Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: 7K3XQYfsHsIjp35ILP8ty0L3Mk41Ftd9QoWM5m7c7pk=
Subject key identifier: 5D:58:91:EB:38:D8:57:6F:22:69:2E:E6:17:10:05:4C:0A:E9:44:05
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 0197B7EAD954688D6699279153A19E6DA74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:50 +0000
Manifest this update: Sat 28 Jun 2025 19:01:50 +0000
Manifest next update: Sun 29 Jun 2025 19:01:50 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: wOBgz/a0N/11E+miRfioLv02B4FQntkRwDGpHcNmD6Q=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d9:54:68:8d:66:99:27:91:53:a1:9e:6d:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jun 28 19:01:50 2025 GMT
Not After : Jun 29 19:01:50 2025 GMT
Subject: CN=5d5891eb38d8576f22692ee61710054c0ae94405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:d6:5a:3a:01:61:79:d9:75:5a:42:7a:86:
64:1f:cd:10:ec:4c:d6:87:62:35:da:60:c6:53:e4:
58:81:08:be:9b:69:cb:c0:e4:9a:3a:02:80:cc:8a:
af:5a:42:36:9b:01:13:fe:65:5f:51:34:22:8a:c6:
b6:64:da:48:13:e7:0e:ba:c7:8e:ab:16:e9:23:68:
16:ea:e9:26:19:0a:44:b4:cd:19:54:b8:1a:fe:42:
de:f3:6c:16:11:15:b4:db:53:ee:62:fa:88:fd:a7:
cb:71:9f:0d:26:a7:9f:cc:46:47:7e:71:8e:41:2f:
60:37:6f:92:75:30:81:86:4a:ce:b1:bb:62:e6:fb:
24:25:a9:f6:be:fa:90:c8:2a:9b:b0:45:52:8a:d7:
24:ec:f6:b6:fe:82:b9:fa:31:3d:5b:a3:27:b1:ef:
b8:e1:26:13:4a:dd:0a:e1:35:7c:c1:85:44:c6:ff:
a9:01:da:3f:d1:ed:31:23:ad:81:d0:e7:c5:21:74:
bb:53:36:19:2b:a9:1e:57:f9:d4:e2:ce:85:3a:6b:
08:03:2e:08:ed:2a:42:9e:c3:39:4e:5e:62:83:5e:
6c:09:cd:4e:df:26:1c:c5:b7:82:4c:da:3c:fe:bb:
ee:83:5b:9a:c7:ef:b4:e8:f9:47:26:2b:07:eb:38:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:91:EB:38:D8:57:6F:22:69:2E:E6:17:10:05:4C:0A:E9:44:05
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5b:75:09:8b:0c:81:5c:82:56:c6:fa:25:d0:f7:a0:a3:91:
5a:8e:0e:58:50:44:ef:11:b4:d4:6f:63:41:7e:23:97:b9:43:
9a:0a:de:45:69:70:70:c3:d7:31:c3:72:00:c9:3b:b9:b3:ed:
77:52:bd:10:55:f1:23:7d:10:b6:a3:44:7a:86:1d:16:80:0e:
35:c8:55:67:a8:72:75:17:b8:e6:5e:62:90:af:4d:f6:e1:a3:
4c:9a:4e:f1:00:67:f0:45:f2:ed:7b:e0:47:fd:c4:75:43:02:
e6:ff:f0:7a:06:24:88:6a:5a:53:c7:47:38:3c:d6:c1:ea:23:
66:5c:56:e5:63:71:d9:d6:23:b4:e4:3c:7b:6d:4c:5a:d8:89:
bb:89:9c:c5:34:4e:3d:eb:ee:2e:7f:7d:db:21:f5:02:eb:65:
3d:ac:6f:db:2f:cc:e0:4d:d7:ee:f6:18:58:5f:96:03:38:fc:
e4:af:9e:ed:cd:28:af:8d:87:bf:d0:10:9d:d1:11:f9:73:4c:
a8:19:8f:0c:0a:bd:ce:65:04:58:d3:17:f2:8f:c3:c1:92:9e:
6f:e4:10:a6:db:03:3b:68:29:db:95:5f:fe:22:d6:e7:a6:af:
e4:a1:f1:57:89:94:b1:d2:ad:50:47:5e:f1:3c:04:a2:d2:0a:
ec:37:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:28 2025 by rpki-client