Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
File: GbZo5W_iW9bcU4AO4XdQYezAkgY.mft (raw, json)
Hash identifier: 0OCb4okfo2twJjHI9vt4K/GhQok7GcA86OpZbQpVlBI=
Subject key identifier: 54:DB:C1:1D:21:77:9B:25:1A:C7:7C:10:B4:52:8E:6E:D8:E2:58:E7
Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Certificate issuer: /CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Certificate serial: 0197B77C0B97A635A62350F435D132D66D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
Manifest number: 08
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: GbZo5W_iW9bcU4AO4XdQYezAkgY.crl (hash: bdWZ9SdCN4wDSt9meoQS8JaxEKIllZztEbimsDpJX1o=)
2: RiL09rS6VjBEVN__JOM2U5RqEcI.roa (hash: uYgL/yhRbt5qevmx86ZZVWKBSugMaqO2EFz8Vo1U7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0b:97:a6:35:a6:23:50:f4:35:d1:32:d6:6d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=54dbc11d21779b251ac77c10b4528e6ed8e258e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:61:2b:aa:fd:a6:23:21:7b:37:d8:1f:39:
9e:30:1a:1b:97:f9:25:81:e2:be:60:89:0e:07:a3:
08:76:2f:e0:b2:c0:38:2d:0b:8e:03:d7:cf:1e:62:
6a:aa:80:14:55:61:c1:2e:fe:ac:5d:1e:03:d0:64:
3b:5d:d4:e4:a9:ca:6d:61:4d:cd:39:26:d5:ba:ed:
7c:33:77:92:a7:06:ba:c3:b3:2e:94:43:de:e5:06:
98:c7:d8:b8:d5:e7:32:28:5c:0c:84:03:6f:10:0e:
bd:8b:2d:47:f5:a0:38:69:ea:43:b1:b0:f2:ab:8b:
f8:af:cd:d2:24:30:d7:03:69:2e:f7:cf:db:1c:63:
1d:79:18:0d:66:2f:33:2d:c4:d2:f9:8c:7b:fa:ed:
82:70:8d:96:41:d5:02:26:e2:86:52:4c:97:ca:c6:
3a:16:e1:b3:4d:b6:b6:bf:8e:52:ac:47:e4:2f:3e:
12:3a:a4:e7:6f:21:3a:14:0f:6f:32:17:0e:9f:38:
d4:52:fd:31:ea:2b:37:4b:cc:8a:cf:d5:6e:90:51:
d4:a3:db:f6:39:c2:ac:e3:a2:2e:2c:d2:8b:08:0c:
f4:44:68:40:76:8a:1e:7a:37:45:41:a2:ad:ea:59:
74:34:b9:b2:ae:a8:92:4b:8e:8d:74:8e:20:54:1b:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DB:C1:1D:21:77:9B:25:1A:C7:7C:10:B4:52:8E:6E:D8:E2:58:E7
X509v3 Authority Key Identifier:
keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:72:ed:79:5c:dc:f1:cd:99:64:20:67:fb:4d:8b:dc:6a:
d5:7b:ad:6c:64:a0:03:1e:4d:fb:23:95:10:38:4f:07:fb:ca:
3c:47:9a:9b:5b:81:d7:91:be:50:a7:b4:08:c5:ea:97:6d:98:
b8:fd:6f:13:03:48:ba:a2:b4:dd:14:69:64:3f:cc:c3:48:71:
91:1a:ad:65:7b:f3:f5:aa:24:5d:2f:42:06:58:96:a2:5e:5c:
d7:ce:09:13:01:f2:a2:56:ab:4a:68:36:c1:e3:ee:2a:7a:ee:
f4:92:7b:61:22:b5:58:52:b1:79:44:cc:10:da:90:97:5b:5c:
39:a7:c2:4e:4f:2d:1c:06:3a:17:33:89:29:c9:ef:70:b1:79:
e2:ed:5b:71:09:e7:f7:80:0e:1d:77:d5:9b:6d:b7:41:78:2c:
7e:50:4f:a4:e6:c3:8e:62:3b:2b:72:7e:4a:8e:e7:f0:0d:4a:
1c:f1:1f:46:0e:9b:92:9e:bf:d6:dd:2e:14:4b:34:6f:e3:6a:
85:cd:65:f6:61:04:cb:7b:fa:70:10:25:4f:b3:96:c8:d1:07:
f6:8e:a7:ae:1d:80:34:b2:42:49:86:88:14:51:3b:c0:3a:fe:
16:14:fa:fc:bf:1d:e0:22:5d:5c:ea:43:e1:fc:30:7f:7b:1e:
18:2b:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:53 2025 by rpki-client