Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: wfog/oMnvF9BCVTcgAgS/YATA/8lam6N5xGemnkgNWE=
Subject key identifier: FF:B5:0D:AA:99:35:ED:15:2B:B8:E5:75:49:05:11:B7:DB:77:BE:71
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 0197CB39DE1E472B74875972954878AAECC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 13:00:56 +0000
Manifest this update: Wed 02 Jul 2025 13:00:56 +0000
Manifest next update: Thu 03 Jul 2025 13:00:56 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: j8S90f7j+Mw12of47p0TNv4Jp5FizEybZ13dCkB+4bY=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:de:1e:47:2b:74:87:59:72:95:48:78:aa:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jul 2 13:00:56 2025 GMT
Not After : Jul 3 13:00:56 2025 GMT
Subject: CN=ffb50daa9935ed152bb8e575490511b7db77be71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:36:80:69:5a:65:ac:f5:3f:ac:ee:0e:a1:
d1:6f:f5:51:19:09:6c:e0:d1:14:67:4d:09:ec:98:
e5:14:05:04:f1:3d:7f:da:74:bc:9e:17:1a:45:48:
b6:7f:b8:68:4a:fc:38:46:b0:7e:69:9f:e5:ac:7f:
ef:7e:d3:15:5b:a1:16:ad:af:ed:d9:84:9b:2a:93:
b5:23:17:ab:90:56:a3:07:f8:70:2c:c1:3b:79:e4:
77:da:2d:21:f2:bb:90:c5:ff:a6:b7:de:0e:ae:01:
48:1e:b9:75:ff:23:e2:cb:5f:d9:53:f0:8a:52:ef:
30:81:cf:1c:6a:73:3f:e7:fb:ff:1a:10:6e:61:cd:
69:08:fa:28:55:6c:04:fd:96:14:ca:c1:6e:e0:9c:
ba:bd:ee:ef:91:ca:27:e4:84:a2:87:ac:15:05:df:
a5:f1:1a:a7:25:26:32:83:fa:37:18:0e:70:9c:65:
4f:1f:b3:8a:4a:ac:58:50:2d:4d:62:07:25:1a:9f:
6e:bf:ab:19:d2:df:cd:10:42:8f:78:81:3a:0f:47:
32:63:c6:81:4a:ea:b9:6d:7b:4c:59:13:5f:80:2f:
03:a7:88:9a:ba:ea:a1:19:3a:bb:28:4a:d9:6b:3f:
99:44:82:d7:b3:0b:c8:20:f1:90:7a:ad:da:3d:b1:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:0D:AA:99:35:ED:15:2B:B8:E5:75:49:05:11:B7:DB:77:BE:71
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:86:01:83:ac:ec:11:e6:a5:14:12:3c:0e:d8:cb:e9:0b:27:
20:01:f6:84:20:61:d2:5b:c3:f1:f5:67:51:12:5a:ce:cd:a9:
ed:47:c8:a8:97:4a:06:0a:19:d4:bc:99:63:02:2b:27:78:dd:
1e:86:ba:a9:7e:60:f6:eb:09:cc:83:96:65:cb:4b:3e:3a:ce:
b9:17:0f:fe:90:45:a5:f2:c9:f4:d5:94:43:d5:ce:16:8b:cd:
ce:b2:2a:39:df:05:7c:d4:ae:11:8a:2e:76:84:4d:b8:15:aa:
9e:47:a0:02:39:87:1b:64:01:3a:34:71:05:66:5b:8e:11:6f:
c1:1d:b6:e4:14:fb:51:29:4f:f7:60:41:6f:3d:ad:e5:88:09:
4b:15:2e:0d:d6:e4:ce:6c:70:a7:d4:11:a8:1b:96:de:46:62:
b0:77:29:24:64:c8:62:87:f9:2d:46:0d:83:98:67:a9:97:dd:
b2:fb:6e:1e:51:c7:6f:45:07:8a:58:31:6a:b3:16:11:c6:cd:
b9:87:eb:4d:6f:c0:6b:c2:f6:3f:77:ca:d6:71:fc:c1:c1:fe:
22:3a:ca:c3:5d:02:e2:0f:01:d4:ec:f9:b3:24:87:d7:e4:dc:
59:b4:d7:af:60:68:65:de:87:4a:dd:b8:06:41:8f:58:08:9b:
0b:f9:40:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:14:45 2025 by rpki-client