Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: rX5U9cv72Dba/cXmz2pJqsMR62VXjZZUR9hJQlEZtm4=
Subject key identifier: 54:99:30:08:09:F8:AF:82:05:14:21:C8:68:D3:80:F8:A8:D4:6F:9A
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 0197B7EA441E6EE22AAA6FFDFA8FA780428C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0C86
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: pl1sfwtPQuWkCrULL6jUy/oVnF/AwqdwS3smGdcDVrc=)
2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:44:1e:6e:e2:2a:aa:6f:fd:fa:8f:a7:80:42:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=5499300809f8af82051421c868d380f8a8d46f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:22:a2:84:67:cd:bc:6f:d4:73:56:b6:ba:
49:e9:c6:4c:5c:9f:40:b2:92:91:25:c6:90:41:7b:
e6:9e:70:b3:fd:a8:c2:cb:d8:f2:96:c1:f7:5b:68:
16:17:fa:ac:e7:44:62:81:89:99:52:7a:88:d0:59:
f4:84:4f:09:6f:48:05:00:c1:49:02:f0:83:3c:c9:
56:5b:d2:bb:81:97:31:41:af:8b:b8:2c:ff:14:91:
89:e9:93:7e:05:17:20:88:06:91:2b:b9:dd:1d:29:
02:d9:bc:40:77:2d:1a:c8:67:6a:fe:44:c5:ef:ed:
d9:b2:86:b1:63:cf:2c:76:01:f1:c0:fc:f6:d5:4b:
17:f3:ce:91:f2:5f:d4:f5:d5:06:6b:3c:37:14:44:
75:7d:7d:30:03:32:1c:ec:df:e6:5c:e8:60:af:d2:
d6:02:93:36:66:0e:6d:81:24:db:ab:64:4b:4a:e4:
e4:0e:5e:ed:2e:9d:41:a6:c6:2a:b2:8b:fd:ca:92:
43:f0:09:ee:09:a1:1d:5a:0e:0c:ea:10:12:59:7f:
5f:49:44:55:75:8c:c8:36:24:1f:0b:ed:17:13:c1:
e0:b9:98:1a:5c:ca:0a:d4:d3:8a:36:56:33:2e:39:
7c:82:8d:e7:da:68:dc:b0:c0:e8:1a:9b:cc:f8:eb:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:30:08:09:F8:AF:82:05:14:21:C8:68:D3:80:F8:A8:D4:6F:9A
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:39:f1:98:a5:78:c7:0a:ed:01:93:92:08:68:8c:dd:02:1f:
e8:78:3b:3e:d9:e8:13:11:e8:1f:87:50:82:33:76:94:e3:de:
98:2b:4c:3c:77:9c:d8:14:f0:c5:d9:4c:14:b4:62:7e:34:be:
0c:52:a7:6c:64:9a:6e:63:d2:ac:d8:b8:41:55:c0:c5:e3:51:
f1:ab:0d:82:f5:53:01:9e:4b:e6:f2:6b:01:d1:8b:46:60:f9:
e5:10:dc:38:e6:9e:30:e8:09:db:8f:00:ef:e9:09:be:5f:41:
16:87:a0:9b:73:e4:9d:87:18:63:fd:7c:c1:32:ee:03:af:89:
ff:89:11:03:3d:c4:cb:1a:c6:05:98:5c:6b:da:a5:d4:e0:84:
f0:2b:9b:5a:60:20:32:b0:4b:7a:83:0a:c8:08:e0:66:13:e6:
56:e0:fd:1e:57:e5:ee:ed:b6:22:fa:b5:3b:e0:45:3a:c9:39:
bc:77:da:1f:b5:b0:3e:d8:a0:76:42:53:3f:83:2f:c6:91:4a:
63:2c:4b:e6:7b:50:15:61:cb:76:8b:8e:d8:6a:c1:ec:58:e8:
93:48:74:14:e0:73:d9:8b:9e:ca:58:3e:cb:42:dc:3c:89:95:
85:27:ed:52:c1:0d:e8:e5:1c:38:e5:79:7f:1b:cc:a3:55:f6:
2e:aa:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:22 2025 by rpki-client