Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: 5odMYxVv9KjhbXgMEjOLprDGROIySc/8yAs/RXYN39Q=
Subject key identifier: 5A:F5:C1:1E:27:EA:E5:53:1A:85:73:22:47:0D:7B:84:AA:85:6D:C2
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 0197C237178910F50C99F55F16F325429C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 1206
Signing time: Mon 30 Jun 2025 19:01:19 +0000
Manifest this update: Mon 30 Jun 2025 19:01:19 +0000
Manifest next update: Tue 01 Jul 2025 19:01:19 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: swMWbyAUjwAmKEobgYTvJ4VwqiD0R6ZoLvV5CUq60FY=)
4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:17:89:10:f5:0c:99:f5:5f:16:f3:25:42:9c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jun 30 19:01:19 2025 GMT
Not After : Jul 1 19:01:19 2025 GMT
Subject: CN=5af5c11e27eae5531a857322470d7b84aa856dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:4e:1a:73:74:b8:f4:b8:c4:df:82:e5:d7:
36:29:3a:0d:06:0f:46:ef:22:bd:ba:1f:73:c4:89:
38:59:11:46:4e:b2:29:02:a3:f9:8d:c3:2f:73:a4:
71:f6:56:c2:eb:1d:c3:26:b9:ba:a8:6d:14:09:3c:
87:bf:6c:a0:80:55:70:8d:8a:dc:56:86:80:e3:7e:
ca:9b:4c:fc:09:69:47:95:1b:c4:c9:b0:19:92:e7:
a5:15:ca:0d:05:b6:b5:c3:9b:59:c4:d1:93:43:bc:
3f:59:0f:30:28:98:db:d5:9c:13:e9:74:d3:db:ce:
58:33:d7:c7:20:ba:fe:25:28:92:5b:42:77:aa:9d:
70:b2:e0:4f:4a:6c:83:2d:ca:83:30:1d:06:b4:31:
6d:9b:c8:34:af:3c:06:1f:d7:0e:c4:d2:f5:81:00:
0a:70:c4:93:9b:20:41:43:2e:d4:0a:84:33:95:2f:
83:eb:54:22:65:23:c8:de:7e:86:7b:93:5d:a3:de:
ae:ca:3b:31:de:e5:bc:39:54:13:a2:44:94:ae:98:
51:c8:19:2f:63:ad:50:2c:93:8e:6d:c4:08:47:5a:
c6:13:1f:56:ed:cd:0e:56:e6:08:f7:f2:73:d0:81:
bb:b5:2b:a0:bb:74:da:d0:11:60:61:c7:d0:11:6e:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F5:C1:1E:27:EA:E5:53:1A:85:73:22:47:0D:7B:84:AA:85:6D:C2
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e5:2f:57:31:6c:76:7d:70:7b:07:97:af:ca:6f:45:be:8b:
3a:93:45:89:8c:c0:98:c3:69:23:1a:e4:8f:02:31:b1:50:96:
34:80:9d:ef:a3:7a:21:8f:67:18:44:02:e1:81:67:c6:b7:fe:
0b:8a:b4:f9:a1:5b:31:d4:8e:f2:72:1e:d8:af:e6:aa:98:33:
35:39:d5:95:1f:44:12:3f:8e:bd:28:19:8f:18:f6:4d:d6:bc:
e4:88:57:07:f2:aa:3b:f2:65:24:89:f7:f0:4a:75:3d:15:82:
32:b6:b1:f9:19:c8:76:52:70:3e:78:b1:88:9a:1b:7a:df:e5:
9f:2f:46:44:45:13:1e:14:02:f0:4c:97:91:30:0a:3b:d1:c4:
97:43:da:e9:0e:a0:b5:27:1f:4a:0a:e6:bf:65:e1:e8:6d:d4:
c2:d5:ee:fc:24:3b:a5:12:0c:82:ae:d8:fd:ac:ea:6f:d4:cd:
68:ed:e4:77:76:6d:46:78:70:20:fe:70:d0:df:2d:2b:a4:30:
04:b3:53:9a:95:6e:f5:45:dc:e6:6b:2a:81:83:9c:a7:2a:3d:
2c:6d:ac:40:fb:93:de:f3:c0:c4:be:99:79:17:cd:a9:69:b1:
bd:62:28:f8:3b:ab:8a:ef:e4:d0:51:d4:bf:c9:aa:d2:90:57:
09:d8:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:44:23 2025 by rpki-client