Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: 7i9iIoxJ0j44JAzol+NKl52INT0i1eteEMEN0ixBHO4=
Subject key identifier: 9E:4F:4C:6F:DC:6C:1C:86:D0:EC:BC:87:1D:6C:89:62:1A:F6:7E:04
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 0197CB39A9D6C40FE5039ABEB09FED61E935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 15C3
Signing time: Wed 02 Jul 2025 13:00:43 +0000
Manifest this update: Wed 02 Jul 2025 13:00:43 +0000
Manifest next update: Thu 03 Jul 2025 13:00:43 +0000
Files and hashes: 1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: AFF8tuzEnRonjCJ13gUDerW83dZ1lyLdZwmXYfxkgUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:a9:d6:c4:0f:e5:03:9a:be:b0:9f:ed:61:e9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Jul 2 13:00:43 2025 GMT
Not After : Jul 3 13:00:43 2025 GMT
Subject: CN=9e4f4c6fdc6c1c86d0ecbc871d6c89621af67e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:31:d3:f0:07:65:ef:e9:6b:64:94:4b:41:
8a:2f:95:fe:5e:3c:64:f6:2b:8d:46:78:35:39:86:
19:80:9c:46:b4:eb:2d:20:c2:71:7c:c9:3e:26:e3:
a0:1a:a0:04:67:81:54:60:4c:ec:ae:e4:8e:61:a1:
1a:b6:0c:c5:50:cb:51:d4:f9:96:f8:fc:3a:f6:be:
cf:b4:7a:12:63:f3:c0:92:72:53:7d:7f:bd:33:16:
a3:73:ef:f5:0c:7c:d9:ac:7b:d7:bf:a6:4d:e4:ed:
63:4f:82:4a:3b:39:0d:1d:b3:17:eb:68:97:72:ff:
7b:61:05:6d:2d:94:c3:06:bf:1c:3f:3f:1e:e8:08:
41:86:09:20:52:33:ed:79:a4:f5:5f:22:13:3c:b9:
a9:55:ff:ef:6c:7a:08:98:91:9d:cd:78:1d:b0:b0:
be:cd:34:d3:b8:09:c2:e4:cf:21:ef:51:83:b8:88:
bc:2b:45:45:86:ac:8b:f4:6b:81:bd:23:9b:b8:a9:
33:8f:5a:4a:f4:16:80:f2:c6:ea:ce:53:0f:7e:cd:
a5:7b:c1:96:89:5c:9b:58:fc:ba:4e:9d:81:97:e5:
97:3a:1f:db:04:c1:6a:c1:37:21:10:e2:7b:aa:4b:
68:59:70:d0:01:c0:25:68:d4:67:1a:40:20:6b:72:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:4C:6F:DC:6C:1C:86:D0:EC:BC:87:1D:6C:89:62:1A:F6:7E:04
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a8:b4:f1:2f:95:23:ad:2c:80:3e:ce:d4:1b:32:90:b9:9c:
6f:a2:94:39:e1:be:7b:7f:da:4e:38:8f:c7:15:f9:66:80:c1:
05:bc:eb:ca:58:37:a5:f1:76:50:33:29:e5:ee:85:f8:72:f5:
2f:4f:39:0e:59:5f:7a:c1:f4:5f:91:1e:b0:e0:b4:05:96:7d:
bc:14:ea:96:60:24:f0:f0:32:a9:9f:2a:4d:e9:25:3e:5b:86:
92:15:5d:a9:81:6c:91:18:5e:e8:2b:df:49:e4:08:b0:30:bb:
c5:5d:89:56:67:43:66:3d:de:77:57:44:80:3e:4f:bd:9b:69:
8b:f1:ad:e9:8c:c4:1d:f8:74:af:0f:49:ce:f7:70:8c:90:9b:
f8:fd:e9:29:5c:0f:e0:31:fd:b6:2e:d4:65:ac:d0:b7:31:3a:
1e:6a:69:e3:f2:3d:38:55:33:68:9c:75:6a:38:ec:b9:7d:6e:
2b:8e:b7:f2:c6:90:da:8e:db:b0:9f:66:d9:89:be:e0:60:cb:
6f:4c:ad:2a:bf:02:fc:fa:e1:fa:3c:79:1e:22:06:00:3a:fc:
79:af:cc:26:16:51:89:5a:81:f7:82:54:1b:e4:7d:aa:e5:97:
ae:06:cc:07:c6:32:0a:d3:c5:05:56:c3:02:4d:fc:c4:9c:77:
6e:8c:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:21:03 2025 by rpki-client