Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: 3g6DCEdZoI5xFCBf2VCRP9MTMgu+fMG/7gFcDdsi1O0=
Subject key identifier: CB:70:33:FB:47:C5:70:75:A0:9C:58:79:21:BD:9E:5B:C8:77:BB:E1
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 0197B6D7812FEE4509C5E9E89C8A088A06FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: NaJwRaNiQgt172+FID3actw9ktnYyIYcLzEm+NtMN8c=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:81:2f:ee:45:09:c5:e9:e8:9c:8a:08:8a:06:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=cb7033fb47c57075a09c587921bd9e5bc877bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:cc:c4:a3:2f:5d:e3:88:70:e6:34:70:98:
77:86:67:07:e7:1c:2b:fd:57:ef:45:98:6f:a7:60:
0b:16:39:34:9f:97:15:ec:06:33:4e:39:bb:71:2d:
dd:2d:cb:93:29:36:d2:b9:76:8d:83:89:81:e6:13:
30:2b:79:48:ce:2b:53:e0:69:ad:63:13:b1:c6:90:
62:85:a0:e5:8a:78:c2:d4:0e:ea:a7:1d:32:d7:f5:
fc:37:7c:57:02:96:e7:9d:6f:d0:2f:88:3a:44:4a:
48:e0:31:b6:3c:13:57:bc:fd:a3:54:62:18:f7:86:
5f:50:cd:bc:03:ba:56:1f:0d:90:db:72:ff:24:57:
2c:98:bd:5f:3f:b4:f6:32:ea:e0:3f:a8:08:7f:8d:
8c:9a:14:4e:c5:0f:db:e2:ed:57:e2:50:3c:74:f6:
ca:77:6d:0d:28:00:e8:1b:bc:f9:25:7e:37:e8:f9:
d7:66:d3:15:12:53:40:9c:4c:e3:4f:6b:07:c7:ac:
18:5e:6d:1e:cc:c7:4a:9a:9d:2e:bd:26:90:03:c6:
45:c8:09:98:f3:21:b4:1a:b9:91:df:ca:fe:0a:75:
ed:7f:b6:82:4c:91:09:c0:3a:d9:41:c0:aa:88:ec:
1b:82:a8:15:8a:48:ba:ac:e8:a1:82:c9:c4:0c:13:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:33:FB:47:C5:70:75:A0:9C:58:79:21:BD:9E:5B:C8:77:BB:E1
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:32:ca:f9:14:b7:5a:49:22:c7:d9:47:d8:da:bb:62:2a:39:
8f:b1:5e:36:60:c7:e9:8e:c6:8d:f2:a9:0a:6b:4a:39:1e:ad:
46:cb:cd:77:f6:aa:f0:fd:b7:7b:1f:90:1a:55:0d:31:4f:a1:
a0:e6:cb:46:35:16:9b:a9:71:fa:fc:7f:38:06:02:1e:e5:23:
a1:c2:c5:89:8c:cc:1e:9e:9b:1b:3d:8f:33:64:a5:f5:c0:dd:
d8:99:61:40:93:38:a2:5d:c9:d1:86:61:39:d7:92:74:d0:9b:
fa:a3:8e:2e:19:7a:c2:13:3e:fb:1d:65:89:f3:3d:db:ca:0a:
e0:78:02:d3:73:e2:fc:0b:96:82:31:c5:21:d4:6c:1d:66:2e:
96:78:fd:73:96:a4:66:a7:da:cc:44:63:2e:81:ad:bd:3e:ed:
a4:8c:df:c7:67:a7:98:6b:14:92:80:9a:e9:b7:93:e5:a2:a9:
86:c3:5a:55:01:48:d8:39:08:8d:34:03:c6:a3:99:de:a7:4c:
1c:6b:d1:74:dd:de:8c:a7:61:dc:7f:d4:89:90:77:db:6d:98:
87:d6:a9:dd:59:20:50:1d:bf:87:e7:70:e2:76:68:0c:00:ac:
1e:14:81:9a:95:48:42:49:c4:94:e6:94:1b:0d:dc:40:c0:96:
3f:70:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:16 2025 by rpki-client