Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: dpnBNWtNUCQBgBEeILGn0klJQtPU1wjC/r6L+Y0tgcE=
Subject key identifier: 95:14:E0:76:66:5B:A1:79:A3:FD:53:F4:98:7D:25:21:D9:2C:91:FE
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 0197B6D772F841872A9C45D0F13A7F3DF658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 10D6
Signing time: Sat 28 Jun 2025 14:01:02 +0000
Manifest this update: Sat 28 Jun 2025 14:01:02 +0000
Manifest next update: Sun 29 Jun 2025 14:01:02 +0000
Files and hashes: 1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: 9R/sJ3pdhd4aalA+54fisAevt3wcTuBj5BOKtb0LwnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:72:f8:41:87:2a:9c:45:d0:f1:3a:7f:3d:f6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Jun 28 14:01:02 2025 GMT
Not After : Jun 29 14:01:02 2025 GMT
Subject: CN=9514e076665ba179a3fd53f4987d2521d92c91fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:2a:19:15:38:6f:cf:fb:7a:c6:dd:41:a6:
12:93:13:d9:dc:bb:62:50:e1:41:20:aa:f8:3d:11:
79:71:b9:a6:b4:df:78:1a:c1:d0:32:09:bc:7a:12:
83:d3:cb:c5:89:c4:3b:81:08:06:20:4e:da:15:ae:
a2:38:79:96:70:e3:fa:fb:55:47:18:ae:3e:17:f2:
0e:39:ed:97:3f:e4:36:ec:6b:26:1c:19:2e:94:09:
66:3d:cd:3c:90:39:cd:c3:2c:74:d0:68:1f:1e:1e:
2f:fa:9f:09:ee:0c:61:30:c9:f8:9b:7e:e6:dd:3a:
d6:d4:1c:2e:36:f3:86:d9:c4:07:bd:de:7a:8d:b6:
6e:fc:b7:76:02:13:9e:89:84:94:e7:30:26:8f:6d:
10:f1:5f:59:e9:cf:77:e0:4d:7c:43:fa:61:e0:c3:
aa:07:fb:b0:f1:5b:11:8f:67:a3:38:cb:e4:72:63:
3a:67:65:9b:41:d8:48:00:fc:d1:e2:a9:8f:2d:90:
95:89:4a:16:61:8e:ec:e3:ad:b0:1a:62:bf:c1:95:
5a:31:dd:d9:b6:cd:57:cb:2a:fa:dd:f3:60:90:8a:
d9:5c:ff:75:58:91:63:03:47:0d:d8:6d:35:7d:b4:
d8:3c:19:f6:83:fa:b0:d0:40:75:40:34:a8:21:82:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:14:E0:76:66:5B:A1:79:A3:FD:53:F4:98:7D:25:21:D9:2C:91:FE
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bd:70:a2:89:5d:92:7e:c5:a3:04:dc:6e:46:eb:20:9e:43:
4a:80:fa:0f:78:34:3c:7e:11:e4:c1:e7:2a:ed:a2:06:30:38:
52:c2:35:7c:b9:1d:7d:f7:7b:e7:ad:df:28:e6:8f:91:bc:cc:
7e:92:ea:71:06:ef:29:9c:af:00:57:cf:91:43:99:4f:af:d2:
67:e5:2e:de:ae:27:8d:76:16:83:49:b8:6a:5c:59:1f:f5:5d:
a5:9f:71:31:20:63:45:af:df:95:3b:7e:ee:ee:36:25:c6:7a:
fb:ab:a1:44:8d:84:f1:15:28:fb:be:25:fd:b0:28:4b:5c:4a:
a8:32:f3:87:51:1a:5c:7e:be:b6:59:da:c9:9b:28:63:89:b5:
a0:1e:24:8a:91:d4:1b:68:02:bc:51:46:1a:f6:3c:3c:b1:8b:
c1:5d:89:9a:67:8b:06:9e:8f:2e:a9:4d:ee:bb:67:95:78:60:
83:79:28:71:48:c2:09:d3:ff:43:32:47:40:17:fb:2c:5a:f4:
00:a2:3e:c3:08:c2:c6:30:9e:41:99:f6:07:8e:6a:56:fa:93:
70:ed:c4:7a:9e:e7:4f:87:d0:83:e0:88:2a:13:38:de:02:85:
37:ec:d4:d2:01:07:32:24:2a:d9:17:04:37:2c:38:56:d4:e3:
29:fd:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:18 2025 by rpki-client