Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier: UZ1Eh0Oi/JTa15iJjie7e6su2CMctvynckXpAkun2ic=
Subject key identifier: 20:BD:90:70:39:77:59:28:B3:14:FC:06:CF:55:AA:12:C8:BB:2D:D6
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 0197B6A1D68B9284006624C627F99DA3B74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number: 13D4
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: XAzwDefyxZcbgYghuBWg6ISAoAjrbboJM2KDpGLfQcA=)
2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d6:8b:92:84:00:66:24:c6:27:f9:9d:a3:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=20bd907039775928b314fc06cf55aa12c8bb2dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:ee:21:36:c6:f4:37:fb:07:5c:74:db:91:
c8:26:c0:7a:ea:9b:18:3e:89:9f:2b:1d:84:12:1d:
fc:e6:98:cf:a8:54:12:5b:6b:f5:0a:8d:e5:c2:4e:
80:f8:f0:4b:f2:10:d9:53:28:81:20:d6:65:7b:d5:
4e:89:08:69:54:df:b0:14:8e:16:32:a3:a5:3f:75:
da:40:6e:8c:26:fa:14:9e:7c:99:5e:b0:74:32:12:
10:6d:4c:4f:39:c1:e3:81:d6:ad:26:59:63:cb:87:
57:98:a6:a2:8e:ec:59:a9:66:0f:78:6f:80:0b:3a:
20:fd:04:1b:07:ba:60:90:e4:d0:78:e8:e9:fd:e6:
a5:90:74:b7:a0:58:0f:87:db:dd:f6:eb:b1:e0:5f:
7b:48:f2:2c:08:20:d7:a9:e4:b5:c5:d1:d5:3d:ad:
d5:43:8e:d6:53:bc:1c:cc:96:2a:0b:20:0f:92:8f:
f1:dd:64:ae:34:22:fa:86:a6:ed:43:87:96:f3:c7:
96:a9:d3:b6:26:75:af:68:96:cd:e4:54:66:1c:56:
24:76:7b:02:42:a4:70:34:19:3c:81:22:3e:b2:52:
37:8d:7b:97:01:ff:fa:f5:15:86:2a:50:3f:68:b4:
f5:41:a5:e5:e8:f4:30:ee:2f:8c:6a:f5:61:24:20:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BD:90:70:39:77:59:28:B3:14:FC:06:CF:55:AA:12:C8:BB:2D:D6
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:82:7c:10:7a:b6:f9:80:8c:84:b1:ba:3e:dc:1a:2c:9c:91:
c6:f8:74:dd:a4:ec:86:26:87:1f:85:1e:bb:06:3b:6c:dc:34:
0d:1a:de:7c:ed:b8:c9:0e:0c:9a:95:f2:c7:cf:20:30:1b:93:
d0:ac:66:59:69:c3:bd:00:94:e0:8e:4e:13:6f:78:eb:d1:bf:
9f:fd:50:26:5e:69:49:d0:e6:9b:65:c8:f1:88:f5:5e:65:08:
8d:6a:9a:e4:43:3b:e2:64:ba:86:b5:2a:42:53:b4:1f:ed:80:
1f:17:4f:92:43:ee:9a:74:3d:50:4e:d5:d3:5b:4b:e6:81:04:
0e:41:dc:6d:b9:3c:fc:f6:8b:ce:1c:3e:ea:6f:c6:40:4b:9e:
c9:71:80:3f:0c:e4:5c:a4:c9:fe:05:24:4b:e3:de:ab:83:91:
8f:9c:d2:df:a0:29:d3:00:7b:fe:33:38:63:67:97:e1:7c:82:
45:10:81:27:8d:6a:17:d1:27:4a:19:83:07:36:07:7c:29:8f:
7d:b9:ad:3e:98:f4:a8:29:b3:73:b9:ab:15:ff:ad:10:4e:06:
31:19:ad:46:45:fa:0b:94:c0:67:c4:47:05:b5:52:cd:82:42:
27:d2:6a:a6:ce:d7:2a:cb:fd:45:dc:93:73:bc:84:d8:0d:25:
d6:40:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:30 2025 by rpki-client