Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier: Swih4NU1wcVSs5X2e2S0snaIinMVKBjw9kkynYL84v0=
Subject key identifier: 86:CD:A1:AD:20:C7:91:0E:DD:56:0A:7E:6D:53:D3:33:6B:F5:B0:39
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 0197B77C62F8DDA1FC5389A62BA893A549C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: BegdDrTAjfq3QF_xE0SFA-JsmmY.roa (hash: UdhM2lVwgozCDdJmvHRy0hTuIS1j9lD7X7Mun/eqHgw=)
2: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: n7Tj5e+ELN7+d8Yk7gkpfu6osJUx8SbLlWZXbf/baxc=)
3: Q-JTW2pMbNHJuQzQ3GB1MFwgWco.roa (hash: Lazq6w2zk0BI/gQTS7LpUxVn4e7nb0oKSy4DjZT1z9U=)
4: czVnbZc92doWqy2gBGIdv1iBjnw.roa (hash: FGIHMIe1fM4M87IQciBzvSamGa61S/MPL+xAE/AMTyI=)
5: h31D8UJNE_u1sTKbKP1SFsGVcFY.roa (hash: kwansroYJJGhl0jfhBp7y2GRUoE1YU2JrM6J/UDWiVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:62:f8:dd:a1:fc:53:89:a6:2b:a8:93:a5:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=86cda1ad20c7910edd560a7e6d53d3336bf5b039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:86:61:06:5b:3c:5a:22:62:ba:ce:53:62:
a5:96:92:ec:bb:1a:23:42:70:30:78:dc:42:7b:eb:
de:44:c3:1a:44:49:c2:48:7a:bd:de:5f:54:58:d3:
fd:ea:e3:6e:92:20:d4:18:0b:00:05:99:69:b3:36:
3d:c3:b0:2a:05:33:5d:b8:33:9d:e1:70:2d:e9:07:
f9:41:b3:33:96:54:1f:c0:ed:fd:e7:01:39:94:b5:
e0:4b:69:e2:22:49:ee:47:73:21:2a:a6:df:d3:1b:
9f:d3:ef:e3:f2:7c:16:eb:41:2e:bf:37:17:6d:2a:
2d:77:8a:5f:76:63:06:8f:e9:f7:fc:e2:17:cd:3a:
6b:74:00:ef:62:39:9f:49:63:03:87:96:f5:c9:ca:
43:70:50:95:11:b9:65:62:c6:84:73:7c:e7:ba:2e:
72:16:18:6e:50:9f:56:56:1a:94:11:ae:52:4a:75:
24:c1:8f:ad:8f:19:bc:b0:b8:c0:ba:ad:12:3c:3e:
01:cb:ee:67:9e:b8:ce:d7:c2:fd:a2:8e:99:ce:54:
c4:4b:37:38:25:ad:c4:8c:d1:e3:04:3e:53:1f:97:
d4:52:e8:6c:ba:71:dd:e1:c2:8a:75:7b:34:bd:50:
a7:2d:8c:98:f4:6d:91:fc:74:37:a3:39:fb:4b:62:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:A1:AD:20:C7:91:0E:DD:56:0A:7E:6D:53:D3:33:6B:F5:B0:39
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:29:01:7c:e1:12:31:70:5f:e0:a7:7e:1c:5f:0b:05:f2:b2:
c6:91:20:4b:c4:49:ed:d1:56:ee:a1:5d:94:5d:5d:e8:f1:13:
4a:6f:cc:48:64:0c:2a:62:84:ed:0d:5b:b4:84:f1:84:6e:30:
a9:80:14:6a:f5:66:38:8c:f6:0d:8f:86:8d:60:65:7c:bb:f7:
ec:93:04:4d:27:97:e3:50:ae:1f:1d:67:f9:54:bd:c9:30:d4:
ce:6c:16:69:08:ac:70:e9:ad:0c:03:79:19:06:76:1c:8d:01:
29:39:30:4f:9d:30:8b:9e:0d:15:70:b1:cb:2c:4e:a0:fb:6e:
8d:b1:d9:a6:9c:03:30:3b:67:5c:24:8f:89:76:83:53:f9:6e:
f2:fd:75:09:78:4a:14:ea:09:2d:90:43:3e:29:1d:3c:35:66:
22:60:25:9f:f0:4e:97:67:b9:42:0e:01:b0:e3:b2:09:41:9f:
8b:5d:5f:d2:f7:cf:3b:18:fb:7f:9e:e6:9a:5a:d4:3d:35:0b:
97:4d:2d:e3:32:5e:d0:a3:cc:6b:c0:83:33:e0:e8:15:c0:e0:
09:bb:ba:9d:c0:5a:40:b9:27:98:2f:e9:ff:aa:96:7f:35:75:
6d:ac:90:ef:d0:ff:e7:23:cb:5d:cc:d4:f9:39:e2:ab:61:70:
ce:af:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:50 2025 by rpki-client