Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
File: gwN5KJCtoro4fjmzFLdwNdX7MVs.mft (raw, json)
Hash identifier: bbYjemhim/rlMhTGeGYPBeoIQ/sU0syoyE7MRohDnCk=
Subject key identifier: E1:DB:AF:20:39:7C:BB:D1:64:11:BE:41:97:77:28:FF:22:F9:F4:AE
Authority key identifier: 83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
Certificate issuer: /CN=8303792890ada2ba387e39b314b77035d5fb315b
Certificate serial: 0197B88F5A4B3B60C25DE12B1738B93C84C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
Manifest number: 1F
Signing time: Sat 28 Jun 2025 22:01:31 +0000
Manifest this update: Sat 28 Jun 2025 22:01:31 +0000
Manifest next update: Sun 29 Jun 2025 22:01:31 +0000
Files and hashes: 1: 7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa (hash: wGcA/CUa2AHlBIQ9Ur+ssm2xCQswNtocmJ6VYpXekNw=)
2: gwN5KJCtoro4fjmzFLdwNdX7MVs.crl (hash: IZs8Qy/8RGMomnSitFAbbNwcJrQFqJ05b7e4UUOTuHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5a:4b:3b:60:c2:5d:e1:2b:17:38:b9:3c:84:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8303792890ada2ba387e39b314b77035d5fb315b
Validity
Not Before: Jun 28 22:01:31 2025 GMT
Not After : Jun 29 22:01:31 2025 GMT
Subject: CN=e1dbaf20397cbbd16411be41977728ff22f9f4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:8a:19:d8:9f:ef:4a:c7:46:58:0d:43:69:
77:18:76:80:50:8c:44:00:61:c5:c4:f0:02:83:bd:
8f:4a:0b:18:3b:83:92:56:c4:ac:0f:e1:77:ee:22:
7e:5d:57:38:19:cf:86:31:12:41:cb:bd:1f:d3:44:
62:f3:cc:d5:5a:c1:0f:d9:a2:92:b1:64:91:72:d6:
da:bb:d9:6b:dd:09:15:74:51:46:c3:2d:aa:75:8a:
71:8e:3f:38:d0:52:68:d0:a4:08:50:fb:f3:05:7f:
15:77:d2:a5:0b:df:3a:58:59:44:e2:1b:68:90:05:
37:f2:a0:04:61:42:9e:8c:00:a3:cc:77:69:25:ba:
40:88:5e:92:7b:f7:74:e5:d7:23:b7:38:d3:8e:6f:
92:e8:15:b9:58:86:51:66:b3:dd:82:20:3e:67:75:
b8:c5:f7:b0:e0:aa:c8:0e:d4:22:08:5e:b5:ba:61:
e0:e6:c4:16:c4:99:19:87:aa:cc:3f:e8:b0:30:42:
4d:4d:f5:33:d3:c9:ed:52:a9:68:7b:7d:6d:ae:a6:
e7:26:f9:f4:e6:5a:78:09:64:3a:2d:30:45:33:de:
5a:1b:bd:6c:5a:3a:62:a5:4c:38:d2:02:1e:2e:fd:
27:1f:32:58:78:98:2d:4a:60:aa:35:4c:64:78:a4:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:AF:20:39:7C:BB:D1:64:11:BE:41:97:77:28:FF:22:F9:F4:AE
X509v3 Authority Key Identifier:
keyid:83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9f:15:a6:fc:98:cf:c9:02:da:31:25:e2:64:93:e8:8c:a0:
38:3e:0a:da:ce:11:ce:9d:51:d8:4a:bf:c4:8f:9e:fc:e4:6d:
14:0b:70:60:17:12:2f:a5:25:35:2c:29:a2:3a:5a:38:fc:78:
48:a0:dc:04:f8:12:34:58:28:e0:05:8a:bc:9d:dd:7b:31:d0:
02:8a:6f:3f:e9:f5:86:3a:8f:79:ac:87:66:ee:65:ad:f2:09:
60:59:ce:c8:98:21:4c:f9:56:b1:74:1c:74:50:c4:30:95:74:
b8:c6:36:12:dd:d1:61:c5:3c:d9:9b:ca:2e:40:e7:bb:73:ba:
0f:aa:27:0e:f8:a4:45:6c:36:ea:1a:d6:05:ba:f9:f7:9d:6f:
69:fd:49:83:72:e1:65:7d:da:9a:b1:bb:c6:3b:3a:40:a3:92:
50:75:b6:36:5d:f1:29:db:cf:83:b5:08:84:be:d8:d9:24:97:
d0:92:b9:80:f4:77:7f:f9:2a:cf:40:a7:4c:53:62:ba:83:dd:
2a:8e:c3:3f:a8:e7:d9:bb:16:5b:78:13:a3:32:1c:ad:9f:bd:
04:3e:ff:7d:3c:0e:51:df:1e:c8:f1:57:6f:2c:e8:8f:94:59:
49:17:71:93:8a:fa:f5:1a:cc:c9:88:94:1c:f6:dd:f8:e1:a1:
ef:60:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:34 2025 by rpki-client