Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: 3HrPBvi+2ERdJlxoW0kntilz7YRFf3P+RCpLlINQQeo=
Subject key identifier: B0:36:D5:54:7B:17:C6:1E:8C:DC:92:10:38:53:EE:17:49:84:AE:99
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 0197B7EA3DD8C9AF6D1334498783A3EA452C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (hash: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: TakGKo0E04U581OaVlro4P+4oVXlrAldi/5Y+D9fKUU=)
3: ppz_ybM7ufAfixh6_nP_nmJDmHo.roa (hash: aAOlU7YV5ghrEJxtxwQBWQh09ipgQ4F/4mZelsxTGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3d:d8:c9:af:6d:13:34:49:87:83:a3:ea:45:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=b036d5547b17c61e8cdc92103853ee174984ae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:7e:46:28:6a:5c:5a:cb:d5:88:11:d6:84:
df:43:7f:dc:d5:94:46:36:96:0e:1e:2c:29:8e:88:
fe:93:a8:a9:79:54:b7:a8:29:5b:51:b6:74:6a:d2:
b9:0e:84:93:e0:1c:53:dc:5d:b5:77:85:1b:5e:60:
62:0d:ee:66:0e:43:a5:44:42:ae:e4:ee:b9:fb:61:
2e:b0:d5:1a:eb:87:c0:9c:a9:38:a3:4e:3f:22:96:
be:62:98:e4:b2:c2:11:1d:1a:c3:01:d8:a4:e2:70:
08:1a:04:eb:1a:91:b2:4a:69:20:85:7f:6d:13:b8:
c1:3d:da:35:ad:e9:d0:19:a3:7a:cd:a4:76:f5:6b:
60:40:f4:74:3a:ad:5f:9d:08:d9:13:a5:63:d1:af:
88:45:59:b8:4c:95:15:c9:bd:0f:32:43:51:bc:fa:
f2:b7:b5:0a:db:05:21:0a:fc:e7:de:09:e0:1f:fa:
e2:57:a5:03:56:c6:bf:fe:6b:87:3e:84:96:1e:fc:
1a:2c:ed:28:b0:78:13:19:ab:39:8b:fa:96:c3:ee:
9b:a1:46:eb:82:f9:a6:6a:68:12:74:7b:d8:3b:66:
40:87:f6:65:bc:0b:de:30:4a:3b:13:87:e8:78:98:
6d:85:f7:3a:61:62:38:ba:cd:23:25:92:68:5c:ba:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:D5:54:7B:17:C6:1E:8C:DC:92:10:38:53:EE:17:49:84:AE:99
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e6:9f:53:56:c8:06:c2:36:d5:ec:bc:df:9c:cf:0a:3f:e3:
26:b0:f9:b8:a1:34:4b:f4:05:d1:e5:fc:b5:2c:64:54:4b:ad:
a9:54:8c:b8:4b:64:9e:8a:04:0d:6e:09:e5:c3:2a:69:49:8b:
e6:eb:9b:91:3c:b6:81:0e:85:bc:fc:bd:29:0b:47:34:96:87:
6a:a6:ee:9b:30:47:4c:d7:2e:e9:a3:e5:aa:ce:0c:f2:a8:89:
33:93:da:14:fe:99:29:a8:14:ca:4c:72:d1:b1:ba:9b:35:2c:
22:c8:9f:6c:41:de:d9:26:a9:ca:4d:e9:a5:29:54:4a:46:bc:
a5:a0:26:de:b3:15:39:25:12:66:42:0b:2d:bd:f3:cb:23:01:
4e:58:1b:67:07:5e:29:e4:6d:a9:64:67:9c:bb:d0:42:ee:f9:
16:38:d3:2f:b9:5d:d3:a0:d9:6b:eb:12:ab:cd:16:7a:70:64:
ca:00:ea:ca:a0:e0:b6:c2:b6:96:8c:3d:2c:ed:a2:6e:ed:71:
18:0a:ba:0a:5d:56:1d:d5:b4:45:2e:f9:cd:b2:7d:72:4b:57:
3e:3f:44:7c:64:a3:c6:30:20:bd:d4:b6:9f:e6:2c:00:f3:75:
77:c4:8c:e6:6d:79:4c:77:78:84:44:4e:ac:93:0e:52:95:6f:
50:09:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:54 2025 by rpki-client