Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: ZK0JG4nbxiGTJP9y6Sry/7zd6wZDaGizoutkZcu+IuQ=
Subject key identifier: 8B:83:32:0F:A1:08:DA:BC:28:FF:83:99:C5:83:AD:8D:6D:1C:39:2C
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 0197B6D78FFE55AC77152E9DDF393980A637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:01:09 +0000
Manifest this update: Sat 28 Jun 2025 14:01:09 +0000
Manifest next update: Sun 29 Jun 2025 14:01:09 +0000
Files and hashes: 1: PcG8Sq5FdbAe30rm_n_GcaQonsg.roa (hash: Bm8FQyjRUmW9/pGMLb92kJbH7eLAq4FPc7+Cd5r6swA=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: 6JZwmr7SVJ5P63s5gnYZaB4j1SVDS40UNsxU5YBWp94=)
3: vCyJ_4gbyrukZoytmDIUJKLGPq0.roa (hash: MURqYSpROMIIkoPGoMUJ5DUudVIqQ91/GFdxEyduads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8f:fe:55:ac:77:15:2e:9d:df:39:39:80:a6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Jun 28 14:01:09 2025 GMT
Not After : Jun 29 14:01:09 2025 GMT
Subject: CN=8b83320fa108dabc28ff8399c583ad8d6d1c392c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:6c:f8:63:c9:25:32:df:9b:22:ef:a5:63:
dd:71:9b:54:fd:51:79:49:40:9d:50:e7:6d:37:9a:
7b:5e:8a:54:11:6f:7e:50:76:84:4c:fa:59:c8:0b:
b0:94:ac:25:c3:65:fa:24:67:8d:1c:eb:6f:16:39:
b4:88:8a:e8:24:d3:1a:18:f5:a1:b1:b9:84:f2:d4:
59:d6:85:47:e0:f4:ce:cf:a5:c8:0d:a5:a9:34:6c:
08:d4:90:55:a5:dd:a7:20:94:8e:98:e4:09:d4:a6:
51:89:20:eb:04:09:2e:79:c7:b0:04:3b:cb:7d:d7:
43:ec:a7:a9:3a:41:7b:b7:ec:e4:e7:7e:38:31:a9:
af:ab:7e:24:2d:2b:5d:e9:80:0d:f8:e6:1d:9f:8c:
d2:fe:0b:36:24:1b:3c:1e:cb:13:26:1d:0d:6f:82:
5b:f3:53:f3:da:32:7e:66:94:7f:57:4e:c0:2c:92:
ed:05:b5:52:6c:f5:f1:6e:80:13:e3:75:91:7d:1e:
4a:06:28:ed:f8:97:3d:29:d3:ed:e3:84:6a:8b:bf:
43:b3:0f:84:e8:e4:7b:d8:6c:2f:c4:f6:fc:6f:96:
b8:07:fd:ae:1f:f3:fb:c6:f2:10:09:01:a6:87:b0:
0e:93:a8:71:0e:fd:27:08:69:e2:ab:d7:0a:ba:ed:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:83:32:0F:A1:08:DA:BC:28:FF:83:99:C5:83:AD:8D:6D:1C:39:2C
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:37:79:18:85:28:42:ef:77:e8:6f:51:b0:6b:d4:0d:7f:ff:
57:f7:c4:11:70:bd:f9:09:81:40:30:8b:79:32:45:7f:ec:c7:
c4:c3:80:6c:34:22:40:0a:2f:b0:77:e3:51:36:6f:1b:1b:3c:
a9:1b:9a:00:89:53:bd:7b:ee:be:bb:e6:6a:ce:62:5a:14:5e:
79:e2:0c:7e:a8:8e:3e:13:24:f6:38:7b:0f:45:fe:d8:27:ea:
62:5e:ac:e7:dc:26:ce:d5:40:15:fa:2f:a8:d7:11:bd:b8:4a:
be:b7:5d:97:e0:16:2f:a2:66:11:d0:02:50:45:57:c9:ea:80:
84:23:fd:bf:f7:14:81:5b:6c:e2:7c:2c:84:89:e4:73:cd:47:
17:b4:68:7a:b5:e7:5e:69:1e:4c:06:c5:5f:7a:de:ee:ba:8b:
f4:d5:04:23:41:f4:c5:d0:34:b1:0c:3c:a1:cc:b1:7d:3b:98:
ff:ab:87:5a:c9:4a:bd:81:83:45:f3:a8:ed:c5:43:a6:79:80:
ff:03:58:68:73:68:e2:a8:40:59:c5:12:46:84:b0:15:d1:69:
ad:06:4f:96:ca:91:f8:35:b7:81:32:dd:1a:45:49:e0:0a:2c:
4b:6d:fe:bc:5c:e6:ba:04:fd:20:0d:e1:db:b6:13:a3:c8:84:
a1:25:7e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:22 2025 by rpki-client