Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: AtrZu8EbSIsUy4//OdDEqsUDFrjoW1J2GYlRmdH3vNs=
Subject key identifier: 36:57:C7:45:EB:4D:1C:4A:7E:7B:95:91:57:69:A7:9D:6B:8F:C7:47
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 0197B7B2ED26394B37DAD7838CE70843BC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 18:00:45 +0000
Manifest this update: Sat 28 Jun 2025 18:00:45 +0000
Manifest next update: Sun 29 Jun 2025 18:00:45 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: GGxrUD6Qx5Fd+xPnlJ1FNIQUIuQc1N6OHAxqjI1FK30=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ed:26:39:4b:37:da:d7:83:8c:e7:08:43:bc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Jun 28 18:00:45 2025 GMT
Not After : Jun 29 18:00:45 2025 GMT
Subject: CN=3657c745eb4d1c4a7e7b95915769a79d6b8fc747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:0b:2a:4a:b5:1b:dd:4e:42:2b:cc:5f:4d:
66:cb:ba:51:56:8e:38:a5:11:41:86:5b:be:32:68:
e9:a7:dd:be:9b:77:f3:96:5b:48:d8:41:88:da:8e:
42:36:af:9f:c4:ee:81:00:91:5c:17:39:59:c5:24:
ac:98:fe:e4:f6:00:9a:7a:2f:3f:ef:2d:ae:6c:99:
37:f4:e9:2b:e5:52:df:e8:2b:3b:54:e4:1b:30:ab:
10:cb:96:df:8c:fd:c1:b8:a2:75:d9:73:e8:ca:f2:
2c:a4:52:32:5d:af:17:12:35:22:0d:95:e4:70:ae:
be:80:7e:6f:8b:6a:e4:cc:95:46:3c:4b:09:af:30:
99:61:58:56:bb:f6:7c:cf:dd:6b:36:00:17:16:4b:
a6:52:5c:49:2b:c9:7a:b1:07:83:2f:00:b1:0a:ed:
3b:47:bf:6d:fc:ce:ee:1a:00:ee:80:8a:b7:81:ec:
d9:aa:8f:cb:47:17:22:49:4d:dc:c6:61:30:8e:a4:
b4:0d:d2:e3:4a:f8:57:cf:f2:57:40:89:c9:83:90:
44:89:d0:98:43:f9:59:9f:90:87:ae:87:e6:9a:72:
16:77:ed:94:5d:d6:26:7a:43:41:f0:e5:33:3f:8e:
86:ed:aa:44:37:26:77:54:5b:45:bf:d5:09:9d:38:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:C7:45:EB:4D:1C:4A:7E:7B:95:91:57:69:A7:9D:6B:8F:C7:47
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:eb:a9:bf:e1:da:c7:c6:6b:15:bf:da:24:39:42:4e:22:5c:
a9:3e:5c:18:f8:cc:fe:28:ec:3f:c6:37:99:21:fb:07:ee:ea:
81:e7:b4:23:ce:b3:ff:75:d4:5a:a2:04:a8:cf:7c:e6:0b:33:
ff:72:c8:e0:b9:f3:cd:71:94:16:0f:d4:b9:4b:24:61:0b:56:
4a:67:65:51:1e:de:54:a0:b9:06:a3:d7:fd:1b:6c:23:a1:b0:
bd:c6:d8:63:ae:25:df:90:8f:df:41:bb:16:9b:43:6d:1c:46:
60:d9:c2:f1:da:5d:40:e8:b0:f1:35:8f:5c:a3:0a:59:2a:02:
99:d8:0b:60:0f:95:66:8d:f2:e3:02:4e:48:d1:fb:0f:f4:3f:
2d:65:41:c7:dd:03:29:c6:ff:34:52:f5:00:a5:5b:65:6e:b3:
fa:c4:03:c9:be:43:a9:4e:0e:ac:4d:76:e4:27:b3:42:b8:c6:
30:17:46:6d:b9:dd:a6:3b:bd:27:e1:9d:a2:04:92:db:ff:89:
ac:8b:d4:02:4e:9e:39:2e:36:d3:b1:23:eb:1b:cb:32:ef:5c:
3f:15:b0:59:29:1f:97:16:73:ca:64:3e:36:d4:ec:d6:b4:cf:
8a:76:a0:f3:88:9f:ff:58:35:1a:bf:9c:14:c0:9e:b9:37:67:
73:00:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:19 2025 by rpki-client