Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: BjuK/fap3Wq7uNYWNqEdUzD44Vwlh6Uq6e6PHmUC6ww=
Subject key identifier: CC:36:37:A7:EC:2E:3A:7E:22:BB:69:17:C4:2B:DC:0A:A8:90:A0:8D
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 0197CEDFAB4D87A15F782EAF1D270052C810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 15C1
Signing time: Thu 03 Jul 2025 06:00:54 +0000
Manifest this update: Thu 03 Jul 2025 06:00:54 +0000
Manifest next update: Fri 04 Jul 2025 06:00:54 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: mfBMZREaPpPzBXpfI/D5F2NpE4JMoPbKhlWjhg/twm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:ab:4d:87:a1:5f:78:2e:af:1d:27:00:52:c8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jul 3 06:00:54 2025 GMT
Not After : Jul 4 06:00:54 2025 GMT
Subject: CN=cc3637a7ec2e3a7e22bb6917c42bdc0aa890a08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:75:4c:fc:42:86:85:76:66:14:2b:0b:4a:63:
5b:fc:8d:36:0e:54:98:66:70:07:93:b8:f0:6c:4a:
64:f6:6d:61:f8:d0:9f:7d:40:c0:bc:8e:03:9c:10:
f2:31:61:d4:93:f4:3f:d9:11:54:f2:a1:fc:01:c1:
50:91:d5:f2:41:f5:b3:33:9f:e9:6d:09:6d:5f:00:
20:c3:63:ee:57:78:a8:a0:31:c6:c6:61:ac:0a:e5:
89:9f:d3:12:fe:8a:4b:5c:be:4c:11:3a:55:06:75:
01:e1:28:52:a8:f9:99:a1:78:15:9c:bf:81:3f:8e:
26:02:c7:80:24:e2:fc:df:0f:53:1d:53:9f:7c:11:
0e:75:6e:74:b8:c5:7f:9d:0f:dc:b1:b8:28:48:1e:
f8:22:8f:34:93:53:f1:11:66:e0:3c:5c:7d:4b:3a:
3c:8f:1d:07:70:49:78:d7:fa:21:7f:1d:e6:af:65:
f3:b2:86:27:36:4f:5e:1a:1a:23:03:b0:c8:f3:14:
61:d0:21:c4:14:cd:41:c3:64:5a:31:96:d7:37:e8:
16:2e:e6:ea:60:87:4e:0a:8c:ba:ec:51:c6:3d:3f:
85:cf:ee:c1:ac:75:d4:43:8e:74:68:ea:2e:80:fa:
e2:38:82:6e:5a:80:db:27:25:0b:be:07:aa:10:32:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:37:A7:EC:2E:3A:7E:22:BB:69:17:C4:2B:DC:0A:A8:90:A0:8D
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:91:5d:f8:8d:2d:ac:df:5c:d8:b6:ff:49:f0:08:e9:61:c3:
b9:bc:0b:c4:62:6a:4f:68:59:7d:88:08:bf:55:73:6e:58:3e:
e6:62:05:9f:f6:61:c8:73:78:db:a3:52:2f:f9:8a:49:91:cc:
0c:4b:59:71:8d:d8:84:f7:13:bb:9e:5b:ab:ae:f7:bd:6d:c7:
9a:32:7f:17:ce:7d:3c:c6:23:6a:8d:27:bf:99:dd:58:c6:70:
32:f7:d9:11:a5:4b:60:1b:ea:d3:f8:4a:fa:2b:9c:e8:f4:9c:
64:91:7c:90:f7:61:b9:a4:02:d9:9e:45:f6:98:c3:b8:4b:59:
23:f7:5a:14:5b:4e:fd:17:3f:93:4c:f5:01:7b:75:1e:e3:c6:
3f:c0:51:d3:cc:4a:fb:ad:00:4f:04:8b:29:5d:71:a3:8c:b3:
64:ef:05:9c:fb:9f:77:1c:d4:6b:cd:03:dd:06:31:81:e9:17:
59:35:3b:6e:c4:63:1d:7b:19:f2:89:6b:f7:22:4c:01:8e:e3:
d7:3c:55:e5:8d:00:6d:23:61:18:b7:92:8f:f7:e8:62:4e:89:
16:ec:be:89:3f:ce:9f:01:05:f8:96:d5:ca:6d:43:43:8e:f9:
aa:fd:ef:14:3f:51:81:e4:3e:12:67:c0:db:f9:25:57:4b:87:
1a:6c:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:41:46 2025 by rpki-client