Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier: +r66JV2dnAUfZ5yAEreGIhagcVFS/2wwBbx0JhVN868=
Subject key identifier: 9D:EB:58:CF:D2:31:D4:7C:A6:00:AA:79:EB:50:E8:37:FE:3E:0D:8D
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial: 0197B7450A47D8855FB3DA7FB5541541D4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number: 0965
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: zXMaqmoEgHu4ULPN9aDddJ5gEUdzvkTa8ZdP7p2UeSQ=)
2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0a:47:d8:85:5f:b3:da:7f:b5:54:15:41:d4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=9deb58cfd231d47ca600aa79eb50e837fe3e0d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:45:36:08:98:80:a9:5e:34:be:f7:2b:d4:
40:03:cc:85:8c:9b:1c:27:64:2d:93:46:45:a9:ae:
75:2a:26:37:08:1e:42:b6:88:32:81:e7:be:3f:6a:
79:fe:69:51:c1:5f:ea:01:ab:63:ce:68:8c:6c:48:
d4:6b:59:9c:0b:5f:05:68:dd:20:5f:c5:11:b5:f7:
11:a3:5c:75:79:f9:1b:13:dd:9e:68:7d:2d:92:bc:
0d:c1:15:a0:0a:c7:ae:3d:84:a8:85:f0:b7:f4:71:
e9:77:4f:9b:84:c6:92:78:63:d7:d0:8f:aa:af:01:
9d:1c:5e:54:f3:c4:27:91:0e:6e:44:b4:69:e9:a8:
ae:96:a1:67:2c:4f:4a:ea:96:b9:68:a9:64:6c:b7:
9d:ee:de:4c:65:84:36:00:91:3a:6a:ff:90:a8:ec:
c8:19:3d:0e:83:93:de:e1:0f:91:e1:68:0c:7b:ce:
22:f7:8a:dc:75:d2:9c:b5:77:2c:45:84:73:82:9b:
1f:f6:1d:e0:be:6e:21:7c:f0:b8:50:fe:bd:c7:9d:
e8:ef:a7:64:93:e0:80:83:57:29:e1:e4:ac:78:24:
f6:b5:c1:15:b0:d8:46:be:08:46:67:47:b5:86:41:
dd:87:37:4f:1b:68:cb:1e:54:35:48:a9:05:0b:c6:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EB:58:CF:D2:31:D4:7C:A6:00:AA:79:EB:50:E8:37:FE:3E:0D:8D
X509v3 Authority Key Identifier:
keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:89:37:d3:2b:23:e1:6a:7a:c8:c5:ea:28:b5:4a:e0:3d:b9:
d7:b2:9c:0a:f4:51:9d:ce:2e:03:8c:81:51:a2:0c:25:1f:be:
6f:e2:6a:34:24:5f:0f:96:fd:2a:e0:45:f6:2c:96:12:50:71:
57:35:d1:6f:53:4e:2c:cb:08:df:59:9c:47:10:67:82:73:0b:
e7:1e:c3:65:fb:3f:bb:e3:4d:ab:8a:e5:5c:b8:94:57:94:9d:
b0:65:50:77:ab:d9:cf:5c:f0:c2:14:1c:70:cf:7e:e0:44:c8:
64:22:42:df:c4:2f:f3:a7:16:bf:c9:9c:cd:40:69:80:67:39:
84:d8:19:e3:22:44:bf:6c:6b:62:d4:d2:ea:f0:50:23:96:95:
bb:2e:96:fc:c7:d0:44:0a:80:80:20:0e:a9:00:58:10:87:3d:
21:b2:a5:dc:b4:4b:42:d6:37:6c:4d:7a:7b:3d:05:d5:9e:1e:
b6:6b:96:12:d5:b9:af:38:f0:32:30:e5:6b:8e:32:a6:eb:b7:
af:14:45:29:41:90:65:0d:4d:da:cf:08:85:e6:7a:63:90:3b:
bb:58:5d:6c:bd:69:6e:a8:9d:08:e7:1b:c2:9e:2a:29:67:3b:
2a:fb:2a:b8:3c:1b:57:f1:91:78:29:d1:36:71:7c:01:97:41:
82:e9:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:54 2025 by rpki-client