Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier: HdEULCw0DAp8qSs5HvnVYsaY+fcFGLFmPuiU7ci8xc8=
Subject key identifier: 95:AA:B6:C0:C2:CF:69:93:01:6C:4E:3B:5B:5F:D5:BE:E0:BB:1C:C2
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial: 0197B70F165F757F53C43A9B336B343CDE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number: 0A34
Signing time: Sat 28 Jun 2025 15:01:48 +0000
Manifest this update: Sat 28 Jun 2025 15:01:48 +0000
Manifest next update: Sun 29 Jun 2025 15:01:48 +0000
Files and hashes: 1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: iHfVT0DyxmiELrVOATSCYJU5Rmx8W6e3RT5E3DHL+pA=)
2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:16:5f:75:7f:53:c4:3a:9b:33:6b:34:3c:de:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Validity
Not Before: Jun 28 15:01:48 2025 GMT
Not After : Jun 29 15:01:48 2025 GMT
Subject: CN=95aab6c0c2cf6993016c4e3b5b5fd5bee0bb1cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:c5:ae:e4:55:44:03:89:55:ac:bc:c0:9e:
c1:29:5b:6b:96:9c:f2:74:44:1e:ce:59:34:5f:4d:
e9:36:f2:4d:4d:1b:4a:8e:15:1e:70:35:c8:4f:d4:
f8:85:f0:dc:01:3a:94:94:d7:c3:a5:a3:38:7f:b2:
66:92:a2:a9:2c:88:10:d5:4f:fe:91:70:c2:5e:52:
e5:3c:35:b9:17:d4:ad:dd:3b:42:20:62:ea:86:89:
f5:72:08:85:41:31:f6:b0:b5:4f:56:44:2a:c0:62:
2b:9b:93:8a:03:f5:7f:bd:e4:f5:d2:06:28:77:23:
0f:a7:0c:bf:e0:33:79:73:f7:93:5d:34:7c:54:45:
4e:3a:37:99:f2:dc:6e:08:29:c8:0e:a9:0e:99:a4:
9c:9f:d4:92:80:e3:9b:37:1d:ff:83:38:f2:cc:08:
e8:c4:94:10:37:90:01:85:22:7a:79:0c:1e:6d:a2:
9a:cd:23:3f:e5:89:2c:f0:46:9a:88:8d:a3:0e:12:
10:d5:7c:1b:99:da:20:89:e8:94:4f:d4:91:01:1b:
19:88:9a:5b:92:0e:d1:ed:a9:6f:c8:a4:01:97:db:
b3:b8:80:be:c0:34:5c:74:e9:97:df:4e:b0:6e:11:
44:02:ea:f3:f4:ef:c9:c6:d5:01:d7:95:60:d9:f5:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:B6:C0:C2:CF:69:93:01:6C:4E:3B:5B:5F:D5:BE:E0:BB:1C:C2
X509v3 Authority Key Identifier:
keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5c:1d:8a:f4:0f:5a:b7:33:a6:a2:f9:c3:b7:bd:e2:43:a2:
c0:9b:fc:b6:dd:bd:ef:41:33:28:6b:eb:31:b4:3a:a3:0a:c1:
ed:c9:37:be:eb:3f:fa:b2:b0:f7:97:c4:17:04:d7:bb:56:9c:
d0:ef:19:a5:fd:25:d3:db:64:fd:86:8d:00:ac:9e:39:e9:e1:
82:d9:db:7d:23:22:b0:0d:2d:36:66:84:3c:a6:7b:d5:1a:02:
29:b0:62:98:f8:36:ec:34:cf:91:74:9d:60:b2:a9:ca:d2:32:
72:af:f3:50:ce:7f:cd:1e:33:a2:7a:38:5c:35:51:ce:64:30:
91:60:e4:74:30:fc:73:a3:5d:39:ba:5d:1a:33:85:17:73:04:
3f:d9:a0:8f:47:9d:94:76:95:a5:2f:a5:04:96:7e:41:6b:ed:
ea:8a:83:cb:b0:7b:4a:44:88:64:d6:aa:9c:af:30:54:c1:ad:
c1:92:0a:51:2c:2d:a4:d8:d2:e5:55:77:95:33:0b:0c:9f:96:
71:c8:5f:42:09:44:d5:fc:56:9c:44:79:77:ee:29:c3:af:37:
80:28:0d:5c:b1:a6:70:9b:44:95:8c:3a:56:70:4e:7b:b6:1d:
1c:a7:af:7e:85:f5:42:65:d6:57:37:ae:eb:2e:6b:c1:8e:61:
78:d3:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:21 2025 by rpki-client