Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: 90FMJCQu71VynQc/qgUdJOOcjRqzSw4MmDKF2oNbt5g=
Subject key identifier: CF:FB:6C:36:D5:13:36:C8:F5:0D:9A:3E:67:30:5A:E4:65:46:4B:45
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 0197B6A1F08E22472CF4B91EB200D3589FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:35 +0000
Manifest this update: Sat 28 Jun 2025 13:02:35 +0000
Manifest next update: Sun 29 Jun 2025 13:02:35 +0000
Files and hashes: 1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: AtWKIrgJzXGLwiAAQEV8rnHbBf8RLGS8kn0n0tN2+PU=)
2: HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (hash: TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f0:8e:22:47:2c:f4:b9:1e:b2:00:d3:58:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Jun 28 13:02:35 2025 GMT
Not After : Jun 29 13:02:35 2025 GMT
Subject: CN=cffb6c36d51336c8f50d9a3e67305ae465464b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:2c:51:29:26:e1:a8:4f:a0:7d:42:b8:7d:
03:42:02:c7:0d:1c:f6:a5:a1:27:dd:49:c1:99:50:
cc:24:ac:0d:ce:ba:ee:10:b2:6b:b3:16:08:f4:ab:
b0:2b:fe:1d:ee:f9:ac:b8:f7:4b:fc:92:e2:84:c1:
d2:7c:ba:26:bf:6a:b7:2f:1b:6e:9c:38:3b:ef:e9:
6e:7f:03:b2:01:19:96:5a:92:4e:0f:94:b0:83:60:
46:36:a3:c5:67:11:79:76:49:e2:de:91:9c:e8:d9:
55:5f:92:92:63:60:2c:2b:b9:5e:70:c3:8c:ea:9f:
5e:b2:28:79:db:19:dd:90:d9:8e:86:d2:47:9e:a8:
82:2c:46:0b:41:f2:32:c4:d7:6c:ba:ee:bf:32:17:
1b:ff:5d:77:cc:d2:6e:b9:98:39:7a:51:cb:b9:0d:
27:85:6b:d2:19:c8:97:de:c4:7f:05:f6:af:72:dd:
a6:6b:ec:bb:90:da:39:11:9b:d6:e5:a8:ea:82:5f:
b1:d7:b7:aa:86:cf:33:6f:52:3c:5e:4d:9d:5a:d6:
4f:b4:51:05:ca:6b:7b:f2:8c:10:7b:53:c6:d4:ab:
b6:c1:b6:7f:f0:e4:13:7c:69:03:aa:76:9d:ad:3f:
4d:c8:9d:31:b0:c7:fc:fa:46:ef:66:53:0d:04:f9:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FB:6C:36:D5:13:36:C8:F5:0D:9A:3E:67:30:5A:E4:65:46:4B:45
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:11:e8:02:ef:54:4e:a5:7f:e3:fb:7c:22:a9:d4:03:c6:af:
f3:b5:a4:be:a8:fa:15:a7:b9:77:03:82:9e:4e:bd:5e:f5:ab:
7c:ff:a4:49:9b:88:27:5e:09:00:a4:08:98:72:44:fe:eb:8d:
06:46:16:d8:85:13:4c:d4:c8:e7:1e:3e:d9:3c:0f:f1:42:8f:
ef:68:fe:a3:42:86:28:fe:94:1a:a6:4a:20:0e:2f:57:0a:f7:
d1:72:b3:53:d0:a4:f7:de:ce:3e:62:c2:e7:c7:e1:0c:82:ca:
49:84:68:79:9f:61:b2:16:50:7c:84:af:bf:d0:22:7d:74:72:
c2:72:33:33:5b:38:88:73:6c:8e:43:42:0e:11:09:19:08:91:
d5:f9:7c:4e:9d:3d:1a:a6:b5:d9:ea:f7:d8:e9:bf:4e:ea:c8:
10:6e:e0:5d:b7:57:09:5b:20:8a:59:3e:14:cd:0c:04:4f:cc:
1f:f4:03:cc:db:e1:7b:62:26:1d:5c:93:5e:b8:3a:1b:d0:5f:
4f:20:a4:7a:46:e8:d2:d0:1d:f3:aa:c3:65:27:1f:22:ac:7b:
54:38:21:c5:46:29:73:53:e8:6d:28:7a:21:7a:e6:a5:b1:95:
b7:b5:45:aa:2b:c9:fb:5a:b5:d3:64:1d:be:9b:de:f5:66:7f:
b2:23:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:09 2025 by rpki-client