Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
File: GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json)
Hash identifier: QB2tliwSElwPCKNIVVgVIwg0efmLIGIF3TK3sL/MiVE=
Subject key identifier: 21:3B:B6:F3:F2:C2:19:C9:F1:BB:0A:22:0A:7E:A8:F5:C3:FC:1C:73
Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
Certificate issuer: /CN=1a753613b4220f68f2b546d092a230bed6edacb8
Certificate serial: 0197B70E915DFED1C2CD83A9E149FF3E753B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
Manifest number: 0904
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: UYdrGzFC4H9esxNclKJedyR1RGaplTFlW9FVOeJPEeM=)
2: dZV8dvdnA_9uSLTQkNXVl8a3FaI.roa (hash: Krx07PHv8S1aDWSKbtOJAHlzZWfSCAV78WJWEmqXiPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:91:5d:fe:d1:c2:cd:83:a9:e1:49:ff:3e:75:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=213bb6f3f2c219c9f1bb0a220a7ea8f5c3fc1c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:6e:7e:d2:e4:26:47:02:92:ed:0a:a1:6f:
ac:7b:71:7b:27:3f:45:50:04:b9:30:13:3c:19:46:
29:db:dd:f8:94:87:be:10:21:3d:d9:62:c4:29:66:
6b:aa:c0:21:21:84:5b:24:73:1d:f3:ca:bc:61:7f:
fa:0a:b5:b2:7e:9b:a3:58:b3:c3:d0:48:66:09:c6:
e0:2b:d8:21:80:25:ae:17:ac:ce:d9:62:16:9e:e7:
0a:c6:f0:39:aa:79:27:a8:20:4d:cb:e9:ab:30:a9:
1c:e1:d0:fa:bc:25:45:de:35:5d:ad:78:cf:87:c9:
d2:72:ab:d2:73:cb:a2:4b:0d:21:fa:a9:5f:e6:fc:
6c:51:c6:ad:69:1f:8f:8f:65:07:01:d4:b8:3b:ab:
31:4e:31:00:61:2a:3b:e6:a1:c2:2b:a6:6a:2a:91:
f0:2b:85:88:0b:0c:56:7e:52:5f:35:70:56:ab:93:
e4:59:e8:7a:f8:af:bd:2b:86:64:66:64:57:ec:e0:
80:39:51:09:32:af:78:ff:a6:62:7a:22:5f:71:78:
c9:e1:cc:7f:a8:07:4f:00:d3:51:51:ce:86:bb:f0:
4c:30:d1:1e:3e:68:a7:ce:2c:2b:91:2e:52:0d:eb:
a7:da:b9:f6:7c:41:4d:ce:32:ea:d3:8e:2c:f3:8f:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3B:B6:F3:F2:C2:19:C9:F1:BB:0A:22:0A:7E:A8:F5:C3:FC:1C:73
X509v3 Authority Key Identifier:
keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a2:4c:df:7f:5f:42:57:74:b6:57:3d:1f:c9:a1:06:59:3f:
3e:11:a8:1f:a4:bc:a7:f5:68:12:4d:c7:a3:c0:ed:e0:a0:1f:
e5:4c:69:31:2b:69:5b:26:7e:81:03:c8:ba:a6:f2:43:24:ad:
8d:5c:8d:bb:d8:30:a7:d4:8f:cf:59:ae:ca:c8:f6:e9:e8:19:
28:7b:4d:9a:67:69:6f:86:3b:e9:d8:d5:d7:a1:9f:4a:25:f3:
7d:d6:f7:59:ea:85:f5:d6:8e:a0:af:de:7d:21:be:93:fa:45:
d2:e6:7a:78:08:b6:9c:2a:c5:95:d8:8f:85:f3:8b:60:4c:79:
f2:1f:c2:05:cd:ae:48:c7:1f:86:81:64:40:1e:13:02:2d:ca:
19:32:21:a4:51:ab:66:d9:50:8b:5f:78:27:32:91:c8:5e:d8:
7d:82:02:95:e1:45:0f:77:13:ea:a6:d4:35:0d:80:69:ee:f0:
0e:28:8c:cb:9d:dd:07:ee:df:7e:fc:72:61:17:68:45:ba:b0:
ab:b7:6d:39:69:b2:81:cc:aa:02:08:40:8e:d9:a3:00:2d:54:
0c:19:20:9c:6a:93:38:ee:db:77:63:1b:93:0f:44:3c:8b:82:
18:b4:8d:e4:88:89:62:ef:ec:b6:1c:fa:14:50:d2:b9:5d:6d:
60:79:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:54 2025 by rpki-client