Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: p7MA0vgvyTRWHE1RxWtxKSwBRQluaWMSHw6toyae/zY=
Subject key identifier: E5:23:F5:BC:8D:62:2A:F4:C1:04:BD:CF:06:20:BB:10:C4:19:86:96
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 0197B70E655550EFDBEBD0676A1E3497D3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 06DB
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: mb5d4Gay0bYIsnJ8oWBkC4XwWcBzsGVRIyn2RehgBvg=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:65:55:50:ef:db:eb:d0:67:6a:1e:34:97:d3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=e523f5bc8d622af4c104bdcf0620bb10c4198696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:22:54:8d:49:0b:7d:3e:25:01:1f:1d:ad:
88:de:a4:0c:ab:d3:f3:eb:b9:17:9b:a8:f7:81:4c:
30:a3:7e:a7:ec:93:96:e1:a5:16:62:ba:4f:29:5d:
4d:b8:82:ea:f8:8a:35:af:6b:28:80:0a:db:c4:b5:
67:2e:30:cf:8a:3a:1b:c5:55:d7:69:0b:a1:de:65:
bd:0f:eb:59:d1:3a:bb:13:c5:91:62:0a:a6:1e:a8:
0a:bb:ff:4c:bc:f3:e5:4f:b2:45:82:97:e6:5f:dc:
f8:08:1d:43:2f:41:e6:40:8f:8e:00:96:67:80:31:
63:73:9f:12:70:32:35:dd:ca:9f:40:f6:44:5e:da:
d5:47:c5:c2:bc:bf:32:9f:8f:34:ef:c7:4c:ff:e3:
a8:53:7d:48:81:a0:b8:bc:45:aa:88:bf:9a:e3:e9:
64:c4:6f:52:1a:9a:4d:30:80:29:39:17:db:f0:72:
6e:fd:d8:07:be:b2:67:02:5a:c8:8d:df:4f:92:d8:
fe:69:c1:44:6c:e2:c6:a1:80:c3:0c:a8:c3:55:43:
69:ac:47:16:1d:8a:ce:20:38:11:c5:c0:28:30:13:
d2:50:64:11:ed:df:c1:4f:df:cb:ac:86:05:f3:69:
99:58:29:57:1e:cf:b3:35:0b:03:f3:9f:f8:8d:12:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:F5:BC:8D:62:2A:F4:C1:04:BD:CF:06:20:BB:10:C4:19:86:96
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3f:9e:be:64:12:9d:de:10:78:cd:68:78:cc:1f:fc:a2:d7:
9b:1d:a7:52:a9:74:3b:6d:c1:11:19:06:c8:fa:d9:b6:ac:e3:
e8:9b:ea:50:e5:97:e5:e7:e2:8e:3a:f0:1d:20:0a:c3:47:73:
48:6f:a9:01:87:17:d6:e9:03:c1:41:f8:aa:04:ea:b2:25:d3:
86:91:11:9e:72:8a:5a:f7:86:b6:e9:4d:f2:5d:02:dc:09:21:
93:48:ff:5d:9a:e2:22:94:38:75:52:8e:56:67:28:4f:4a:45:
30:96:55:21:77:5e:9b:bf:56:e9:73:45:1a:9f:38:5d:29:d7:
71:c8:95:f9:68:fd:01:f4:2f:d2:70:da:80:cd:02:6c:ad:0a:
21:05:7b:0d:e3:0e:f5:12:1c:44:f2:42:f7:bd:ad:e2:24:2b:
5e:63:28:69:8f:d4:49:91:68:e3:5c:52:5f:17:71:08:aa:ab:
17:bf:60:dd:c7:45:95:a0:d1:c1:2c:95:79:c5:21:2e:b3:8c:
0a:f0:de:11:c7:12:8f:9e:6c:e5:f6:a0:4d:7e:c2:0b:18:b6:
ee:e8:82:45:56:c5:3b:32:31:ff:be:18:db:3b:cd:93:3e:51:
92:0a:a8:9e:91:2e:3f:23:ce:98:7e:33:33:1e:31:a3:45:69:
de:06:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:31:58 2025 by rpki-client