Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: yynhzcFeojSeidULBlcAvpmMT+r9UztQL64xkPlX6os=
Subject key identifier: 67:CC:3D:9B:88:E9:5C:2E:A1:18:BD:E9:52:0E:17:B6:39:27:07:F2
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 0197B8FD4464E2B640656AD3A41AF3C7DE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 0144
Signing time: Sun 29 Jun 2025 00:01:35 +0000
Manifest this update: Sun 29 Jun 2025 00:01:35 +0000
Manifest next update: Mon 30 Jun 2025 00:01:35 +0000
Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: bsT2LJQ26A1p/kGA/Fblj22F90+V49ZozDaGvSQxHbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:44:64:e2:b6:40:65:6a:d3:a4:1a:f3:c7:de:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Jun 29 00:01:35 2025 GMT
Not After : Jun 30 00:01:35 2025 GMT
Subject: CN=67cc3d9b88e95c2ea118bde9520e17b6392707f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:a2:13:3d:cd:29:72:b9:31:c3:90:57:d6:
e9:ee:79:29:98:7e:d5:a1:3d:48:cb:5b:dd:d1:8b:
7b:1b:8f:b7:2b:fe:05:ec:13:77:3c:92:73:0f:09:
52:2c:ee:93:1d:ad:55:ce:05:a9:90:3e:b3:03:e2:
6e:67:50:ec:ba:94:23:6a:fe:5a:69:24:e0:0e:95:
c3:f6:71:19:4d:1b:78:2f:88:bf:e8:5d:bc:ad:f8:
7a:b3:7f:6b:ae:5c:c9:93:43:f1:c1:fb:8c:29:30:
bf:a6:cc:59:c7:04:ac:c6:21:08:1b:7c:2b:ed:98:
a3:7d:a5:74:44:00:02:57:9d:b0:e0:71:b3:e9:15:
69:65:af:69:69:cf:94:da:1e:29:ef:85:32:89:92:
62:4e:eb:fa:bb:2e:d2:5f:26:f7:1d:af:81:e2:f4:
6a:dc:52:41:1a:d8:9b:d9:70:80:72:e7:f3:b4:3c:
dd:b7:2c:3e:91:77:a2:b0:e3:92:08:24:35:d7:4c:
78:00:a4:55:4d:47:20:f2:6a:b2:07:c3:90:37:81:
f1:5e:f1:02:69:63:53:72:da:13:b9:4b:7c:0e:66:
39:67:15:bb:81:01:ca:31:e8:98:28:db:96:6c:dd:
bb:f3:58:02:16:c0:bb:c2:b7:0f:95:93:4d:b4:4e:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CC:3D:9B:88:E9:5C:2E:A1:18:BD:E9:52:0E:17:B6:39:27:07:F2
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:99:ad:e0:ce:5b:cf:37:0c:cf:48:c0:fa:26:5e:a0:2f:55:
69:9b:e8:a3:92:20:07:c7:e5:b6:99:71:ef:3b:8c:a6:54:c1:
1f:8b:5e:08:43:74:89:8c:60:04:82:dd:53:ae:05:3e:e3:80:
59:7b:ff:64:7e:8c:e5:c2:ec:4f:e1:9a:f5:c2:c8:6d:8c:fd:
3a:3a:06:58:37:08:d8:8e:75:82:e0:8b:a9:3e:e5:d1:14:36:
59:eb:fa:cc:a4:ac:c1:61:30:b1:9c:2d:3b:bf:73:60:dd:d6:
56:e0:ee:4b:4c:2f:ba:c3:ba:67:0c:64:0d:52:91:1d:41:a0:
31:7b:14:1e:ca:8e:3c:81:95:1f:9b:99:7c:7d:c9:46:23:69:
33:be:96:be:1e:ec:33:3c:5c:7b:1e:14:3c:f1:4a:04:05:75:
d0:6a:82:56:10:df:1d:d4:ee:90:0a:0d:6e:ee:9e:d8:d6:d8:
03:ef:89:54:56:4e:64:91:30:cc:30:f8:ac:32:56:11:57:ea:
e0:ad:4e:63:2e:64:ff:04:f6:b6:9e:b6:f9:4a:6d:0c:af:e7:
a6:ed:46:28:49:a8:dc:9d:3a:05:9d:b2:5b:79:5b:8f:84:fa:
5a:84:2a:1d:7b:15:4d:a6:1c:f8:f4:b0:30:16:c8:38:96:a6:
97:e7:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:02:44 2025 by rpki-client