Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: elGrFcpVqoaFLDSJlI8+p8uaHboZ4NBawHoLfXuHcM8=
Subject key identifier: F4:AF:05:23:90:8A:8E:93:D7:6E:E0:A9:B7:E0:B3:C6:99:32:B9:C3
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 0197B88F879900F5E824912002AEDFFCFBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 0AAA
Signing time: Sat 28 Jun 2025 22:01:43 +0000
Manifest this update: Sat 28 Jun 2025 22:01:43 +0000
Manifest next update: Sun 29 Jun 2025 22:01:43 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: DUOtkYWKSQkl7MpJe9YHvCkUwt7L/EsG5tiDmubnq+Y=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:87:99:00:f5:e8:24:91:20:02:ae:df:fc:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Jun 28 22:01:43 2025 GMT
Not After : Jun 29 22:01:43 2025 GMT
Subject: CN=f4af0523908a8e93d76ee0a9b7e0b3c69932b9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:1d:ca:e8:10:99:fc:73:94:6d:2e:87:c1:
a9:e6:3a:ce:b4:fe:80:bc:df:35:83:00:c8:d4:19:
a7:44:9a:4f:65:84:02:04:c9:96:b0:34:7d:a0:fd:
5f:ee:6a:5f:8e:49:10:6d:38:c7:5b:14:b4:10:95:
ab:73:b5:b2:5d:33:f1:8a:31:4f:8d:c4:fa:4c:9a:
46:1f:80:a7:87:89:1a:20:36:c1:c9:e6:a3:4e:42:
a8:1d:f2:0c:09:20:49:25:f8:c3:2e:dc:e4:d4:4b:
38:8a:57:bd:f0:0b:9f:7d:1e:22:8a:f8:52:d8:f2:
cf:c0:1c:62:21:1e:51:23:ee:20:61:0c:2e:d4:d6:
b7:64:fc:69:18:a1:a3:0c:ae:3e:79:83:01:69:ef:
d4:0b:4a:72:70:d0:ef:00:c2:2f:e6:04:c8:96:1c:
b7:c7:23:cf:12:5e:25:76:f3:e4:97:64:be:ef:22:
23:de:f3:8d:22:86:f8:94:b7:ca:77:d3:08:b5:7a:
3c:7c:dd:fc:e4:6b:9d:61:70:be:9b:e0:e0:13:7d:
2f:37:67:d2:1d:18:a6:0b:ef:bd:df:33:7d:65:43:
3c:2f:45:6b:c6:ba:cd:86:de:ab:9a:28:26:71:a5:
10:29:06:87:c8:c1:b4:7c:be:49:68:6d:d4:18:01:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:05:23:90:8A:8E:93:D7:6E:E0:A9:B7:E0:B3:C6:99:32:B9:C3
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:81:a0:8f:ac:7a:50:7b:ec:a6:71:ec:42:99:c5:6a:e0:5e:
ea:89:68:1f:08:ca:e5:7a:5d:28:42:34:fd:98:fc:d5:dd:94:
df:e0:8a:33:09:e0:5b:f9:d4:26:73:cf:50:f4:87:d2:23:00:
8c:09:52:57:63:53:f9:06:c4:65:50:69:9f:e5:0c:a8:bf:18:
5d:78:88:68:bc:8f:50:4e:f5:e3:11:1f:02:55:03:09:47:6f:
b0:c0:4a:ca:fe:12:87:11:a9:f5:ac:6c:06:ac:60:7d:4f:94:
00:5e:4d:ad:80:bf:1a:db:04:1f:cd:02:71:ef:a9:e8:e2:df:
74:66:73:dd:b7:1c:dd:c8:26:f3:fd:07:ff:35:d4:f3:32:f4:
da:cd:2f:a2:f3:2a:42:48:f2:3a:57:e5:f5:d0:ca:70:1b:3a:
0d:7e:d2:51:de:aa:c0:9d:98:a9:4c:93:d9:b9:04:2a:30:aa:
7d:7f:01:2f:21:6d:19:b2:95:e3:db:c3:2c:6e:ff:f8:82:29:
49:1d:8e:8d:08:3c:05:a3:39:ba:ae:52:4e:a2:d3:74:3d:fc:
16:ec:45:aa:98:40:97:ac:be:32:2e:a1:21:aa:a2:02:2f:81:
df:12:5d:9a:3d:23:b8:44:50:7e:ab:bc:95:8c:3f:8e:cd:86:
7b:83:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:38:33 2025 by rpki-client