Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: +g9q/zPGyi98hJBoKsdoZIYkNK9+ofsin6BxCog+Bdk=
Subject key identifier: 1A:1A:A2:D4:D6:2A:D3:BF:9A:98:31:6A:E1:DA:25:14:EB:F1:DE:E9
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 0197BA7DBA028EC0296D7DF58DFF95075147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 0FB1
Signing time: Sun 29 Jun 2025 07:01:31 +0000
Manifest this update: Sun 29 Jun 2025 07:01:31 +0000
Manifest next update: Mon 30 Jun 2025 07:01:31 +0000
Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: JjI/zFzpAxexmlXfOdhL1cArj83ybnLMvRsyWaJFJsE=)
2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:ba:02:8e:c0:29:6d:7d:f5:8d:ff:95:07:51:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Jun 29 07:01:31 2025 GMT
Not After : Jun 30 07:01:31 2025 GMT
Subject: CN=1a1aa2d4d62ad3bf9a98316ae1da2514ebf1dee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:d1:52:0e:fa:57:71:66:66:0c:38:9a:0f:
d7:d8:c7:4d:4f:a1:26:87:ce:5f:ff:68:6f:85:20:
10:10:17:49:bf:b6:8b:e9:c5:f8:73:22:4a:33:42:
14:ee:8e:d1:6c:00:21:c1:c6:dc:39:14:25:20:fc:
65:91:0a:6d:ec:46:44:04:5d:8f:f8:85:22:4b:c7:
75:1f:71:50:a7:ff:50:57:a9:a0:c8:cb:16:b6:5c:
2c:67:b5:8c:33:96:5e:fb:27:ee:17:49:28:05:85:
2b:80:7e:ca:4a:cb:98:2a:e1:1f:f5:e4:0b:0a:cc:
db:64:0e:ad:f6:ec:6f:8a:27:65:38:73:ef:8f:49:
a7:7b:d2:66:27:56:b6:8d:58:ec:bf:4b:05:ce:22:
15:97:21:69:4c:14:f1:aa:35:f7:85:d0:0e:7c:06:
8d:8f:15:5c:cd:7b:9d:3b:58:a3:13:63:e4:87:dc:
6b:13:55:67:24:b5:0f:a2:2c:26:10:98:33:24:cd:
2f:79:1d:1b:53:25:94:2a:47:e3:d3:89:44:51:a8:
d7:8e:31:32:03:7b:6d:c7:28:67:7f:f9:f5:e5:0d:
2f:ae:42:7a:e9:54:ff:c8:c6:69:59:64:d5:be:25:
9b:01:96:01:ba:16:26:83:35:ca:c3:f1:21:b6:13:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1A:A2:D4:D6:2A:D3:BF:9A:98:31:6A:E1:DA:25:14:EB:F1:DE:E9
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:47:fe:68:e5:53:46:5e:04:0f:fe:d8:1f:28:f2:4b:00:
a2:52:6d:b8:3f:07:b9:9e:7a:c8:e0:f2:42:aa:38:d9:7b:05:
54:84:92:42:5d:92:ce:c8:0f:4c:a9:41:94:76:4e:2a:f3:2d:
02:d9:c4:1b:2f:08:67:96:1e:8f:67:7c:9b:cd:8b:87:cf:80:
fb:5f:4c:61:ef:2f:84:80:36:0f:39:dd:bc:00:5b:81:de:dd:
ca:1f:66:48:3c:29:27:54:55:42:3e:dc:7d:2c:22:53:6e:0b:
4b:51:3d:39:6d:6b:c4:52:ba:4d:28:2b:52:4c:2d:d4:b0:a4:
40:07:10:ec:5a:ab:e8:5b:5d:3d:98:00:b9:99:0c:8c:28:83:
71:12:af:72:7b:5c:52:67:b2:6f:48:1a:4c:4c:89:d2:ef:63:
77:42:ca:43:f0:a5:76:db:13:e9:22:3f:43:53:b8:9f:4c:96:
e6:f6:6d:18:03:61:d0:3c:23:3a:c5:29:b9:0c:a1:69:40:6e:
a0:94:e4:36:9a:f7:c5:80:8b:8e:55:bc:fb:91:d7:17:22:9b:
8d:2f:1c:b9:ca:4f:4c:71:b6:cd:8d:02:31:45:81:61:a2:93:
be:ca:b6:a3:69:93:f9:90:bb:b4:d7:c3:92:09:cd:34:4c:2e:
86:d7:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:48:34 2025 by rpki-client