Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier: FoCefaL1i9K2Li5GFpyd6/3UNEoQfZQhF/2tVcHclNk=
Subject key identifier: 6B:B6:3C:EC:36:24:AF:23:60:20:F9:27:08:9F:EF:D2:64:92:0E:44
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 0197B70F2384991086297F3EED579DAF3010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number: 0538
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: Bz5a1so3MzkeTF3CZ3dDr3dQjHsKkWTAefFtLE5DAbM=)
2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=)
3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=)
4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:23:84:99:10:86:29:7f:3e:ed:57:9d:af:30:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=6bb63cec3624af236020f927089fefd264920e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:6c:b2:1e:3d:bb:ad:bd:39:fb:f7:fb:a9:
c1:af:15:c6:91:95:62:26:54:c7:72:b8:0c:cb:ff:
0f:16:c9:0f:80:39:85:62:eb:fb:98:b0:02:47:0d:
59:97:59:71:7d:5d:f8:63:18:c3:cc:7c:bb:45:9e:
b9:50:48:d7:59:53:bf:d2:a0:bd:43:11:e3:70:91:
11:f2:d2:e0:01:df:44:5a:e3:ad:86:59:3e:3b:ae:
60:db:ef:07:26:2d:aa:62:12:3f:47:b6:bf:89:eb:
13:50:92:11:fe:38:4e:93:c2:fb:0b:36:98:1b:6a:
07:6f:fb:d0:1e:a0:48:6d:da:ba:5e:2c:6e:67:27:
90:24:fc:cb:15:82:30:f9:e2:3a:b9:6f:3e:8d:c5:
0a:88:c6:82:35:c9:b7:71:15:e2:9f:99:23:37:6c:
ba:f0:71:64:3c:63:bf:37:64:e9:60:83:fb:a3:3c:
06:33:39:2b:b8:17:47:49:df:03:c1:21:0c:a0:21:
df:32:90:6f:75:06:d9:1a:d8:15:a7:18:e9:a3:9e:
94:f1:1b:af:98:53:e8:cb:1f:ec:e0:9c:e2:68:3e:
cc:a6:e1:7f:6f:07:79:6d:95:ff:1d:99:78:e8:fc:
b3:57:28:78:71:65:29:7e:07:21:c9:ea:62:bf:69:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:3C:EC:36:24:AF:23:60:20:F9:27:08:9F:EF:D2:64:92:0E:44
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ec:48:0c:e7:85:79:b5:fd:b1:c7:4b:9f:d6:d6:74:19:18:
4d:ac:1c:8a:64:59:95:d7:e7:a5:07:71:9e:d9:c1:10:33:32:
f8:36:9b:df:e7:39:ac:d0:b2:8c:df:87:12:50:3e:30:ba:da:
42:3e:84:5a:72:01:b1:65:c0:35:20:bf:d0:c3:cb:0d:34:15:
5f:50:88:1d:94:b6:69:d1:25:30:f8:29:68:cc:4a:aa:e0:21:
5e:ca:9e:5a:1c:0b:22:60:71:06:c6:ef:19:86:86:8b:44:42:
35:df:c1:39:9c:47:b9:f8:35:ff:82:b8:11:70:99:c7:83:8d:
58:e9:d6:53:f1:18:4c:47:74:60:5f:dd:b9:2c:dd:99:20:bf:
9b:bb:b8:6e:b4:ad:7b:8b:e9:7f:21:05:f8:09:29:db:01:2c:
8c:05:65:1b:e4:c1:b8:b4:24:81:9f:2f:1f:ac:22:52:dc:74:
de:18:03:52:d6:9e:59:77:a0:cb:6c:8a:0a:6a:f1:e3:a5:c5:
40:e8:1e:fb:90:e9:a3:c3:85:b5:bf:fc:64:0b:bc:24:22:99:
ef:e3:1a:4e:44:6d:31:4e:71:e2:79:42:0a:b6:ef:fd:6e:1c:
29:1f:8d:3e:5f:9c:c0:fe:3a:17:59:a4:b8:bd:1d:9a:05:65:
8f:47:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:31 2025 by rpki-client