Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier: +2aYu/3upyzAamxn4tevgaa2MFLw09ZNZ7PX+IDzej0=
Subject key identifier: 36:AC:5F:52:D7:18:87:55:08:C4:BA:8D:A6:C5:3F:16:E9:E9:E7:77
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 0197B6A21F5BCAD99342E320F355230E56BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number: 028E
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: fh5W6TD2pYyq1sF5qieENK6qpY9n6oAW06IwF+Nbvyg=)
2: KKovPP5k_vOQvmKc7t5x14I_gos.roa (hash: xTSJVhmS95WWwOtUsvBgdC5iNk4sqmcitObjOn9r3l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1f:5b:ca:d9:93:42:e3:20:f3:55:23:0e:56:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=36ac5f52d718875508c4ba8da6c53f16e9e9e777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:e8:33:72:82:75:10:3b:6d:09:96:13:7d:
cd:7f:e6:27:c8:0e:70:24:c3:6f:7b:a0:4a:53:ec:
96:ca:cc:19:12:12:07:60:f6:56:cb:74:70:ce:a2:
75:bd:0b:c9:33:a0:1d:ef:46:ab:2c:e5:33:cc:d9:
d3:2e:dd:4a:22:21:13:17:dc:74:80:37:ce:7c:e9:
1e:c5:61:6f:dd:59:a3:46:a9:49:f5:e7:21:93:7d:
3f:87:a0:6c:7f:b5:7e:38:6d:4d:0b:89:cb:b6:2d:
d9:6e:6a:e0:3b:47:eb:43:0e:17:ba:06:59:63:fe:
58:3e:3a:33:22:2a:7d:24:3d:0a:de:6d:69:0c:35:
2b:6d:6c:21:8e:fc:7d:9f:5a:fc:72:f9:31:f1:f0:
0e:31:2e:45:ab:c3:55:9e:a4:59:13:f6:0c:ee:9e:
f2:1d:18:9a:f7:dd:35:47:82:9a:ce:7a:f1:4a:fb:
b4:6f:7e:eb:cd:e2:50:67:5e:d1:cb:f8:97:17:62:
05:04:64:8e:62:93:6a:11:59:8e:ce:78:85:d8:a5:
42:f5:0c:4e:de:4c:43:7b:d3:b9:cb:e5:1d:a1:1f:
48:c7:00:8d:7d:df:6d:85:5a:0b:8f:ae:69:8a:da:
61:7e:cb:21:e3:cd:d4:8c:d1:4b:51:b2:49:03:95:
3f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:5F:52:D7:18:87:55:08:C4:BA:8D:A6:C5:3F:16:E9:E9:E7:77
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bc:f1:92:42:83:65:ea:b0:a0:05:ef:bc:d6:6f:a2:3f:2b:
09:a7:bf:d3:8e:87:2e:cc:22:7b:a7:fe:40:3f:ac:22:fd:3f:
77:b5:27:95:28:5f:27:cc:62:46:c8:40:7c:8d:da:38:09:80:
5e:86:e4:f4:96:9e:26:4a:bf:23:8d:be:bc:54:62:78:f5:d7:
f4:5b:5a:e7:60:24:d6:c9:7d:09:41:c9:a9:3f:fe:e2:c3:33:
a2:69:3c:46:80:30:c0:1a:0e:ca:31:27:d6:46:dc:e8:d7:7e:
53:28:49:6d:8c:67:71:d3:71:2d:81:4b:f9:f2:97:ac:b2:57:
82:64:a5:19:47:41:3d:86:8a:28:bc:8c:16:3d:fc:68:87:5c:
d8:c8:92:d2:ea:10:82:8b:7d:b8:34:7c:eb:5a:06:6c:e6:42:
44:e1:ef:62:fe:d5:5d:c8:18:78:e3:fd:34:3e:64:80:41:bc:
06:4c:35:d9:56:5b:57:a5:bb:1b:19:92:b7:9b:91:07:3a:d1:
ce:23:78:27:c6:b2:43:65:1c:57:e3:8d:a7:28:d0:34:05:07:
37:ac:2a:47:4c:19:d2:f0:43:4f:75:2a:2c:50:29:d7:b4:52:
ea:5f:bf:16:cd:7d:f0:40:82:b7:98:37:cf:af:aa:fa:80:70:
ae:60:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:35 2025 by rpki-client