Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: 7vQuKSYdfWn5LNhH6YyUJnlmubRgnnmJHtL8h66CdUM=
Subject key identifier: 25:66:1D:D8:6C:5F:78:42:8F:19:CC:EB:86:67:89:60:48:FE:0F:C7
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 01977D1E6C0C6FFCE905AE4011860B8C12A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 0E2E
Signing time: Tue 17 Jun 2025 09:00:35 +0000
Manifest this update: Tue 17 Jun 2025 09:00:35 +0000
Manifest next update: Wed 18 Jun 2025 09:00:35 +0000
Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: GFFoTaCpKHLXOaLy+lZ/FWXkMp+3ZNjl2ziiKVAoLg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:1e:6c:0c:6f:fc:e9:05:ae:40:11:86:0b:8c:12:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Jun 17 09:00:35 2025 GMT
Not After : Jun 18 09:00:35 2025 GMT
Subject: CN=25661dd86c5f78428f19cceb8667896048fe0fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:d0:03:29:bb:8e:36:d3:37:d7:e0:18:a0:
38:67:c8:61:99:b1:9f:a6:b1:bc:e5:89:f4:39:16:
4c:59:61:3d:2d:ee:8c:c1:91:4c:4e:c6:c3:90:68:
54:8a:b8:09:9e:b8:1d:95:67:75:cc:9b:67:6e:0e:
96:ab:65:2b:09:d8:40:0a:f1:e9:91:e1:36:59:d6:
e9:85:f6:ac:0f:ca:de:ab:13:12:c3:73:3b:b4:8f:
92:2b:a6:0b:a5:26:b3:b3:be:4c:e8:f7:eb:ad:90:
21:68:f1:a8:02:fe:f4:28:4e:7f:4f:b2:65:1f:00:
f7:80:2a:cc:c5:05:df:d9:40:a9:06:c1:18:60:1c:
16:25:df:42:cf:e7:58:a2:79:75:ff:fb:08:3e:87:
82:99:81:ec:85:cc:b2:38:d9:87:c5:a1:2c:8e:ea:
db:05:f4:71:58:c9:d9:8e:4c:94:57:72:cd:d9:b0:
ea:3e:a7:54:0a:70:d7:4e:27:1c:0e:fb:97:ab:f7:
7a:e4:f4:5f:b4:92:fe:b7:66:ff:23:64:23:5e:22:
6a:99:7c:c6:a3:1d:0b:ee:a1:69:01:96:3f:7a:24:
ac:12:43:3f:00:59:41:09:58:98:99:18:01:5c:ee:
68:e0:d6:9d:b7:a1:4f:72:3d:2c:e5:eb:ec:94:66:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:66:1D:D8:6C:5F:78:42:8F:19:CC:EB:86:67:89:60:48:FE:0F:C7
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bf:66:db:54:ac:21:91:9e:5f:44:ad:25:7b:af:53:df:04:
d9:b1:54:26:5b:94:07:fc:29:88:8d:34:c5:a4:0a:ce:e6:13:
c1:7d:69:d0:43:a6:59:64:5a:13:9e:05:0f:1a:59:f9:08:94:
88:e9:2f:23:d6:7f:f6:96:fe:3f:bc:ce:14:0c:16:cb:bf:24:
1d:e9:d1:2d:b0:da:f6:f1:9c:51:e0:a8:70:67:e6:12:f9:a4:
ac:53:de:1d:34:12:d9:e2:ff:98:cf:1c:34:75:fc:13:ed:31:
74:5d:a5:50:ea:24:57:cb:18:cc:6e:e7:06:9e:98:9e:e3:04:
34:32:3d:66:ba:69:d4:c6:e6:ae:cc:f4:4d:ec:13:15:8c:1f:
4f:9f:78:63:22:f8:98:bc:e7:64:51:68:c5:50:06:51:68:e1:
c9:86:16:75:91:79:70:32:62:bf:6d:72:14:62:1d:2d:ba:e8:
2e:68:47:c5:5a:6a:78:0f:02:93:a8:21:61:92:62:68:1c:64:
37:e8:e5:be:8f:55:4b:3b:7d:b8:16:82:88:95:f0:25:90:94:
73:e0:f4:15:71:ab:5f:fa:59:22:f1:6e:1d:2c:a6:68:52:b2:
36:03:38:fe:71:ce:68:70:e5:49:f7:b6:a0:08:b8:98:81:da:
62:aa:95:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:34 2025 by rpki-client