Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: oEluP87W7bAE6Gv9jbxvp/tDy2lPJdIJVKGQItpxUDw=
Subject key identifier: C1:8A:E3:1C:F4:51:C3:D2:86:01:0B:34:08:DE:D4:14:22:E6:1C:86
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 0197B933C3B5CA13884B1999F88280212F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 015A
Signing time: Sun 29 Jun 2025 01:01:06 +0000
Manifest this update: Sun 29 Jun 2025 01:01:06 +0000
Manifest next update: Mon 30 Jun 2025 01:01:06 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: tO3QGahs6rRWbBu/yBJzqIk5qVu1ziv2mp2oJ+6DAGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:c3:b5:ca:13:88:4b:19:99:f8:82:80:21:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Jun 29 01:01:06 2025 GMT
Not After : Jun 30 01:01:06 2025 GMT
Subject: CN=c18ae31cf451c3d286010b3408ded41422e61c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:fa:29:c9:55:44:2e:ea:a7:31:ce:93:a5:
5b:04:59:5b:44:2b:05:49:9b:9c:ef:43:b2:e6:4c:
d1:72:92:35:dd:3b:52:81:a1:cd:6c:c7:89:ee:21:
6a:45:16:29:4a:fb:63:72:c1:90:ed:f2:9b:60:d6:
37:c5:47:69:fa:56:d4:17:45:9e:e6:0d:dc:45:ec:
f4:99:75:c2:69:2a:d5:d1:98:5e:b3:20:be:38:b9:
be:4b:38:41:63:c7:95:35:df:26:4d:9f:ec:08:29:
ac:88:28:16:98:db:6d:58:4e:76:32:2b:50:e2:9a:
ca:00:54:87:53:06:91:43:34:40:a5:56:01:61:0b:
33:77:10:3e:ea:e7:75:22:0c:00:e8:45:c7:6b:c5:
ab:ee:67:15:d3:e2:3f:8f:6c:04:82:02:1e:11:e9:
c3:ba:22:7a:31:43:0d:3f:79:fb:e8:77:e9:7e:63:
94:f7:66:2b:66:71:9c:cb:75:4c:60:ec:d6:86:e7:
c3:20:f0:4c:1b:bc:d8:4d:92:44:6b:a3:f4:6a:2f:
e5:a6:f6:d6:87:f1:0e:43:d6:4d:1f:1e:4e:00:8d:
7e:d8:8f:fe:fd:33:75:df:d5:eb:fe:bd:87:86:06:
10:b0:a7:0a:65:f0:70:9c:7d:ca:b7:03:0b:c2:75:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8A:E3:1C:F4:51:C3:D2:86:01:0B:34:08:DE:D4:14:22:E6:1C:86
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:d7:0b:9e:89:0f:dd:b0:f4:6a:91:01:bb:45:d1:33:fd:
39:49:ee:6c:1f:12:03:6c:c3:e5:82:99:c0:89:96:84:cb:e4:
b4:8c:76:6b:ba:f3:69:55:27:86:f4:d6:66:9f:60:07:96:94:
ce:4c:dd:be:a3:78:7c:7b:68:19:c5:09:25:6f:82:5c:ae:40:
77:5e:ce:3c:8a:9f:64:95:64:32:eb:e2:58:6c:aa:5d:f8:13:
92:1d:b1:4c:ef:1c:ae:25:7f:cd:0f:a1:7c:a2:c9:60:48:bf:
49:78:d9:6f:30:8b:24:80:30:99:c7:a8:96:08:d4:79:23:b4:
89:1d:7d:28:f8:c7:f9:aa:1d:1a:95:1a:3c:22:09:ca:05:5f:
a6:93:35:49:ff:d0:8c:31:85:a9:90:f6:68:76:52:07:91:b6:
31:da:e3:ab:79:ad:c2:7c:1a:80:50:29:a3:2c:ed:81:58:66:
55:84:1d:6b:00:a2:9d:56:54:19:12:f1:4e:a2:4d:c8:1b:94:
70:3a:86:04:70:ad:80:a3:44:2c:9e:6b:7b:89:55:2e:3f:0d:
d5:0e:10:94:4b:2d:33:4b:16:c7:3e:fc:ee:00:bb:30:8b:73:
5e:9e:12:c2:ee:a7:01:de:a1:a2:bd:c7:b3:99:8d:e2:07:41:
3a:d2:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:36:01 2025 by rpki-client