Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File: GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier: EA2zWQaqJjZaDVDJC0IfgGeXRFYDYl6tgDBKf6ILUyM=
Subject key identifier: 96:97:93:58:DA:BC:72:53:8B:FB:9E:B5:43:DB:F5:FF:51:19:1C:3A
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer: /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial: 0197B632A76785B409B18DFBE53C48D5E3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number: 0C4C
Signing time: Sat 28 Jun 2025 11:01:02 +0000
Manifest this update: Sat 28 Jun 2025 11:01:02 +0000
Manifest next update: Sun 29 Jun 2025 11:01:02 +0000
Files and hashes: 1: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (hash: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=)
2: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: jAbNpjE/Xs1QaApxO0mKcn0QIKuoQr7aMzNCbUDsqms=)
3: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (hash: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a7:67:85:b4:09:b1:8d:fb:e5:3c:48:d5:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Validity
Not Before: Jun 28 11:01:02 2025 GMT
Not After : Jun 29 11:01:02 2025 GMT
Subject: CN=96979358dabc72538bfb9eb543dbf5ff51191c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:09:27:78:e1:10:06:1a:e9:75:1f:a1:09:
30:72:a3:3a:ee:3f:bb:40:61:49:55:8b:b4:83:54:
a6:85:82:6c:73:69:e0:ae:02:90:5f:1b:70:7e:e4:
3e:a6:30:ac:76:f5:15:99:ab:22:aa:0a:12:da:11:
8d:17:6d:fe:b5:1b:c4:42:85:42:dd:f8:21:fb:ad:
11:59:fd:5f:d3:d3:dc:b7:cf:1a:ed:e9:ff:ae:25:
34:cf:95:68:fc:28:5d:53:92:d8:91:50:1d:00:14:
62:fa:8b:11:95:a8:98:e7:5d:c2:cc:c6:40:3e:30:
80:32:20:00:66:57:35:66:76:a1:90:e0:69:a0:7a:
a1:53:ee:61:03:49:dd:a9:a6:35:ee:00:62:38:93:
15:6e:a0:4c:fc:a5:07:21:3c:13:ee:52:a6:a9:39:
35:f0:67:59:db:0a:0c:5b:e3:51:9c:6e:64:69:a2:
f4:8e:ea:42:1c:3c:8a:52:15:a4:61:86:8f:d0:bb:
3e:44:a1:01:06:87:1d:d7:a6:21:00:f3:0a:ba:66:
c7:6f:ea:62:bc:f3:24:04:45:2f:72:75:85:3d:7f:
64:96:af:df:cd:f9:68:0f:fd:11:77:3b:a7:d7:65:
0e:e1:b3:c8:7a:df:18:91:8e:c8:b8:83:5f:fd:4b:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:97:93:58:DA:BC:72:53:8B:FB:9E:B5:43:DB:F5:FF:51:19:1C:3A
X509v3 Authority Key Identifier:
keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e8:03:08:cb:a1:c1:9c:a1:b8:e1:67:d4:2c:1f:7a:88:94:
2a:a0:db:75:5b:28:51:22:60:ff:6d:b8:7e:9f:b6:45:67:a2:
1d:ee:41:8f:50:6d:b2:b0:04:74:96:61:16:f3:fa:f4:eb:c0:
27:28:3a:2c:81:e5:40:bb:eb:c0:57:38:5b:29:4b:3a:76:7a:
6e:f4:84:92:ed:48:0c:93:86:6b:00:03:b3:68:00:aa:df:f6:
f9:03:01:ea:a1:12:b1:9f:e9:14:a2:df:50:9a:f1:d2:67:18:
7f:74:a7:8a:ce:0c:c8:fd:3f:9e:a0:b7:fa:1d:73:16:97:cc:
65:56:a4:ae:57:47:e5:c3:6a:af:0a:71:8e:81:9b:9a:0a:d4:
61:f9:d5:94:da:df:9c:47:f3:ba:f4:6b:cd:da:0b:65:de:ef:
d9:7e:bf:70:7b:c3:c0:2b:8f:76:ac:da:0d:08:87:be:86:d1:
ed:83:ea:3d:1c:8f:e2:b5:75:4a:d8:7a:52:65:bb:14:c9:6d:
8e:67:2e:76:84:77:3d:be:a0:8e:d4:50:ff:73:24:d3:2d:b4:
01:2e:e9:c0:3d:48:8e:d3:38:3c:26:72:71:da:51:8e:c4:b7:
ad:6f:a2:4e:1e:39:04:17:49:93:8f:06:ee:dd:a8:1d:8e:45:
c3:ef:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:32 2025 by rpki-client