Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: 51Jbh5DrhRsAEu+SkzG+B3faLHKVFulkdYv3dTddw84=
Subject key identifier: 53:2F:3F:AF:D7:02:DE:93:B5:F4:C5:D4:3C:C0:5C:3D:28:54:34:1C
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019771514E7BA13AC2848E911C45C32C3481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0725
Signing time: Sun 15 Jun 2025 02:00:43 +0000
Manifest this update: Sun 15 Jun 2025 02:00:43 +0000
Manifest next update: Mon 16 Jun 2025 02:00:43 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: YxXUGmOOljgsGnoaxBiiNFvMY/Yvk+rS4PHAf3P+rSM=)
2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:4e:7b:a1:3a:c2:84:8e:91:1c:45:c3:2c:34:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Jun 15 02:00:43 2025 GMT
Not After : Jun 16 02:00:43 2025 GMT
Subject: CN=532f3fafd702de93b5f4c5d43cc05c3d2854341c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:3b:07:91:fa:ae:4e:4e:b3:b9:c4:45:fa:
5f:2d:0e:e4:ff:6d:a0:ac:d6:a1:58:5c:3e:b7:19:
c0:5b:57:7c:81:90:ac:90:55:55:a3:78:c6:49:6b:
7e:69:20:d7:1d:25:26:b9:3d:b8:e5:04:4b:ac:37:
0e:03:1b:0b:e8:65:2d:71:a0:71:e0:f1:b4:77:1c:
1a:30:37:5f:30:b1:34:2e:41:96:5c:c5:c8:31:d0:
2e:ec:9d:7d:3e:8a:69:32:74:38:d5:cd:4d:78:6c:
c0:8b:f0:26:09:e5:30:9c:a5:80:a7:df:5f:68:a0:
14:50:96:58:8f:50:9c:6a:98:49:df:9f:bf:62:3b:
dd:fc:0f:ec:85:77:80:39:57:44:85:ae:b1:0a:70:
2b:62:d9:20:c7:8e:38:12:92:b0:db:88:0c:c4:19:
13:50:05:fa:61:87:bf:bb:2b:85:7a:3f:e6:be:f6:
16:83:60:ad:8a:6d:9c:8a:9f:fd:8e:44:53:74:47:
00:eb:c3:9f:cf:8b:80:27:cd:b0:28:e6:0c:0b:c1:
b7:9c:32:72:c8:d1:3a:e3:14:54:d4:fe:99:ff:7a:
80:8d:73:45:dd:07:f3:63:72:2a:81:a8:8d:20:19:
d8:a4:64:2a:43:bb:1a:56:38:7f:7c:3a:21:2e:91:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:3F:AF:D7:02:DE:93:B5:F4:C5:D4:3C:C0:5C:3D:28:54:34:1C
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3f:86:79:98:4c:3b:02:f5:ea:1d:d8:da:c6:07:34:8f:2f:
31:d3:89:a5:e6:50:6d:39:f0:0d:a6:21:c8:e9:eb:dc:81:c3:
b0:f7:15:5a:05:88:03:09:4d:d6:10:30:88:b6:7e:e2:fc:08:
87:a9:e4:64:aa:68:43:f8:fb:a1:b2:e4:97:14:41:31:e0:66:
4b:03:0b:15:f0:cc:22:ce:08:ed:99:ee:1e:61:de:ee:56:e1:
0d:80:fe:0a:b7:67:68:a6:07:33:4a:89:a8:b7:fc:5b:d4:f6:
56:be:15:c2:53:0e:63:a1:62:d6:6d:ab:49:94:30:b0:10:56:
e3:de:f3:5c:bf:01:1a:08:68:b4:93:c7:38:4c:8d:ae:bf:74:
47:2b:ba:ab:b7:90:cc:7a:fa:a9:c4:ac:62:77:80:13:2e:b9:
be:ce:85:a4:39:87:78:ce:ac:25:8a:5c:98:8d:2b:6d:f2:cd:
e8:f4:47:87:c2:16:bf:ee:f1:16:c3:20:38:f5:df:0e:72:7a:
bf:a4:b3:54:62:4b:98:2e:46:56:5d:19:80:c3:73:54:3e:0a:
40:81:ad:50:ed:9b:a7:44:a7:ba:ad:f9:4c:f8:98:8e:44:d7:
28:76:df:aa:fd:47:33:b8:4f:a5:86:1b:13:6a:fc:47:3b:2b:
2b:5d:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:23:27 2025 by rpki-client