Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File: GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier: kcOTuIVgHSFDKAM7kkK0gSJrQpWHBdx5YAuldeyQLZE=
Subject key identifier: 3D:18:DB:FC:D2:37:EC:90:68:36:B3:C0:7B:C1:34:26:72:AA:91:EC
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial: 0197B77CC5A15D50988D44EDF9CF8C40EF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: iuvJQO65f7+DWAO/TiLi+97zctWx7BIHqL9deE7tua0=)
2: Z3Go8saXwZXXMMYbEYiVPWGVRXk.roa (hash: XTY4+F/77lFXbbIzurIN7oqokSXQvQHevFpVhwO/K9Y=)
3: puaohYxhGlR_ojExuJSBgJp58B4.roa (hash: 1Zbm+b0MGHPeRak+rHKtmgsa3JMwl8hkqHTwmCOmzbo=)
4: ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa (hash: vp55FHfuHOdAmakK1OzqAocvmJ8Vg24tSRWH6j9DsJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c5:a1:5d:50:98:8d:44:ed:f9:cf:8c:40:ef:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=3d18dbfcd237ec906836b3c07bc1342672aa91ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:1b:41:2c:dd:20:c6:e7:6c:73:73:19:ca:
45:34:90:0e:c3:9a:4e:4a:4f:67:41:f2:57:df:90:
a2:95:09:b0:22:dd:b1:94:6d:dd:e5:53:54:3f:9c:
dc:e8:85:c9:cd:64:5e:5e:20:53:ac:a2:d1:45:53:
e0:fb:3d:2d:26:1e:56:4c:ad:80:05:75:77:aa:3f:
89:2f:42:4a:6c:b4:ec:4b:4e:2d:32:8b:4a:ce:f9:
f4:d1:07:cf:0a:ac:da:11:59:f9:0a:b8:ec:72:b0:
79:a8:b0:41:a8:47:66:3c:ef:43:9d:4d:1b:d1:63:
9a:3a:d3:45:da:3b:46:39:b0:ea:88:e2:5b:7a:2d:
df:31:0b:ba:54:ef:65:d7:70:dd:12:f6:51:e5:76:
eb:a4:ee:4a:cd:fb:d8:bc:e2:ed:ee:d3:87:fa:de:
9c:b0:3d:a8:8f:06:3e:dd:5a:22:c8:6b:14:51:23:
7b:b0:c5:af:f6:ee:92:59:00:b7:a5:a3:1c:ef:68:
d2:a8:f9:66:0a:f9:da:9f:2c:0c:07:b1:96:8a:1b:
39:4b:c2:bd:ca:ee:34:fb:91:b5:40:56:6e:69:75:
0c:b0:90:ae:b4:6d:8d:8e:2c:19:b5:ac:41:3d:dd:
bd:39:f9:db:3d:71:3b:5f:46:2d:49:c2:a3:ed:be:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:DB:FC:D2:37:EC:90:68:36:B3:C0:7B:C1:34:26:72:AA:91:EC
X509v3 Authority Key Identifier:
keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:a1:a1:a3:35:43:3f:59:16:62:10:e7:3c:e7:f8:19:2a:
73:61:01:f3:44:c4:a1:c3:d7:3a:bc:b8:df:6f:59:8c:d1:29:
fe:6f:3b:96:57:02:29:d4:cf:98:6e:ae:bb:8a:03:b0:40:06:
f2:b2:68:c3:91:41:e2:49:2b:fd:a9:d9:e2:e4:71:7b:60:28:
60:fd:80:f3:58:0e:07:86:b4:b8:a3:f5:e8:f9:5e:ac:25:12:
59:31:fd:e8:a3:c2:03:17:9d:c2:ad:32:aa:c2:34:41:42:db:
ee:0d:10:07:97:a6:83:b8:1b:d3:13:a5:e9:22:32:46:01:ba:
f1:d0:72:94:a1:5c:33:37:9e:4d:9f:0f:20:9d:4f:1c:f3:68:
6b:2f:1d:e5:9d:e5:e3:23:fb:14:f2:b0:a8:61:96:e3:6c:e7:
d8:ff:1b:19:f7:b6:71:17:72:9a:4d:93:d9:6b:e4:6d:75:bd:
b6:20:81:70:46:60:0a:0a:21:71:f4:d2:ba:3f:3e:0d:93:1a:
5c:09:49:e7:a5:9f:5e:1a:f9:fe:01:d6:a8:bf:c2:5a:47:4a:
cd:1f:6e:40:0c:06:0c:14:fc:e8:a1:91:5c:e9:8f:73:c3:58:
4c:80:40:78:74:11:a5:b5:e3:ea:2f:ac:05:20:d1:bb:f9:0e:
e9:56:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:18 2025 by rpki-client