Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: U279LIpt1kZWMzv42Cb0boUTLNO0TnF3btauYZAM8sk=
Subject key identifier: F9:B6:27:4F:66:79:4B:42:93:B0:CB:15:2F:02:EB:CC:DB:69:73:5B
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 0197D0295D40C6A605F8B4957576BE8947A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 15C5
Signing time: Thu 03 Jul 2025 12:01:01 +0000
Manifest this update: Thu 03 Jul 2025 12:01:01 +0000
Manifest next update: Fri 04 Jul 2025 12:01:01 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: QsoHxHTOKnkLLYI9nELQ8XResTkvC7EsQKYfMZQksX8=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:29:5d:40:c6:a6:05:f8:b4:95:75:76:be:89:47:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Jul 3 12:01:01 2025 GMT
Not After : Jul 4 12:01:01 2025 GMT
Subject: CN=f9b6274f66794b4293b0cb152f02ebccdb69735b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:2a:40:3f:55:0e:9e:d7:d3:82:a9:b1:bf:
8b:1d:38:59:b2:f7:e1:df:03:9c:5f:bb:f2:3b:02:
96:03:b6:90:e5:69:8e:ec:06:10:20:da:4e:c6:21:
65:20:cd:d8:95:7a:c3:30:b2:bf:fe:47:62:02:23:
62:8e:e2:78:ae:23:02:98:86:59:5c:24:91:47:08:
08:55:f1:99:ca:fb:0b:79:32:d4:95:0b:67:c6:36:
ec:24:91:6e:11:c4:33:b1:10:f9:2e:3d:f6:a7:b0:
28:bf:92:55:0e:97:3b:bb:24:a2:b0:7b:80:04:d3:
5a:ce:84:49:e7:40:9c:64:52:d5:61:67:d6:c1:d6:
13:4a:95:28:9b:5a:bd:f6:a3:d2:36:21:1a:01:ab:
41:05:e5:3b:d5:0e:3a:3f:22:37:7c:e3:82:39:00:
96:7f:c1:68:d6:5c:74:d8:ee:fc:41:f1:bb:fd:ca:
47:9f:11:d3:da:0a:07:8b:02:c6:13:b4:41:ce:f8:
0f:a4:a4:8f:68:ea:d3:aa:69:ff:0c:d1:60:5b:b8:
0f:7f:7f:32:63:78:9e:5f:b5:2c:f2:7e:8b:70:8c:
31:14:48:09:e3:e4:90:c9:53:9d:4c:35:f1:a5:39:
74:78:d9:1c:53:62:c2:0d:71:2e:9c:26:73:13:43:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B6:27:4F:66:79:4B:42:93:B0:CB:15:2F:02:EB:CC:DB:69:73:5B
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e7:a1:12:6e:d3:45:3a:fe:ad:98:f7:06:3f:c7:d0:6b:c8:
10:24:23:1d:62:ee:30:1d:99:40:9c:7f:ed:d3:2c:cd:e0:21:
cb:5d:34:f4:71:ea:e4:b3:cd:bf:4c:8e:80:0c:7d:0d:8a:53:
3e:42:42:26:e2:60:6b:ee:f0:22:c8:23:b5:cb:de:05:94:f3:
8b:bc:1c:ab:99:0e:d2:e0:de:86:89:af:7f:30:8c:9e:01:8a:
d5:e5:e0:81:42:4a:b6:47:6f:82:93:3b:6c:9a:24:37:16:f2:
3e:4a:87:f3:4a:d6:05:e9:e6:88:6c:a7:c6:2d:e9:11:48:09:
4c:5c:f0:91:05:86:32:4f:7d:2b:6f:39:dd:54:63:3c:16:db:
e5:46:ad:fe:7a:ab:07:16:75:76:8b:a5:b1:b4:06:70:c7:6c:
9d:e6:52:48:c2:51:a5:ab:2c:fc:19:47:86:3a:0d:94:0d:4e:
02:df:e7:41:a1:1c:55:f6:6c:ad:42:2d:3b:24:af:19:35:1a:
75:e4:08:07:ad:da:fa:d6:2d:0e:a8:20:75:d1:85:89:ef:8e:
0e:f3:1f:ef:c1:25:76:dc:5b:e2:f8:12:24:ee:8c:ef:48:0c:
d4:af:f2:0f:8d:0b:91:bd:41:06:b6:b3:e7:aa:a7:9f:71:fb:
0b:cf:3a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 20:47:05 2025 by rpki-client