Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier: LcJVEDSNc68fB1bAHOvum8sYP0r4wuSBh9Wjbd1/Uc8=
Subject key identifier: 64:D8:E2:43:03:23:7C:FC:E8:51:FD:7F:45:AA:69:35:5B:A4:03:9A
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 0197B5FBF0AEF84BFB95E8157ED2706F7FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number: 0C63
Signing time: Sat 28 Jun 2025 10:01:16 +0000
Manifest this update: Sat 28 Jun 2025 10:01:16 +0000
Manifest next update: Sun 29 Jun 2025 10:01:16 +0000
Files and hashes: 1: F-U-cDtSSag2W1wAvfbUo3fdaQs.roa (hash: 2Ga8t3NnP1c8+shLsR913ttQ8XGLyvFZpunmc/03AyI=)
2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: oVEBRABf8iMhwid4Q623LnhvFER1cGXPD8Zk/99taZc=)
3: ey-_9xxGKnsOGGPU15--RgSssm4.roa (hash: 0cRLbNHAlwoA+yxbwyO5Q2GpY1t4qSENfOLW5G8ijZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f0:ae:f8:4b:fb:95:e8:15:7e:d2:70:6f:7f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Jun 28 10:01:16 2025 GMT
Not After : Jun 29 10:01:16 2025 GMT
Subject: CN=64d8e24303237cfce851fd7f45aa69355ba4039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:62:25:74:29:34:df:1b:ac:16:87:dd:96:
c1:ba:27:2c:c6:56:7b:6c:e0:98:41:e3:c0:ee:23:
9f:13:06:e4:69:58:c9:39:0b:e6:78:02:28:39:2c:
8a:f6:09:02:69:c7:6d:50:bf:7c:d4:98:ac:29:c5:
f8:8c:b5:c5:7e:cb:fc:8d:ba:4c:0f:b3:45:17:7f:
01:a3:2a:2b:bc:3a:c6:c3:ee:7f:2e:75:28:20:9c:
03:a2:c9:82:30:31:e9:45:a4:13:e6:4d:68:5d:3c:
c0:27:c7:85:00:15:59:ae:b8:eb:e2:c7:17:bc:a1:
02:93:72:0d:25:d1:2d:da:e6:dc:d6:50:d5:bd:47:
bd:16:f8:d1:92:5c:97:fd:45:63:ec:a3:c9:3c:08:
59:10:c9:ad:06:61:77:b6:fc:23:3c:47:40:4d:0c:
8f:86:09:20:01:90:9a:a6:0f:55:50:71:22:c9:68:
8c:55:4c:13:29:c6:ce:f2:5e:57:b2:2a:1f:ab:bc:
6c:0f:ec:f9:c5:81:ef:45:5c:5c:07:23:20:e4:b2:
b1:c4:00:89:df:35:6e:5c:99:2f:f2:c1:a4:f6:44:
d3:00:54:1f:e9:3b:4d:d3:6f:ea:36:84:72:7b:90:
70:97:e2:f3:44:e3:5d:c6:07:a9:97:9f:75:b8:47:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:E2:43:03:23:7C:FC:E8:51:FD:7F:45:AA:69:35:5B:A4:03:9A
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9b:59:61:64:b3:72:54:70:4e:9d:b8:7d:62:f4:74:06:60:
e5:e4:fe:a0:81:55:5e:2e:bd:5d:63:61:b3:95:0a:ce:33:9f:
4b:ee:bd:1d:29:65:48:43:58:9a:11:2b:d9:e0:2d:6f:9a:7c:
bb:31:7c:7f:3d:a4:a7:ad:5c:b6:30:84:ad:46:f1:2b:e7:b6:
9b:8a:4a:45:5f:b7:4e:56:59:94:a7:8a:91:cd:e5:5f:0c:42:
02:6d:0d:1b:e1:7c:15:56:8c:fd:26:d4:4d:ab:0f:d3:97:25:
cb:72:ad:7d:7d:6e:08:fe:c1:92:8f:71:f3:df:bb:5d:0c:8c:
b9:bb:cf:8a:1d:1c:11:ea:f9:f6:e3:a3:3b:e5:4f:0c:b1:66:
91:6b:c8:6b:7a:7d:7f:98:50:f8:bb:87:d6:f4:26:7a:82:dd:
0b:8f:5c:ff:2c:c2:63:02:1f:f9:df:00:92:9c:4f:9a:22:69:
bf:58:4c:c4:12:7c:6d:4f:fa:77:d1:41:4e:81:66:0f:13:65:
4a:20:0a:00:3d:23:45:d8:3e:cf:eb:01:2a:72:86:31:98:1b:
13:e2:14:8e:dd:7c:5c:a7:e4:18:bd:2e:65:94:31:1f:d7:bc:
cd:6e:80:6d:00:38:77:5a:97:bc:a1:44:b0:14:c3:32:89:a8:
8e:6d:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:19 2025 by rpki-client