Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: DS9GAYsydYg/eqybpfGHWB6SXvfDI+BJpNcnNvPn5IM=
Subject key identifier: 0C:0E:41:32:36:8F:6B:AA:4E:86:05:CC:86:33:D7:F0:48:15:61:F2
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 0197BA0FA61661E1636B67ED19AFEC2CDA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0B21
Signing time: Sun 29 Jun 2025 05:01:17 +0000
Manifest this update: Sun 29 Jun 2025 05:01:17 +0000
Manifest next update: Mon 30 Jun 2025 05:01:17 +0000
Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=)
2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: qj6UPhU34BRNy6hnay1g7oQKUSNqZbPnKQD+C9I9iTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:a6:16:61:e1:63:6b:67:ed:19:af:ec:2c:da:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Jun 29 05:01:17 2025 GMT
Not After : Jun 30 05:01:17 2025 GMT
Subject: CN=0c0e4132368f6baa4e8605cc8633d7f0481561f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:d5:e3:cc:1b:97:59:12:c6:28:32:39:8e:
a1:a7:e6:b5:22:57:f5:0b:22:fd:6b:88:d5:3a:64:
d7:24:54:e9:0d:32:aa:73:42:c5:19:e1:29:4a:85:
88:33:c5:c2:11:3e:02:fb:e2:5a:92:3d:a1:c9:84:
4a:19:8c:d6:6b:b4:b2:65:89:bd:27:27:b9:4a:91:
1d:c4:9d:9b:54:1c:83:d7:2c:19:6b:2b:c7:45:e3:
82:a0:46:c3:0f:15:7a:26:1e:b2:28:28:64:0e:22:
f5:be:69:0a:02:82:ac:ac:d4:30:99:53:16:2e:01:
43:58:2a:7a:ec:cf:a0:75:88:87:f4:f4:d1:0a:09:
1f:e8:d1:4e:38:02:88:11:3c:25:95:8b:e1:80:ba:
e7:13:cf:37:a1:b2:84:7e:6d:23:0f:59:5f:00:51:
3f:f1:a5:92:ce:7a:de:d9:0a:46:07:f4:0e:3f:39:
93:84:bd:ad:96:c5:87:32:ab:92:df:04:e6:2b:56:
f1:b2:c8:ba:08:5b:96:b0:00:e8:5c:28:ee:d2:9f:
c3:3f:f9:8e:02:d3:4c:32:24:1c:f8:3e:2d:68:53:
aa:4c:68:eb:f3:3c:91:73:a4:29:a4:bc:3f:90:ef:
1a:b5:f1:b5:6f:88:de:6d:01:11:ab:73:b9:06:8a:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:41:32:36:8F:6B:AA:4E:86:05:CC:86:33:D7:F0:48:15:61:F2
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:87:f2:df:6b:c2:8b:09:77:b4:e3:9a:a0:6d:ae:62:c1:d1:
a9:a8:b8:a0:4c:fc:52:84:c8:b8:70:bd:36:2e:90:5d:01:3d:
3e:0d:f1:da:d0:c1:e9:dc:c5:11:f7:b7:7a:9f:fe:10:f9:d6:
12:9e:0e:9f:cc:30:87:6a:99:14:9e:72:06:c4:ae:72:03:32:
0e:a1:40:53:f0:6a:45:a4:0d:89:75:28:6d:7e:e5:27:f8:32:
a5:cd:bb:ce:29:91:d4:d8:4c:32:1a:51:6d:07:21:14:0a:e5:
e5:51:8f:c5:1c:4c:1c:39:8d:36:93:d4:60:19:d0:9b:e2:c5:
9e:e4:b6:36:9a:68:22:42:7f:23:1d:90:f3:96:94:68:8b:6b:
58:1c:61:9b:fd:8b:85:34:10:eb:95:1a:f8:02:98:90:aa:73:
f4:80:62:3b:68:b0:ea:20:8a:d6:70:9f:28:43:c7:02:eb:25:
0f:0b:72:0b:db:4b:66:e1:37:c7:11:f0:71:17:c3:a8:c1:79:
32:9e:fc:b8:e4:41:98:a3:dd:59:cb:10:5f:28:2c:e8:b3:57:
18:bb:89:be:0f:27:e6:38:93:eb:b6:20:c4:99:1e:89:ed:e5:
03:b1:ab:93:2a:b8:f3:c7:b4:da:40:7d:15:f6:b6:a3:a4:3c:
8d:25:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:52:56 2025 by rpki-client