Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: 1SdIHdIR8jquzk56zLRYIrrgPvn/EiGZLZfqFLsc5cI=
Subject key identifier: B7:C4:65:90:9C:66:E4:AD:43:85:D4:4E:D8:52:46:E9:A6:FE:81:82
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 0197B70F40E1B362FD2285BD100D10B1B23E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: kcfWwcakjvPnF+YA3yGVgsfXJuvc3ODGt3LjPE49Fr8=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:40:e1:b3:62:fd:22:85:bd:10:0d:10:b1:b2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=b7c465909c66e4ad4385d44ed85246e9a6fe8182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:73:06:ac:ae:88:be:6b:7d:ea:c0:d1:bd:
3f:52:b5:2b:0f:23:4b:e1:22:47:36:69:1a:07:2f:
f1:3b:73:81:4d:ec:b4:e8:37:a9:41:4c:80:91:9a:
cc:fa:15:c5:7a:aa:af:7d:66:02:a7:3f:51:f9:6f:
90:a2:8f:f7:3d:7c:62:d9:53:96:04:2b:54:43:c9:
55:ed:3f:a2:f6:04:41:44:26:a9:ae:ef:fa:23:84:
59:5d:ca:41:25:4b:cd:5b:1d:04:5c:30:1a:83:2c:
b8:b5:7e:d5:e5:8d:64:c4:54:58:00:94:c1:81:28:
c9:8a:d0:e6:33:57:2b:99:05:86:98:db:2f:5a:5d:
7c:df:8e:95:ad:6d:8d:81:9c:05:35:8d:40:cd:d9:
b5:dc:ee:a0:d9:de:8a:4b:06:b3:a1:00:db:5a:3d:
0b:c8:6c:31:13:c6:3e:73:4e:45:6e:33:22:2d:bb:
e5:fb:bb:ab:db:b7:c5:ae:cf:dd:d5:8a:8a:1e:6b:
c1:3b:b8:40:f7:e5:c2:ff:f0:27:04:35:fa:51:78:
28:55:34:56:82:87:29:9e:58:54:c3:40:c4:1c:79:
5d:30:0c:eb:bd:d5:03:07:85:fc:5a:2e:67:26:83:
fa:0d:51:32:6e:39:a3:3a:ee:38:01:47:0d:14:d9:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:65:90:9C:66:E4:AD:43:85:D4:4E:D8:52:46:E9:A6:FE:81:82
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:67:8d:85:51:65:f5:89:ac:94:71:58:ef:75:56:c8:74:
6f:59:db:91:58:1f:d1:3e:05:95:dc:42:59:ec:e8:65:6e:88:
87:14:58:8a:db:01:88:3a:c6:df:ab:6c:09:cd:39:dc:eb:b2:
8a:49:a5:83:00:0c:4c:63:02:5d:a3:a2:56:5e:02:ad:3e:28:
92:af:1c:40:ab:15:4c:6d:fc:00:b2:b3:37:6f:b5:11:82:ca:
13:5f:54:72:0c:e6:c6:b5:14:8c:ee:8a:2e:9a:bf:2e:df:0f:
d8:ed:8b:0d:df:71:12:a4:20:f8:eb:a8:f5:2a:f0:af:a1:fa:
ae:8c:75:f2:85:7e:92:8b:bc:3a:4f:eb:fe:d5:a3:c8:3e:11:
6a:f2:9c:7d:92:66:8d:05:af:6a:6c:7d:15:02:61:e2:99:66:
16:ec:4a:2d:63:c7:14:1a:62:2e:72:cc:23:ba:11:ba:27:85:
e3:67:10:b6:da:d3:65:74:9d:a8:6a:f4:57:e4:e6:cd:f4:23:
df:d3:32:76:c5:79:d6:56:d6:dd:40:75:66:33:24:23:cb:f1:
bf:43:03:c2:1b:48:4c:b9:91:b0:45:a3:be:e4:b5:b0:e8:70:
ad:15:8c:51:55:cc:6a:5a:ff:80:55:31:b2:27:7b:06:f6:de:
d8:a0:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:49 2025 by rpki-client