Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
File: GDDmA-nKjAXUwbxisLdue9nRiQk.mft (raw, json)
Hash identifier: hxd0aAI9yePC4WAspExLhk8+yHQ6+pqMaKyH52TPkzA=
Subject key identifier: D5:26:40:88:30:57:B8:62:DC:9D:09:70:FC:47:82:36:A7:FF:35:5C
Authority key identifier: 18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
Certificate issuer: /CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Certificate serial: 0197B7453E28CD775AF0AA73E49932EDB2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: GDDmA-nKjAXUwbxisLdue9nRiQk.crl (hash: KR6NXqUVjGE8W5GwvSQmZ0bgbhQg11tdbPBFX3GQNXw=)
2: o4yUZzbKz_wfUkXyIRtz_sPdHfw.roa (hash: BiVeXsHTenn/poTYlXrG4Bvxv5uxzXwbjeteQc7yW9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3e:28:cd:77:5a:f0:aa:73:e4:99:32:ed:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=d52640883057b862dc9d0970fc478236a7ff355c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:c1:d5:15:27:9f:cc:81:ba:5f:1a:08:02:
e4:d7:58:50:67:57:4a:0a:a5:fd:91:f3:9f:e0:f1:
2e:14:bb:3a:a2:d6:71:20:5a:f7:f7:49:91:07:78:
f4:4c:21:56:62:47:e6:f7:2c:88:b8:78:04:c8:45:
20:f2:8b:79:03:52:c4:13:ac:6c:52:8c:75:2d:3b:
46:59:58:b1:52:a0:f3:4e:7d:20:d6:6a:f5:98:75:
5f:81:16:24:98:53:3e:6e:33:ea:72:52:c4:08:2b:
83:b2:0e:07:8a:12:c3:fd:82:10:cc:e6:ac:28:5e:
d3:83:30:32:4b:3e:9c:82:18:2f:d8:57:56:25:69:
22:91:8e:f1:a7:fa:36:92:b6:20:cf:53:cd:8f:2b:
77:59:d4:66:81:82:26:c7:04:27:db:7a:c7:fd:14:
87:f2:b1:df:5d:da:ea:dc:d8:5b:b7:29:40:80:e3:
cb:29:c6:ed:3c:59:36:1f:30:39:71:ca:49:03:cf:
37:ab:84:1d:47:af:8a:15:63:38:cd:ad:53:3d:a4:
b1:52:37:d0:1b:5a:74:b9:70:cc:e4:0b:97:0b:51:
0f:75:de:dc:f1:fb:4b:77:2e:24:3c:04:fe:db:2a:
68:d0:e0:25:4b:5e:bc:80:3e:2a:e9:65:77:de:fa:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:26:40:88:30:57:B8:62:DC:9D:09:70:FC:47:82:36:A7:FF:35:5C
X509v3 Authority Key Identifier:
keyid:18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4f:fb:32:c0:5f:18:ee:9f:4f:f5:37:d6:cd:4d:16:da:35:
63:24:d8:13:15:12:22:02:d3:8c:1f:17:de:4c:07:98:52:92:
a8:ba:d3:c8:67:5c:de:62:28:6f:42:4a:ff:96:a8:d4:b6:9f:
74:64:8d:a0:fe:a3:d5:dd:64:c0:b8:d7:34:b8:8b:1d:cd:7e:
57:7f:92:64:63:d6:1b:de:0c:2f:74:8e:c5:b0:d0:8a:0d:38:
0b:d3:14:18:75:6c:5f:77:e3:1c:ed:24:c8:49:bb:40:4b:80:
f3:5d:bc:a5:4d:f5:0e:fc:f6:12:4d:b2:a5:b4:d1:3a:ba:db:
97:a8:ff:72:5d:a5:fe:33:44:47:19:4c:63:13:39:ca:87:36:
b4:dc:29:de:ae:8f:7a:ce:9c:d2:5f:54:4b:14:ec:a6:b0:1a:
4f:80:a2:0a:b8:63:2d:25:8e:2d:c5:4b:1a:9e:31:49:69:0f:
27:5d:35:6f:d9:86:14:8f:f2:7c:af:08:c5:08:98:bd:1d:58:
02:84:61:22:91:eb:a3:59:f3:a3:96:23:48:e6:f6:42:4c:ef:
30:bc:bb:91:30:aa:7f:54:41:6f:84:1b:07:d2:e3:de:54:6c:
90:fa:fc:15:eb:be:67:e7:39:09:7a:ea:fc:98:cc:e5:f6:75:
60:e5:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:37 2025 by rpki-client