Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: KhJYyN1B9e+Y9hvdlSUZsAiK9g5BTWL7hYVcFT6OBFU=
Subject key identifier: 8D:49:B7:67:1D:AC:31:77:95:A2:64:81:F1:CB:5B:58:09:DA:A2:E5
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 0197B9D87CBBA815ADCA6FE4BD00F77B80F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 04:01:02 +0000
Manifest this update: Sun 29 Jun 2025 04:01:02 +0000
Manifest next update: Mon 30 Jun 2025 04:01:02 +0000
Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: c84NO66PehswdHDmj+d7P/fg9AIZuWWjva0sQVZM4eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:7c:bb:a8:15:ad:ca:6f:e4:bd:00:f7:7b:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Jun 29 04:01:02 2025 GMT
Not After : Jun 30 04:01:02 2025 GMT
Subject: CN=8d49b7671dac317795a26481f1cb5b5809daa2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:3e:fb:ab:3b:19:1d:fe:f2:22:87:25:ae:
d3:9d:91:56:f3:58:81:b0:a5:54:98:e2:e2:70:0f:
54:06:a6:a6:94:19:b5:c0:51:0f:a1:6b:d2:c2:d5:
85:f8:a8:a1:4b:55:5d:21:d8:81:d8:d8:39:ed:b1:
82:03:77:0d:0f:09:c0:c0:23:f0:03:c3:65:c8:c0:
e5:7c:ce:d5:20:0f:18:d6:1f:9c:01:44:66:99:62:
15:1a:c6:fb:9c:4f:b5:2e:3c:e3:7e:8f:40:11:4e:
01:55:56:19:94:02:cf:2d:1e:d2:31:65:08:6d:69:
6f:90:ed:38:46:e6:ec:33:00:8c:c1:57:28:47:19:
f2:68:f1:38:8b:76:44:32:a9:ad:13:a4:55:ed:19:
7b:16:9a:ac:2c:8a:0c:c2:27:ec:5a:a6:7f:87:2b:
65:c7:a2:56:24:f0:23:16:03:da:ab:06:09:88:ba:
42:4b:38:a7:76:fc:ec:82:af:4e:4c:70:f2:79:81:
ac:a7:2c:22:5f:84:b9:06:c8:0c:f8:f7:f2:01:65:
ea:a8:c7:95:dc:da:e0:2a:92:c8:92:f4:14:1d:71:
d4:eb:e6:09:ac:78:0f:f5:28:8b:29:d6:68:f0:62:
16:64:b1:09:3d:5f:53:f0:56:76:33:b4:8b:5c:ff:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:49:B7:67:1D:AC:31:77:95:A2:64:81:F1:CB:5B:58:09:DA:A2:E5
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:51:4a:ca:b6:a5:cd:c2:7b:59:be:64:ef:37:ac:96:9c:d2:
02:c5:c1:04:94:5d:3f:1c:4b:a3:2f:03:d0:39:08:e7:26:fb:
a6:02:37:9c:d1:ff:fc:58:38:99:10:2f:01:89:26:59:0c:cc:
12:a6:21:f5:61:2b:f2:6d:5f:0d:99:8e:d8:14:63:ce:d1:82:
ac:68:11:7b:a2:3e:90:6c:30:d4:ff:34:d9:09:d4:63:4d:dd:
43:e3:af:bd:e1:2b:65:b4:15:5b:48:ea:f5:42:f1:6d:51:27:
77:ce:e8:e3:c0:c5:0a:10:07:7b:1b:bd:69:ef:28:6a:78:c2:
1b:2e:35:34:77:d2:ff:c1:63:b1:2a:b8:07:9e:98:63:25:76:
a2:1a:e6:1b:56:2c:c8:16:1c:fa:7d:91:e7:6c:91:4e:89:d4:
25:7e:c0:a9:9b:c4:e3:45:ff:6c:72:22:99:33:ab:7a:95:f2:
87:32:66:ac:6c:dd:5a:f9:ab:1e:5f:ac:74:7f:83:21:5c:78:
f3:2e:81:79:79:18:a8:1a:57:c9:20:c0:40:47:c6:56:16:2b:
19:33:f4:d8:09:af:2a:e0:7a:d0:98:3c:65:f9:c7:d2:bf:f2:
d8:59:b2:96:b7:a4:8c:87:e5:aa:a4:b2:45:02:39:05:73:e0:
a2:46:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:03 2025 by rpki-client