Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: +K7Bin/CHtuqf86wRpK7n2D4yidpFopI4eZ5X9f3reQ=
Subject key identifier: 87:3F:02:35:7F:EB:B2:17:4C:CE:12:87:B5:68:19:FB:34:99:41:09
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 0197B7EAD5A10E3852C7415C33736D919436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 0972
Signing time: Sat 28 Jun 2025 19:01:49 +0000
Manifest this update: Sat 28 Jun 2025 19:01:49 +0000
Manifest next update: Sun 29 Jun 2025 19:01:49 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: 3poBc/p+kc1cRF9jaDlL9LP411i9pPPvvUBRwcRlbUY=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d5:a1:0e:38:52:c7:41:5c:33:73:6d:91:94:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jun 28 19:01:49 2025 GMT
Not After : Jun 29 19:01:49 2025 GMT
Subject: CN=873f02357febb2174cce1287b56819fb34994109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:25:50:f2:85:5f:0d:32:8f:a6:67:1b:3c:
e9:cc:23:32:ea:ce:b7:1e:14:9a:86:bc:7b:ad:7c:
35:4c:10:08:8a:a6:b9:ad:26:3e:6f:e3:16:03:17:
af:92:ed:62:92:9d:e7:83:1e:4b:cc:fe:d0:ea:e2:
2c:48:34:95:08:91:ab:cb:a2:0d:a6:a4:c5:bd:bb:
e9:53:9e:5d:c4:34:34:20:b7:3a:ee:66:37:58:12:
1f:e3:b9:3f:5d:b5:20:b7:c6:c5:0f:4e:fb:b2:3c:
18:9a:ad:6e:38:3d:0e:e3:28:f9:52:5d:9a:cd:f3:
b6:3d:83:65:cb:36:a4:64:57:67:63:f3:60:1c:f7:
50:30:c7:cc:4d:f3:28:f7:6d:68:f9:27:96:00:56:
7e:34:d3:c4:e3:f9:24:93:0f:5c:80:39:89:9f:25:
50:6b:29:55:9b:af:4f:26:ad:f2:c7:75:07:3f:4b:
5f:d6:cd:ec:8c:7d:93:dc:3f:9c:84:88:be:82:c0:
de:b8:a6:c8:52:ab:14:d7:98:ab:ec:dd:6a:bd:89:
84:70:61:54:50:7c:28:be:1a:5b:66:fe:3e:38:bc:
e2:b8:89:cd:ff:55:e2:47:bb:0c:6c:5d:d0:5e:f8:
a0:b8:57:63:4e:75:84:55:a7:45:6a:8e:1c:6f:f6:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3F:02:35:7F:EB:B2:17:4C:CE:12:87:B5:68:19:FB:34:99:41:09
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e1:99:49:fb:ef:55:50:91:e7:3a:b1:f5:6d:03:44:cd:72:
15:3d:b3:76:fa:41:bd:97:f7:30:5b:b0:8d:3e:ef:b3:1b:67:
a2:8b:8a:ef:0b:4d:92:80:30:c5:b5:0c:35:b7:2f:5d:c6:b5:
4c:d0:ce:19:52:5d:dd:52:3e:a9:9f:b8:e2:57:bb:9c:a0:e3:
4f:9c:42:fd:ab:b8:d0:24:7e:3d:b3:4a:d7:ae:8f:4e:b0:3b:
3a:21:f8:4f:09:62:94:3c:15:bd:b1:9b:b7:d7:ec:7f:f7:8b:
4f:4c:4c:89:00:69:34:97:54:73:99:b2:77:0c:72:93:8a:fb:
9a:a2:5f:a3:a6:fa:97:10:90:44:02:55:85:98:75:64:55:1b:
44:a4:fe:fd:f6:af:a5:b6:9b:7e:ed:a4:38:29:5e:1c:18:c5:
f5:f8:e9:45:48:33:4e:dd:82:71:8f:51:ed:b1:f7:7b:1c:8b:
36:de:b6:00:ab:31:89:ab:2b:00:73:7a:44:15:6c:37:03:dd:
ef:19:af:99:e8:52:a2:ec:fa:40:a2:cc:48:00:0b:14:4b:9b:
00:f0:0a:05:30:77:43:66:7b:9a:2f:7a:12:bd:e8:a3:65:60:
27:95:6e:9c:b9:08:13:b8:df:55:ea:3d:1e:3b:d7:53:32:55:
5c:dd:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:19 2025 by rpki-client