Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File: gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier: frOACuPXGcbIEFNnRIvtlMX9FmtF01m8M+WHjJY8On0=
Subject key identifier: 9C:CB:7A:6E:44:0C:EF:70:00:EC:88:DC:4F:66:E3:A9:93:E3:EA:7F
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 0197CACC00A84DE40F22CCEA2DAB1B1615DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number: 0C92
Signing time: Wed 02 Jul 2025 11:00:56 +0000
Manifest this update: Wed 02 Jul 2025 11:00:56 +0000
Manifest next update: Thu 03 Jul 2025 11:00:56 +0000
Files and hashes: 1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: ywnvQDbxbYbXc11wZhecYKGFGPEYkPyVjTsaDjBDkMY=)
2: zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (hash: 66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:00:a8:4d:e4:0f:22:cc:ea:2d:ab:1b:16:15:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: Jul 2 11:00:56 2025 GMT
Not After : Jul 3 11:00:56 2025 GMT
Subject: CN=9ccb7a6e440cef7000ec88dc4f66e3a993e3ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:25:df:c3:a2:fb:38:9f:0b:e7:06:24:10:
e7:ee:c2:74:ac:bf:df:a5:55:e8:13:27:a4:ba:27:
9b:3b:59:01:f8:a8:48:f3:21:ca:cb:47:c0:75:cf:
a2:33:f6:50:30:97:a7:e1:6c:99:1e:bf:82:49:8c:
8b:f7:48:67:af:39:ee:4d:ca:7a:7f:9b:ea:8c:9a:
42:46:fb:1a:c5:75:a0:3e:f6:02:8f:4b:6c:2d:f3:
f2:01:a0:bf:51:83:85:25:e3:87:f8:6e:fb:f3:2f:
20:dc:79:f1:be:ed:55:8e:4f:4e:82:35:e0:f2:54:
4c:08:59:dc:79:85:c0:42:96:bf:6b:21:65:4e:1f:
67:9f:57:3a:22:94:7f:22:ec:83:0a:c2:6e:7c:a9:
69:73:b7:8f:08:18:0a:c4:a7:a3:0f:de:39:65:31:
61:03:bf:95:6f:ea:56:d6:c0:73:eb:19:00:ec:21:
38:a9:87:61:5c:7c:f8:9f:ca:b7:20:cc:7b:a8:ed:
f2:9f:04:4b:41:a8:cb:9d:15:00:ad:99:a9:99:79:
33:ca:89:f1:99:72:d7:e5:06:59:f8:ed:14:8c:09:
2d:58:d6:f4:df:b7:fd:1c:f4:b8:26:40:d3:a5:ce:
b9:14:d7:19:f2:5a:a9:5c:0e:cd:ba:71:94:99:fd:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:7A:6E:44:0C:EF:70:00:EC:88:DC:4F:66:E3:A9:93:E3:EA:7F
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:10:a0:44:52:1a:61:f2:00:8e:e0:7a:18:f9:37:ff:38:
7f:8c:f1:4c:d9:d9:1d:14:8e:15:2b:43:6b:a6:94:c4:69:5a:
09:8e:1b:10:9b:4e:39:6f:ff:bb:b1:96:89:4f:fe:ff:86:f0:
1f:22:ad:69:99:c2:a8:da:84:ad:26:27:5d:c5:b0:99:71:68:
44:81:d7:70:cb:1b:f9:17:cb:04:d5:84:0f:24:5b:87:77:da:
d6:81:4e:73:7e:8f:89:74:92:da:8a:28:45:ce:4f:3a:a9:2c:
63:81:60:36:ad:ee:3e:41:64:b8:55:9c:3c:11:00:11:52:9a:
ba:21:51:2d:59:88:9d:23:00:1d:ca:f8:9b:ed:cf:58:16:60:
4e:e9:18:66:56:0a:e8:eb:8f:04:55:7c:a1:98:45:90:9a:5e:
24:69:0e:bd:6d:9d:ff:d0:1a:d0:2e:7c:f0:d6:98:e8:fb:e2:
0b:67:72:83:07:d1:c2:58:37:3b:7a:01:12:7f:69:19:0d:80:
d3:64:1e:eb:a8:ca:bd:ba:d6:61:c5:7e:c9:fd:65:3f:0a:34:
b4:d2:62:a4:94:3d:fa:b9:60:c6:f8:aa:e3:49:9e:8c:a0:44:
17:ca:1c:7f:8c:03:b3:43:cf:23:3b:5d:91:ce:c8:f7:9f:12:
ca:aa:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:28:31 2025 by rpki-client