0:3b:6f:69:97:ca:22:99:60:fb:1c:
25:24:cf:35:02:ce:d0:83:4e:44:f9:b5:e4:53:93:b4:0c:06:
21:52:b7:0d:b4:f5:77:99:8e:5a:82:3e:89:22:4e:1f:27:4c:
64:95:fa:76:60:56:32:40:79:fe:7b:1a:4d:c1:75:28:95:44:
0b:db:1b:3b:f9:65:66:6b:9e:9b:79:af:cc:8c:6a:2b:4c:b0:
96:0b:d9:f4:d0:88:6f:83:6e:d8:d7:9f:9c:9c:57:a2:f7:5a:
19:55:2f:a0:b3:2c:25:fd:df:c9:53:4f:d1:67:0b:41:2a:83:
91:49:3b:a8:d5:8a:8e:ac:15:c0:e3:0a:23:a4:d6:26:72:e2:
e2:04:4c:4d:51:b1:ad:36:1e:5e:a4:24:00:48:be:33:22:17:
5d:79:a0:19:26:a8:22:93:79:e1:71:a8:b8:67:6c:81:16:f4:
c7:8f:74:db:fa:dc:3f:39:60:ca:ec:dd:3c:a9:6e:3b:45:12:
4d:72:c6:34:d0:07:f5:95:86:8d:30:07:f4:2b:9b:d4:8f:fc:
fa:ad:2f:3c:26:14:85:ae:79:77:1c:61:fb:7a:0c:0f:2c:db:
38:15:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:49 2025 by rpki-client