Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: 5mhsCxg4Bdwnku3QM+EDVh14Ih6PI9FOXSTAWjSx9ts=
Subject key identifier: 8C:07:18:A1:E7:13:75:F1:5D:BD:1F:25:AD:10:9C:40:27:B8:C4:A5
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 0197B93428283FC1B7D5B4B0CDD9DF7FDD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 0ADA
Signing time: Sun 29 Jun 2025 01:01:32 +0000
Manifest this update: Sun 29 Jun 2025 01:01:32 +0000
Manifest next update: Mon 30 Jun 2025 01:01:32 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: jPQft3BiuDpbvt5An5UYolwVpr9QdBf5y9SFr06TQb4=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:28:28:3f:c1:b7:d5:b4:b0:cd:d9:df:7f:dd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Jun 29 01:01:32 2025 GMT
Not After : Jun 30 01:01:32 2025 GMT
Subject: CN=8c0718a1e71375f15dbd1f25ad109c4027b8c4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:66:c5:87:bd:53:69:d4:33:5b:85:51:44:
9d:1b:cf:04:83:8b:99:38:9a:59:81:f5:92:52:40:
01:b5:6e:27:dc:d6:ad:8a:e3:9d:c3:9c:66:3d:8f:
ca:51:9e:0a:40:85:35:2f:84:76:a3:84:2f:35:c2:
69:5b:8a:f2:7a:04:ff:e8:37:e5:b0:6e:1e:81:ff:
39:cc:3c:3b:7c:df:77:21:f9:96:d6:b5:76:e1:1e:
31:f2:2e:2c:01:d6:a5:5d:0f:f5:c9:8e:60:c8:53:
cb:67:d2:27:7f:ee:ca:3e:b0:69:13:da:1f:5b:e3:
90:b7:5e:e4:82:4b:02:94:f8:c2:97:10:47:0a:c1:
e8:28:bf:39:b1:e5:e2:76:56:35:ce:14:91:01:c1:
51:f7:a6:76:69:51:b4:83:e2:7c:2a:51:1b:db:97:
61:b2:95:f3:60:37:f5:31:2d:4c:75:03:5b:15:18:
24:26:0e:ef:1e:90:ec:62:0b:e8:bb:8b:99:67:1f:
18:da:59:cc:c0:f0:cc:c6:bc:79:fc:cb:d2:40:49:
0a:d6:27:b0:a1:4e:38:0e:c4:5e:d2:f0:c1:2f:96:
82:28:0c:c2:55:fd:20:b7:48:dd:33:54:f7:16:b6:
cf:65:9a:73:5b:b6:9a:12:cd:e5:83:62:8d:61:06:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:18:A1:E7:13:75:F1:5D:BD:1F:25:AD:10:9C:40:27:B8:C4:A5
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:14:bd:b3:40:46:c9:11:1e:87:0b:71:56:68:72:05:10:52:
04:5d:26:fc:55:55:b2:71:55:e8:c9:62:6d:50:bc:10:ce:a9:
88:ae:f6:2e:61:1c:08:2b:d5:a5:43:ee:b5:f1:79:7b:92:2e:
d5:7f:29:46:68:a9:0f:a9:45:d9:d2:e1:e2:e4:70:94:a1:8a:
d9:8c:09:51:2b:21:ed:a8:bd:f1:ff:ce:74:ab:ad:f8:06:ff:
e4:00:d6:df:b1:10:e7:04:7b:ae:74:41:ea:e8:e3:45:74:2d:
6b:75:fe:a7:d7:02:83:3a:ea:08:51:10:a3:71:01:cd:ae:e3:
fe:30:aa:25:de:d2:ba:ec:c8:70:28:f9:8d:47:c8:42:3c:1a:
38:20:57:b9:6f:ec:32:c5:15:18:cb:a8:2f:15:49:92:fe:5b:
01:59:5e:2a:4b:74:8d:84:77:a8:f2:b7:56:e6:0c:b4:72:f0:
c0:d4:0f:b0:f2:83:90:8b:91:ef:02:13:a5:c5:04:ed:30:a0:
3f:12:47:ae:f6:a3:3f:6b:54:bb:ad:8b:ce:fd:16:2f:d2:66:
ba:78:1f:28:5f:5c:48:73:56:6e:6a:71:20:ee:2f:e7:eb:2b:
35:73:df:45:02:1f:0a:11:1a:09:b5:f3:79:6e:95:d6:a1:5c:
c2:43:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:11 2025 by rpki-client