Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: A48ltsettrGsDuDhiQz5VETfYd01J1GUkHwcYzwd/zE=
Subject key identifier: A7:56:99:52:03:C9:EA:C5:0B:EF:0B:35:B3:CF:1E:46:2F:8E:19:C9
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 0197B70EB49C30AAAE9EA6258B323CADF04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: iVLz9dxJZVT1CjtQkUrC/YpLVT9hwBUyZgJLeeJtuG0=)
2: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (hash: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=)
3: cPOk9XaYMPnXv3i4A_ZWhKLa-c0.roa (hash: DgpoUG8V1y8nR1k4pl9K8GHgZay1hvO5tnK0jFOLUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b4:9c:30:aa:ae:9e:a6:25:8b:32:3c:ad:f0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=a756995203c9eac50bef0b35b3cf1e462f8e19c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:23:91:79:c5:c8:11:83:f0:19:26:39:36:
40:45:85:d6:e5:4f:9d:6e:d1:f3:3e:da:8f:b1:65:
29:1e:ae:40:15:fd:d7:2b:1c:e4:89:18:50:58:96:
91:22:20:3c:fe:a6:fc:71:9f:32:0e:80:47:72:06:
15:3d:9d:3d:a0:c9:a7:d2:e1:0b:ae:72:a3:b2:4f:
51:fc:da:6c:a9:3d:f1:95:ff:e7:21:bb:66:60:c9:
ba:5f:7e:56:fb:0b:70:80:cf:44:cd:9c:06:e9:84:
48:ea:5f:22:fa:7d:75:f2:03:c3:d1:13:3f:6e:6b:
e7:e6:e2:dd:9c:59:38:35:f5:ec:a4:d0:45:91:b6:
32:9b:59:d6:5f:e8:fb:9e:9c:77:96:09:de:62:39:
d7:ee:f6:72:8a:ac:da:c9:c7:9b:70:78:cc:b5:9c:
d7:e0:a3:cc:36:14:f6:22:7b:af:51:9b:58:8b:08:
72:2b:41:ba:0f:f1:5c:d2:2e:06:9c:34:01:6b:4f:
7d:5a:66:03:1c:36:a7:aa:ec:f3:95:ec:f0:39:42:
78:66:af:09:1e:00:3d:db:73:97:0e:6a:5f:31:f5:
96:e1:38:17:ff:2a:98:90:a9:12:a0:78:eb:49:fc:
5b:15:01:02:0b:11:f3:3a:06:58:ce:0f:8b:45:62:
31:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:99:52:03:C9:EA:C5:0B:EF:0B:35:B3:CF:1E:46:2F:8E:19:C9
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:76:27:c5:8c:04:97:d6:f6:5b:29:a8:aa:41:50:5c:e5:a5:
47:a5:55:86:dd:ad:59:a8:7c:01:f1:7d:15:69:08:40:6f:04:
83:ad:db:82:9a:d0:86:60:46:f1:34:d3:d3:3c:a1:b2:f7:72:
b9:2f:f1:8b:e3:7c:f3:6d:d2:81:c2:80:c6:b8:08:6b:96:b4:
9c:5c:ca:1b:eb:5a:34:0d:df:96:77:f3:a1:45:67:76:49:7f:
d8:8d:2d:dd:22:58:44:d2:68:7b:f5:82:2e:56:be:36:6c:35:
d7:5d:22:b2:42:7c:f0:b2:43:86:f7:28:ad:f0:d9:31:25:d0:
c6:12:75:02:d2:89:31:89:c6:f6:62:b9:26:31:79:88:ee:9c:
45:d6:5d:21:62:c6:9a:74:e4:fd:ba:e2:52:92:f7:de:9e:57:
07:d1:59:b7:1b:d7:f8:0e:f6:f5:af:e8:49:0f:96:73:9d:aa:
8a:8f:90:92:a4:1e:54:55:79:b4:4b:1a:b1:bb:05:11:2c:5d:
a9:db:86:a1:37:37:cb:09:a3:04:9a:a6:05:a4:da:21:5d:28:
80:9c:1b:4d:ff:92:a0:88:aa:88:3a:b2:ed:c6:55:5a:c6:b0:
85:82:f9:49:9f:6b:56:a3:2d:66:25:46:b6:84:37:9a:c5:27:
84:c3:16:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:23 2025 by rpki-client