Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: 7939VU5E7ONnrCYZfSafHYlUNZE3jLrvzsWkwfNDYiY=
Subject key identifier: AA:4C:2D:F1:F2:FC:21:D0:13:AD:D3:3A:D0:3B:49:B0:A5:2F:BE:25
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 0197B7EA75430F50BF1808F242C2B36976B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0D66
Signing time: Sat 28 Jun 2025 19:01:25 +0000
Manifest this update: Sat 28 Jun 2025 19:01:25 +0000
Manifest next update: Sun 29 Jun 2025 19:01:25 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: LLrBSrGrLw7yfx9sTh0ooTPs0w/WfKs7ERoN3FmdHGI=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
3: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (hash: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:75:43:0f:50:bf:18:08:f2:42:c2:b3:69:76:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Jun 28 19:01:25 2025 GMT
Not After : Jun 29 19:01:25 2025 GMT
Subject: CN=aa4c2df1f2fc21d013add33ad03b49b0a52fbe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:fd:75:26:ba:f0:50:c3:85:52:1e:48:0d:
fc:95:2d:71:9e:46:d0:a4:48:bc:54:6a:36:fa:27:
ad:35:5b:8b:2d:3e:a1:83:3a:3e:ee:b3:2a:1a:3c:
67:96:b7:06:3b:e4:f5:f7:d6:19:fa:f2:8d:48:c1:
9e:13:96:3e:c5:d6:c6:be:c2:c9:40:60:5c:f2:b6:
1a:0d:cc:2b:8d:81:97:bf:28:46:ea:b3:cc:30:ae:
10:27:74:7a:c4:1f:03:4c:05:65:58:6a:37:09:51:
98:e4:fe:4c:9d:61:6a:98:38:af:79:ad:f9:cb:2b:
a9:d4:d7:69:4e:66:03:a3:12:48:c7:79:83:26:38:
10:80:1d:b3:9d:d7:c3:16:6d:0f:9f:6f:d6:8e:49:
7e:e9:6d:ac:40:39:99:1c:1b:61:0e:0c:1e:eb:0b:
16:ac:d6:be:a2:be:af:f4:64:cc:31:3a:51:24:58:
a6:5c:bf:98:d2:cb:48:7d:90:79:04:20:dc:34:84:
97:9f:31:ce:a6:09:08:b3:ed:cd:29:7e:7f:58:1e:
8b:18:17:a0:ee:42:95:65:42:1e:ff:75:5a:77:e0:
60:6a:a0:c3:ee:a4:f2:87:0e:09:e0:55:45:fd:4c:
0c:4a:97:ca:30:80:8b:01:54:b5:c5:36:93:a7:f5:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4C:2D:F1:F2:FC:21:D0:13:AD:D3:3A:D0:3B:49:B0:A5:2F:BE:25
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c9:f8:4b:83:98:94:c6:52:b6:6f:09:64:50:55:6d:58:71:
8f:2f:8e:67:c3:91:d5:58:da:e8:7c:51:7e:81:8e:cb:4a:39:
af:9f:b9:18:8d:ce:4b:c6:6e:dc:d4:6f:b6:ec:0d:82:46:19:
19:95:e9:64:89:f6:c5:44:0d:57:34:f5:0e:96:5c:4d:d3:bf:
83:c1:5d:dd:a5:f3:db:05:c3:74:df:82:b1:c4:f0:43:4c:ce:
ba:0a:dd:cc:a3:4f:4e:a6:4b:25:18:46:85:17:55:34:3e:e7:
e5:e5:0f:7a:86:b2:14:f3:9d:15:2b:bd:a7:e9:9f:cb:01:31:
63:33:1b:87:e2:e0:a7:f2:67:4b:48:7a:ca:10:e4:e9:87:19:
1a:b6:21:8e:62:6d:17:15:ab:23:47:9a:49:39:90:fe:85:fa:
32:f9:18:25:76:ea:4a:0b:9b:4a:88:ff:bb:a0:88:7c:91:e8:
fc:d1:45:d0:93:aa:a9:30:58:c0:9c:95:17:92:4c:6b:4d:cc:
da:f3:c2:aa:87:0e:cc:98:dc:65:34:9e:a9:a1:23:b9:2b:b3:
76:9b:12:4c:b7:c7:1f:4f:eb:68:74:96:72:01:f9:ca:d9:bf:
a8:7f:11:2b:43:fb:2a:b4:82:ad:22:ce:3d:bf:45:57:e4:c2:
4c:f7:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:47 2025 by rpki-client