Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: i9yweouekKJmOOy1MqMML9tErz+Jbc1ijCeG1TLy5yI=
Subject key identifier: 15:47:88:7F:D8:FB:50:C7:3F:CF:89:50:4E:75:3A:2A:9A:DE:9A:A4
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 0197B70EC4B4AB50125257B11F4E42ABD37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0B3A
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: BXe5/gNrbxkLnjFuz2uY3rlJOEtClG8yZl1F3fxOJRg=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c4:b4:ab:50:12:52:57:b1:1f:4e:42:ab:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=1547887fd8fb50c73fcf89504e753a2a9ade9aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:f0:cc:95:8d:3b:0c:34:72:4d:7b:6b:07:
27:06:8d:6c:65:46:1c:3d:36:18:76:1d:46:29:ea:
c6:dc:5a:51:94:1a:b7:4c:c9:7f:76:99:e1:ac:3b:
8a:b7:18:08:9d:9b:56:e7:5f:26:65:2f:77:2f:c7:
64:2e:c0:68:09:f1:8b:04:6d:ab:de:72:fd:24:bd:
dd:10:d4:57:90:75:5c:93:fd:7e:77:48:bd:8d:64:
dc:41:75:ea:ea:29:e4:3a:60:82:be:c9:eb:e3:b5:
57:36:5d:51:30:fb:d4:1d:d1:db:9c:46:df:94:c3:
1d:36:4f:af:42:ae:8b:ba:04:07:1d:7c:b8:ce:6d:
c3:f5:36:aa:c9:f1:f9:83:bc:23:61:44:2e:4d:11:
3a:23:a4:0c:41:27:cd:81:b2:35:45:2c:d4:b8:61:
1d:22:3c:38:2f:a3:02:ca:a9:94:08:70:01:b9:c6:
17:04:22:bd:3d:07:5f:e6:80:af:2d:1a:f7:34:96:
de:98:2f:41:ef:84:6e:3d:67:01:03:8a:97:f9:7e:
e7:e6:e9:a4:f0:20:1f:ef:0f:7b:1d:e8:9f:1a:95:
43:92:81:c8:68:3d:49:53:97:12:32:1c:91:93:0d:
bf:40:3b:c3:05:e2:5e:1e:93:5b:3c:ff:3b:fd:cd:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:47:88:7F:D8:FB:50:C7:3F:CF:89:50:4E:75:3A:2A:9A:DE:9A:A4
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8b:a2:4a:1f:56:c4:99:2b:b2:5f:04:08:3b:45:9f:7e:d1:
10:c6:b8:ec:94:d6:c4:e0:3b:d2:95:46:68:b5:6f:6b:4d:a8:
05:7c:d3:91:3d:60:6c:20:d6:58:88:78:63:bb:cb:3c:39:0b:
d3:ae:01:4c:57:40:87:b7:80:b6:f9:7f:7a:fe:48:1f:97:c4:
fa:97:43:15:43:f6:c2:0e:a5:73:3d:fa:a8:3a:ed:d3:36:f8:
8b:3e:eb:59:57:2c:2d:e6:47:16:41:0b:9b:2c:bb:78:c6:35:
46:84:12:51:2a:ad:cb:c2:0b:ba:56:e7:05:78:42:b1:b5:ea:
01:70:64:e2:a2:de:e1:a4:98:0b:4e:fd:1d:57:15:bd:81:5a:
e6:f8:2b:2f:93:40:75:79:bd:27:b4:93:4a:c0:aa:62:3a:a3:
52:49:b2:21:5e:11:f7:13:d2:90:64:7d:96:27:b5:83:bb:cc:
06:c0:3c:7e:ed:37:1b:35:40:b7:00:72:71:ba:87:c9:4d:96:
c6:05:04:cf:f2:06:34:0b:74:3f:8b:cb:f9:4a:98:f9:fe:c5:
c4:50:6d:34:11:b2:3e:5a:d8:69:77:54:64:55:bc:aa:08:94:
31:95:19:8b:06:ac:ff:76:4e:9c:82:6f:c4:27:a9:f1:ba:36:
9a:ca:8a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:50 2025 by rpki-client