Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: GybZIPLY++dphSNmRFbtRneHtZdTYfwRtzn77UQZawg=
Subject key identifier: BF:8E:45:B6:C9:05:42:88:AC:22:CF:C0:27:69:39:55:DD:22:DE:10
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 0197B5FBCF35F6EDA4EF0C39BAAB48632D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 1296
Signing time: Sat 28 Jun 2025 10:01:07 +0000
Manifest this update: Sat 28 Jun 2025 10:01:07 +0000
Manifest next update: Sun 29 Jun 2025 10:01:07 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: tYaaTRd4yC59g+cLZdD7lFU5pfalHBX8eg7m9fOZ3po=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:cf:35:f6:ed:a4:ef:0c:39:ba:ab:48:63:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jun 28 10:01:07 2025 GMT
Not After : Jun 29 10:01:07 2025 GMT
Subject: CN=bf8e45b6c9054288ac22cfc027693955dd22de10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:1b:5f:fa:45:38:fa:82:07:70:bf:06:86:
62:67:69:f0:44:f8:96:33:9d:f3:97:89:8b:ea:2d:
c5:21:5a:5e:f8:80:f9:a8:bd:a3:e7:5e:7a:93:31:
e5:0f:3c:28:c2:26:97:85:43:e0:aa:f9:f3:2a:3c:
a2:db:ba:8c:6e:a3:67:e7:50:53:90:2a:bc:6b:cf:
44:74:c7:cf:49:fe:a5:d7:4b:3c:8a:0e:25:4f:ba:
3f:19:c1:88:9c:84:45:68:05:99:1e:18:2a:ea:b6:
32:b3:fa:4f:c2:48:e9:f6:11:0b:ad:e2:20:b8:3b:
de:46:44:4f:19:02:87:58:a7:78:d3:04:48:f5:1f:
9c:5f:8f:b3:89:2c:bf:ea:5e:b7:ae:80:62:a4:30:
f9:df:83:21:79:da:f6:dd:af:35:0d:4a:2e:c2:35:
bb:98:c7:ec:ce:5b:51:55:be:41:c3:03:69:80:fd:
c0:85:03:9b:5d:df:5b:07:da:83:47:bb:1d:46:1a:
2f:33:4c:89:67:f2:44:12:22:99:27:26:00:0b:74:
d3:1b:aa:e3:07:28:cf:26:16:97:cb:12:db:18:54:
9b:10:01:70:89:02:14:61:11:7d:87:7d:4a:2f:b4:
08:c8:a0:2c:bd:e1:0b:ce:c4:9b:48:5b:36:55:3a:
9e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8E:45:B6:C9:05:42:88:AC:22:CF:C0:27:69:39:55:DD:22:DE:10
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b2:c9:44:cf:1c:b0:b8:51:25:8f:cf:71:77:50:24:98:11:
cf:9a:ea:da:5c:00:18:5e:d8:8f:4b:a0:2f:9b:df:3d:e4:81:
8e:92:63:13:79:3a:f8:d8:a9:40:82:63:1d:22:40:20:a8:fa:
a7:91:ca:18:07:bb:9a:0c:1f:31:e3:94:55:f9:11:0f:ac:b7:
c5:f4:11:95:f6:ff:a6:eb:c8:8e:df:09:c3:0a:43:b7:7d:32:
55:0c:89:52:a8:f2:86:7f:5d:39:b8:3c:b6:e1:4e:ea:d1:4b:
a5:98:53:dd:4e:59:70:94:d1:3c:f2:b6:5b:3f:81:ea:a6:2f:
9a:5d:e4:eb:e2:a3:ac:d5:76:c4:15:55:25:10:8d:91:ae:bb:
c9:e6:71:45:c7:25:f6:52:a7:1f:9d:c1:1e:4a:b6:9d:fa:c8:
97:d4:d3:a8:19:23:84:11:ed:f0:3d:2a:aa:27:cf:60:cb:f5:
97:ab:be:fc:c9:8a:05:2a:d2:b9:71:2c:aa:66:cb:92:dc:d6:
45:27:e5:18:bc:17:a0:b2:5c:02:c7:9d:81:57:90:84:a4:d0:
73:c0:1a:d7:57:8c:35:57:7c:14:1a:68:30:66:aa:4e:fb:1e:
c1:1f:74:72:1a:f5:ff:3b:e5:14:60:f8:58:7e:88:9b:1d:87:
16:92:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:14 2025 by rpki-client