Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: RPJ7d9LT0Pe9UHZqwz1n2own+QlT+h4oA1EX50PlBY4=
Subject key identifier: 57:CF:E7:45:EE:12:F6:5E:96:9A:14:63:F3:95:D6:62:5F:0A:50:3D
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 0197B933C0B0E05701B2AE1646A3E7E75499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 08F9
Signing time: Sun 29 Jun 2025 01:01:06 +0000
Manifest this update: Sun 29 Jun 2025 01:01:06 +0000
Manifest next update: Mon 30 Jun 2025 01:01:06 +0000
Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: 7EgdC7urkBjlk16srPETcGad6d2vN1eSLKwLuAc3518=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:c0:b0:e0:57:01:b2:ae:16:46:a3:e7:e7:54:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Jun 29 01:01:06 2025 GMT
Not After : Jun 30 01:01:06 2025 GMT
Subject: CN=57cfe745ee12f65e969a1463f395d6625f0a503d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:a2:0c:9f:c3:26:67:bb:cd:55:f1:2f:e1:
c1:dd:77:41:c6:5a:c9:0c:fc:9d:f0:3f:00:f8:88:
53:ee:7a:21:c1:7d:28:d6:a9:cd:69:dd:e1:b7:71:
50:fd:c5:42:87:ea:48:e3:75:cc:bb:10:a3:fa:9c:
bc:d4:82:cb:65:18:77:da:d6:f1:aa:ad:bd:96:1b:
dc:5e:01:94:23:fd:d9:ac:e1:53:28:ef:94:cf:4b:
4e:48:1c:bd:3a:fa:66:26:3d:e9:06:49:5c:b5:f7:
62:81:63:e9:ba:ed:fd:e1:9d:ca:61:c3:14:71:c3:
ad:81:aa:03:b0:ff:d1:50:ba:9b:db:cb:b8:cd:88:
4b:0d:bf:52:7c:4d:57:19:98:8d:fd:95:c9:d9:9b:
5e:11:96:a0:2a:86:33:de:e8:56:2d:81:20:60:44:
f2:4b:37:74:02:02:52:b1:48:a7:97:ce:b4:19:a8:
c6:55:05:76:b0:bd:c4:f0:24:bf:80:05:72:e1:5d:
98:c9:1a:ab:5c:6a:b7:ee:2c:4d:35:82:18:98:05:
f8:c2:8e:ea:8c:7c:ed:27:dd:8c:ed:83:4d:28:9f:
59:dc:7f:71:ba:d7:ab:e2:eb:e2:b8:ef:88:76:d4:
52:93:53:fa:39:1d:ef:2c:8c:ce:4d:25:90:ad:22:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:E7:45:EE:12:F6:5E:96:9A:14:63:F3:95:D6:62:5F:0A:50:3D
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1e:8b:88:0f:8e:01:35:a6:6c:83:34:11:66:9f:d8:56:19:
26:1c:63:f0:ce:8b:0c:87:a6:9f:e1:47:2a:7a:b4:e3:13:1d:
4c:ca:08:79:85:4e:ed:91:1d:54:ce:6c:51:8e:9e:ca:76:4d:
43:97:c1:74:8b:c7:d0:2d:54:3f:21:d6:9a:41:d3:85:21:c4:
3c:cf:9a:f0:4d:dd:ce:35:ef:14:91:e8:e5:68:c0:83:24:ce:
ec:ed:09:3d:92:2c:27:8f:ab:38:5e:0a:c2:26:17:32:eb:b5:
15:98:f1:53:b3:74:04:ce:0b:1f:b7:4e:cb:a5:6f:49:e4:eb:
24:e3:6f:4c:2b:4b:c5:9f:2f:2a:c8:3e:b7:09:93:7b:2a:7e:
01:0d:1a:e7:92:22:ec:a1:25:1b:a2:a5:67:c6:12:1f:74:ef:
41:08:71:db:cd:e6:3e:35:10:2c:2a:5e:17:f7:86:4a:fc:16:
62:c7:a9:1e:7d:74:2a:2f:fb:54:f6:b7:1d:36:fd:2e:c2:c3:
f4:48:0c:e1:e7:e9:b3:f6:bc:7a:74:88:67:69:45:a8:4a:b9:
2b:e3:f0:ea:df:2d:e1:c6:fb:26:bc:0c:22:95:04:ff:f1:b9:
c4:d4:32:b7:ee:f9:62:39:8d:5b:5b:ad:71:26:d8:9e:d4:fd:
f1:2a:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:43:21 2025 by rpki-client