
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: mbRv7vnnZr+m+/6qlb58qdL6CAO382LGiovCdXQiROU=
Subject key identifier: 1E:12:D7:3F:73:1C:30:8C:48:E2:71:61:D2:37:2B:C9:A3:3B:38:61
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 0197C64ABF420D2BE7B8EED8A638560228D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 0718
Signing time: Tue 01 Jul 2025 14:01:16 +0000
Manifest this update: Tue 01 Jul 2025 14:01:16 +0000
Manifest next update: Wed 02 Jul 2025 14:01:16 +0000
Files and hashes: 1: U15Qt1jB_OrSJnk2-GsuZxl_HGg.roa (hash: ViBEGhLSRDySzjvRDBVQx2K1SB4Zl4Aix1chhJ6C9AM=)
2: gHPWHyifWHwygl6RXc-S_BViAv0.roa (hash: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: U6WdhofVwHUcy84FyEyhGVL4IEuLLgCa7hQM2DxRz6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:bf:42:0d:2b:e7:b8:ee:d8:a6:38:56:02:28:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Jul 1 14:01:16 2025 GMT
Not After : Jul 2 14:01:16 2025 GMT
Subject: CN=1e12d73f731c308c48e27161d2372bc9a33b3861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:eb:ac:7d:e0:b0:1d:29:c3:54:d6:cd:5a:
d4:90:36:7e:41:cb:5f:88:cc:b8:1e:7b:92:3c:13:
58:85:fa:10:bf:65:b3:5e:3e:d4:5e:30:36:92:c9:
58:f9:77:5e:97:ae:05:16:05:92:c5:1d:c7:66:d6:
53:c2:9a:7d:f4:10:40:af:a7:23:0c:e6:ef:9c:93:
82:18:bf:81:7c:50:56:d6:d8:9d:67:d1:93:c5:0f:
49:16:49:9c:c9:1f:3e:c1:5e:e8:26:b8:6d:e1:53:
5e:71:4f:d3:89:ac:c8:95:53:39:13:fd:fc:1d:37:
6e:5f:d5:c5:44:97:64:ea:42:0b:76:a9:ad:1f:85:
0f:3f:7f:b8:d1:b0:0e:4b:ee:9d:6e:47:44:90:84:
2b:ee:67:9e:07:71:fb:77:61:83:39:fc:4c:a2:56:
9d:48:dd:3f:00:9a:e5:b3:8a:fc:d9:45:c9:0d:8d:
4a:d4:38:cf:58:d6:5c:2b:5b:2a:f1:09:a2:70:19:
22:ae:91:ee:aa:f3:89:98:2e:16:76:15:c5:06:96:
8f:5d:eb:1b:c7:ff:7b:6d:ca:7c:e8:fe:93:5e:37:
d2:b8:e0:e7:cf:17:62:67:66:f7:02:44:d2:64:2d:
9e:41:69:c3:63:ab:b2:1f:96:ed:75:24:b0:e8:d2:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:D7:3F:73:1C:30:8C:48:E2:71:61:D2:37:2B:C9:A3:3B:38:61
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a6:b9:c1:da:2b:27:03:51:88:b2:44:e3:ec:e8:68:16:8f:
a5:1f:ea:8e:7a:46:50:4e:4e:8e:4f:ee:4a:57:66:9f:15:00:
0d:26:95:ff:99:67:f5:ed:d6:a7:d4:fe:a9:1c:31:54:6c:b2:
1e:94:48:0a:bb:d5:07:2a:90:f0:da:b7:b2:91:f4:6b:b1:88:
ff:01:92:86:75:4f:b7:53:c3:0e:96:69:18:cf:33:92:fc:e9:
28:bc:5e:ce:06:59:87:c4:56:61:e6:e6:9a:ef:54:12:c8:d1:
54:2b:3b:4e:e8:ae:a2:e8:78:da:87:2d:6a:5f:d4:5f:4d:1f:
3f:b3:eb:fe:1c:7e:09:d8:5c:fc:9d:30:bd:15:92:40:b7:3d:
7c:5b:9f:e6:5c:56:2c:81:29:86:e1:5d:30:17:10:98:12:52:
98:3c:ce:56:4d:7e:de:28:5f:df:c9:cd:b9:24:df:f0:5c:90:
15:e8:87:32:8d:b8:42:c0:ac:5e:1a:18:6d:57:71:87:23:3c:
93:77:c1:41:ce:5c:0b:54:73:7e:f2:ab:9d:46:ca:08:c3:80:
d3:21:c6:c2:f8:cf:5f:19:d5:fc:43:f9:25:06:e0:62:72:5f:
73:59:cc:38:03:df:73:9d:4d:d3:e0:b7:a3:6c:62:07:4f:96:
ea:24:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:48:00 2025 by rpki-client