Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
File: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft (raw, json)
Hash identifier: JVFjgdOaOQY4w7mHyhD4a+J3B2c4UB4+ZM5pTEDNBWk=
Subject key identifier: 4A:AE:8B:7A:EC:12:DB:CD:D0:D2:82:8F:E8:F1:07:06:30:29:CF:B3
Authority key identifier: 82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
Certificate issuer: /CN=827313247c486fe434833c09087a00a900301840
Certificate serial: 0197CDCDBC6C8A0459CE6AB37BDA0E4E2A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
Manifest number: 15BE
Signing time: Thu 03 Jul 2025 01:01:41 +0000
Manifest this update: Thu 03 Jul 2025 01:01:41 +0000
Manifest next update: Fri 04 Jul 2025 01:01:41 +0000
Files and hashes: 1: 7G9OAa8ebUxYvLbiABAZAGXs6yI.roa (hash: Q8FJVCv7ZP8KepVRkOgfjY1xOHET+UVMaI0qQvaXpcQ=)
2: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl (hash: N9TLZLpL1M9pbvegUQ/BVCbTGCIPRGJBNpj4R4KPor4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:bc:6c:8a:04:59:ce:6a:b3:7b:da:0e:4e:2a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827313247c486fe434833c09087a00a900301840
Validity
Not Before: Jul 3 01:01:41 2025 GMT
Not After : Jul 4 01:01:41 2025 GMT
Subject: CN=4aae8b7aec12dbcdd0d2828fe8f107063029cfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:ba:b3:38:05:b6:59:34:e6:02:55:5b:dc:
81:66:b6:e3:58:c2:30:92:b7:a0:ac:9b:b1:a2:48:
9d:2f:d5:04:a1:3c:82:48:df:ee:1b:58:93:8e:ae:
20:01:0f:25:05:9c:26:48:ab:02:63:8c:ac:c3:80:
51:8b:a5:6e:55:ac:b3:99:67:35:a8:59:8b:cb:3c:
13:0a:c7:e8:4d:3e:21:a2:3c:e0:b7:6e:33:ed:60:
b3:3c:17:c4:cf:d8:33:c1:ed:d5:6f:a9:40:f2:d0:
23:db:96:a1:f1:19:30:42:ef:31:2c:c5:d2:38:be:
4e:5c:2e:e5:eb:6a:4c:41:dc:fa:cb:ba:b1:6a:43:
52:26:c5:77:20:1b:8e:ae:26:ce:c0:d3:07:c5:45:
7c:21:64:f0:70:44:85:2e:03:31:80:0b:f1:dc:38:
38:7d:ad:a6:38:dd:00:0f:be:c8:e3:2d:d8:17:3b:
85:2e:8e:ff:1e:42:c4:b0:2b:49:6c:2a:eb:54:52:
10:c8:3d:12:5e:2a:4d:97:0b:76:31:ad:f1:15:39:
eb:b6:5b:9c:ab:71:d0:d4:d8:bd:44:67:2f:4b:d4:
c3:26:29:03:d7:b2:7c:c3:09:12:84:7b:69:77:8d:
85:b2:2e:99:56:6d:d8:ef:c5:cb:5d:71:a8:b9:d9:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AE:8B:7A:EC:12:DB:CD:D0:D2:82:8F:E8:F1:07:06:30:29:CF:B3
X509v3 Authority Key Identifier:
keyid:82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:f0:22:44:c5:bb:33:5e:73:0f:f1:5c:0c:03:f3:1a:27:
d6:88:c6:2f:20:d6:44:ba:fc:08:7f:88:b1:51:ed:35:de:c6:
94:c6:64:4c:78:e6:76:bb:d5:77:08:67:61:56:dc:f6:d6:62:
36:9e:67:b3:26:a1:24:52:ba:60:9c:27:fe:e8:de:69:d0:dc:
d6:46:19:c5:0d:34:d7:a7:54:b2:61:40:f9:db:07:b9:ff:07:
70:8c:ad:fa:fd:52:e1:84:0f:83:ac:96:06:ae:9a:bd:75:93:
6e:29:57:0c:e6:40:20:ca:af:26:35:19:bc:8a:19:5f:79:fe:
17:03:7c:52:2d:0b:ce:4a:1f:f7:34:02:00:b0:1c:70:14:31:
74:82:bc:89:1f:68:bb:64:2b:64:77:d9:bd:5e:88:88:09:a8:
81:8e:ca:43:c1:24:1d:0b:fc:d9:3f:6f:74:72:0c:25:67:f4:
6d:35:1d:98:8f:0e:4b:47:47:83:dc:59:4a:af:7a:c0:e8:74:
33:1f:1b:66:64:b6:4f:f0:a9:8e:57:fb:40:c0:52:72:f3:6d:
94:04:14:26:c6:53:23:8b:8b:4c:1a:65:ba:d4:d2:aa:81:48:
ee:23:5b:c6:49:d5:01:c3:d5:93:9f:60:5b:40:b4:4b:cc:b0:
f7:cd:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:54:19 2025 by rpki-client