Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: hvKq0ZbRNofqUmRgTyIdu9WDDAwiL6BpFNP3QOT12gY=
Subject key identifier: DC:8E:17:61:E7:1F:F5:68:87:5C:10:54:80:F1:E6:F4:A7:56:13:68
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 0197C048F1586A52D3A6886A00BBA7C170BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 0528
Signing time: Mon 30 Jun 2025 10:01:35 +0000
Manifest this update: Mon 30 Jun 2025 10:01:35 +0000
Manifest next update: Tue 01 Jul 2025 10:01:35 +0000
Files and hashes: 1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: LdWvuhYoEx5ihvr3RR60T+VrDd1ZCb81wLuKtBlsXfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:f1:58:6a:52:d3:a6:88:6a:00:bb:a7:c1:70:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Jun 30 10:01:35 2025 GMT
Not After : Jul 1 10:01:35 2025 GMT
Subject: CN=dc8e1761e71ff568875c105480f1e6f4a7561368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:f9:a9:1b:00:b7:2f:53:ab:05:70:ba:2f:
03:8e:fc:8d:7c:f0:f8:50:ae:14:e4:d7:4a:52:a1:
80:a5:2c:02:c5:1e:d8:67:3e:4f:5e:0f:66:1f:2e:
26:76:1a:fd:42:11:ef:2d:f8:a5:55:bc:e2:59:4c:
90:51:f3:6e:22:50:8b:23:07:e9:fa:f7:57:a0:bf:
69:63:bf:42:f0:f9:44:8c:61:11:8f:01:fc:0a:49:
63:a6:9b:78:e7:a6:09:16:41:1b:93:f0:86:0f:6f:
9f:e0:9a:da:29:31:ef:40:b0:b7:1f:0a:56:90:cb:
c9:23:3d:5e:ea:56:60:28:f4:cc:bf:0e:20:62:d5:
e0:5f:27:e2:8f:64:87:49:32:65:e5:83:8b:dd:7a:
cb:72:33:8d:f3:3c:68:e1:71:64:52:4e:a8:a9:1d:
b8:a1:ee:63:9f:b3:a8:2b:14:a8:f6:45:e3:b6:fb:
10:29:31:7b:13:1c:be:17:5f:b6:33:53:1f:2a:a6:
44:c7:3c:84:4a:8d:b6:73:68:58:41:f7:97:aa:f7:
63:84:63:69:06:d4:c1:ec:bc:85:e5:e2:b5:3c:fb:
96:64:94:43:9a:89:77:1f:a0:00:0c:12:a8:85:69:
ad:92:0c:a5:b3:3d:f6:1c:0e:e7:3e:23:10:37:63:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:17:61:E7:1F:F5:68:87:5C:10:54:80:F1:E6:F4:A7:56:13:68
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0a:91:9b:73:d6:6e:49:7d:60:2c:9e:5a:4e:0b:ea:7b:79:
36:5a:3d:a9:0f:bc:8a:01:f0:b1:fc:cb:47:27:27:fa:f0:a4:
0b:43:c6:34:43:ba:28:a3:6d:fb:d6:f7:c3:a4:4e:47:9a:7d:
a7:de:da:90:47:cc:d7:9f:32:19:04:0f:7e:82:c5:c8:04:39:
ce:3c:a3:28:14:7f:f3:03:9c:27:de:00:21:5a:25:e8:2a:4f:
5a:f0:24:69:62:c5:ff:bf:0c:73:39:c3:54:f3:55:8b:04:a6:
b7:00:c9:51:2e:69:e9:43:54:b1:de:23:4c:6f:c9:24:be:b7:
50:de:ed:ee:fc:6f:41:25:40:81:93:39:d6:28:ad:23:09:9d:
45:49:33:9e:4b:38:1f:ab:25:a2:20:d5:f6:17:72:4c:33:ff:
9d:2d:15:3c:4b:3d:e5:11:a3:29:9a:a5:17:c8:72:7a:0e:ba:
8c:54:91:bb:92:e0:6c:c2:ce:5d:52:68:cc:53:5c:5f:f2:81:
5a:1c:97:b8:f7:23:8e:d5:4a:05:35:ec:9f:ae:72:c4:b9:22:
3c:e3:57:4d:e5:06:62:7e:51:d2:e0:8a:32:20:80:c6:55:48:
b7:b6:ab:0b:9f:1c:bc:0b:55:2a:89:41:fb:49:2a:46:e1:cb:
d6:f8:69:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:13:13 2025 by rpki-client