Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier: trlkfrjgUCLLa7lYRXydQ4nez2impPjbzS+OjLE6+GA=
Subject key identifier: 89:13:9C:CE:E2:E8:80:D5:1D:8A:C4:21:91:ED:98:9B:0A:86:CE:8A
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 0197B8902FA131A7BE15279655BEBF35FF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number: 063C
Signing time: Sat 28 Jun 2025 22:02:26 +0000
Manifest this update: Sat 28 Jun 2025 22:02:26 +0000
Manifest next update: Sun 29 Jun 2025 22:02:26 +0000
Files and hashes: 1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: 3KMVOAn21qv6OCRW8vvfjm8+jSDOirvY5lQ1Dl/+e50=)
2: puvubvKJAYg7r6mXBIAyb_AGzB8.roa (hash: GM5+sjVJG/v0mBOXZh/kGPDkPN3npBN1lUlwDZuz3ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:2f:a1:31:a7:be:15:27:96:55:be:bf:35:ff:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Jun 28 22:02:26 2025 GMT
Not After : Jun 29 22:02:26 2025 GMT
Subject: CN=89139ccee2e880d51d8ac42191ed989b0a86ce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:a5:78:81:40:2b:61:1e:f6:26:be:c4:93:
79:49:0f:fa:bc:a8:ef:9a:bc:65:89:d4:49:2f:f9:
19:91:20:dc:e0:08:f3:47:6d:52:a1:14:53:1f:5c:
bf:ed:e6:06:01:28:ee:10:12:06:ef:2f:f3:02:19:
45:02:37:b4:55:24:e9:77:66:04:dc:0f:97:93:ce:
58:77:6b:65:49:c1:39:93:de:00:c0:50:f2:89:23:
e4:07:78:d5:1e:ec:2b:0b:44:a1:9a:a6:8c:d3:2e:
a0:bb:38:ef:36:54:1e:63:1e:88:d5:a5:25:e4:d1:
c9:d7:97:52:72:b9:13:75:44:fd:69:36:6b:5a:ba:
ba:f2:af:15:72:e6:19:5a:9b:49:7e:c4:55:0a:61:
5c:a0:c5:f4:a4:9e:fc:95:dd:88:57:b0:66:b4:6a:
81:e2:6b:38:ce:1f:d1:3b:5d:11:84:3b:87:c0:50:
c4:1d:c8:5d:e4:ff:2b:88:e9:32:40:e7:1c:30:7d:
a3:62:5b:c9:45:9a:e2:dd:1e:98:c5:58:be:6e:f5:
ed:a7:15:8b:bb:20:29:5d:19:b7:58:d1:45:fa:20:
d1:20:0d:46:fe:49:73:4d:5d:4d:cb:c9:c5:3b:cd:
c1:0f:be:08:34:6b:45:97:52:97:21:1f:08:c2:1f:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:9C:CE:E2:E8:80:D5:1D:8A:C4:21:91:ED:98:9B:0A:86:CE:8A
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:12:b8:56:4a:00:bc:3b:34:98:9f:ae:65:2f:80:7e:8c:0e:
ad:b9:c5:96:7c:98:01:9b:3a:b7:b6:90:54:82:09:da:66:d1:
e4:8c:e3:3b:4a:1c:62:18:ee:a0:26:64:06:54:c8:97:cd:3c:
2d:b7:b8:35:4b:dd:59:60:c7:2a:7e:e3:90:6e:fd:67:27:5d:
45:b3:c2:9a:db:29:c2:dc:f2:d2:2b:37:56:e5:d4:c1:22:b7:
e7:63:69:1e:1e:25:cf:cb:8c:3c:f4:a4:23:cc:8d:08:6c:f4:
04:cf:8f:6b:04:69:f3:e4:8e:76:22:4b:a4:ba:36:19:8c:6c:
b9:f7:61:c0:6b:b5:a4:e5:df:67:a6:76:3c:14:4d:13:6b:d4:
02:9b:6b:6a:a9:97:64:5f:98:b4:e9:e0:f9:32:28:1b:cf:0d:
61:a7:a8:0b:0e:47:9d:5d:68:b8:b9:36:52:60:45:90:b5:e0:
d7:de:bb:0f:33:6f:30:14:9f:21:84:92:f9:67:03:ef:4c:71:
16:df:89:d9:16:8f:ae:84:48:ee:8a:fd:b5:ac:0f:9f:cd:00:
d6:b3:a2:d4:cd:67:fd:82:35:11:10:06:8f:e1:7a:5f:34:86:
be:d0:68:38:19:98:7f:6b:d0:6f:d3:5e:1b:85:86:b7:4b:67:
e8:23:1d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:27 2025 by rpki-client