Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: hXHccR/sDBaftD1IXT7SM3ApxIY0GcQyYEN9l/xmt+o=
Subject key identifier: 1A:85:96:43:EB:E6:EA:0A:0D:04:CC:11:D4:75:23:2B:34:CB:39:E8
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 0197B6D7976C2456A1CAABC3CBC4975D4B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: 0it5rjlJENp1ldWCkbZrqzHwdULMpnKPbnsa4/npMaA=)
2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:97:6c:24:56:a1:ca:ab:c3:cb:c4:97:5d:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=1a859643ebe6ea0a0d04cc11d475232b34cb39e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:fb:5c:f6:7e:62:73:78:97:ba:0d:b5:0e:
84:69:8b:86:09:ac:b7:2d:bd:e2:fa:ea:ee:fd:21:
92:16:d7:5a:08:5a:1f:e6:eb:75:16:1b:6d:66:9b:
b6:e8:c4:49:74:c0:8c:33:a1:06:c9:51:a6:e5:d8:
67:2e:25:81:97:e9:4d:ac:61:ee:a2:39:dd:8c:b1:
e2:18:ab:b6:8b:3a:e2:0e:7b:9a:d5:d7:69:76:75:
76:f3:5f:be:55:65:af:40:89:3f:8a:50:60:24:4d:
0f:fb:75:47:24:d6:0a:f0:0b:bb:dc:67:b8:a8:4f:
2c:2b:6a:41:c3:0b:f4:98:0a:21:40:e3:6d:6f:d6:
86:89:99:12:9b:c3:72:0e:67:87:04:26:d5:eb:75:
9c:68:07:56:95:fb:27:5f:9b:f8:be:d4:5a:06:8d:
ed:b3:05:64:97:03:b7:b2:47:89:99:a8:fd:8c:42:
df:5d:00:3e:e2:d7:c5:02:8b:1f:19:12:0e:62:dc:
5e:35:90:f9:1b:95:fc:5d:5d:15:4c:75:9f:f2:1c:
04:a7:76:41:b4:a1:af:02:9b:43:9a:1c:8f:31:d5:
06:ad:9f:e1:06:d1:77:76:a7:9f:20:0f:b2:d6:5e:
f2:5a:f7:bf:c4:4b:bc:0c:a0:90:6e:ee:1b:25:65:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:85:96:43:EB:E6:EA:0A:0D:04:CC:11:D4:75:23:2B:34:CB:39:E8
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2d:fc:d8:39:7f:95:11:42:d9:4e:c5:30:88:ce:e1:fd:01:
23:17:24:7f:40:7f:11:b4:09:ae:c5:04:65:f7:e9:93:db:12:
77:b9:c2:64:58:5f:23:27:7c:d0:ec:18:d8:9e:c1:ff:9c:89:
64:c9:fb:75:49:63:ac:8d:87:f0:57:bd:cd:0d:3e:e5:d3:82:
34:f0:05:94:1c:d5:06:1c:53:90:27:c2:5e:45:cd:f6:ef:7a:
e0:9b:02:ab:83:90:59:a0:4d:62:99:a8:34:f2:9d:5f:cf:37:
d9:3c:24:b1:64:3f:3c:7c:37:8c:c1:9a:4b:2b:27:d2:3e:da:
5f:2f:50:cf:a5:8d:20:aa:cd:c1:c2:58:8d:36:6c:73:a9:64:
a4:c7:0f:fc:2b:65:00:1e:49:4c:d2:e7:ae:8e:3e:96:34:5f:
de:69:82:6b:7c:f7:e2:2f:62:42:be:46:d3:e1:e8:3a:ca:8b:
34:25:34:e8:d3:f9:f8:2e:bf:ec:f9:bf:21:13:16:76:d0:22:
a4:41:49:39:a1:db:23:62:90:bf:d9:a3:81:8e:f2:15:b3:7b:
6c:87:81:19:39:2a:c0:44:e9:3e:f5:51:25:b0:7a:6d:f7:fc:
16:cb:f0:35:3b:84:4b:e4:13:ba:f6:61:cb:be:d7:40:25:75:
e5:34:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:37:35 2025 by rpki-client