Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: 5RbV756fB+J1L4QefMezywsnSSvs4wTtvgLkaFYXgHg=
Subject key identifier: B2:DE:C7:D3:C2:B2:12:11:89:B7:E2:DE:F6:A9:4D:A0:CA:5D:8E:34
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 01977753FE5AECD0652CDC5400A9CD47AFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 1275
Signing time: Mon 16 Jun 2025 06:01:22 +0000
Manifest this update: Mon 16 Jun 2025 06:01:22 +0000
Manifest next update: Tue 17 Jun 2025 06:01:22 +0000
Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: XKDdpJ41fco4uX8AZE3wYd7QVbqjiCZLNt5YpwNCVpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:fe:5a:ec:d0:65:2c:dc:54:00:a9:cd:47:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Jun 16 06:01:22 2025 GMT
Not After : Jun 17 06:01:22 2025 GMT
Subject: CN=b2dec7d3c2b2121189b7e2def6a94da0ca5d8e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:87:16:0c:ed:f8:46:ca:57:e5:b7:32:49:
a4:c4:0e:4c:86:9d:25:86:86:36:69:9e:10:71:1a:
14:09:5e:2a:88:57:a9:22:44:b4:7b:c9:c4:f9:12:
6e:00:8b:a1:44:f2:0c:ac:8c:b3:1f:33:ce:e2:f4:
e2:47:fa:73:80:a2:fc:d2:d5:90:ed:1f:e2:7a:34:
44:19:a8:f7:21:16:ad:0a:ae:e1:d2:27:0c:67:62:
9c:ec:e6:9e:4c:1c:8f:af:65:99:aa:6b:80:a1:0b:
5a:1a:a8:c8:a0:80:2c:0c:ee:97:4b:68:a0:2b:30:
6c:49:8a:54:13:22:73:ae:57:04:e8:66:1d:1c:74:
c0:85:38:8a:d1:70:dd:52:e2:18:ed:af:ab:36:40:
4c:d9:90:87:ac:9a:18:b1:e3:0f:5c:86:db:32:0f:
9e:53:4c:6c:47:48:7b:0f:6f:cd:0f:91:06:27:df:
45:7c:39:83:3e:bf:2e:7c:85:b3:93:54:2c:46:47:
62:9e:be:f2:bd:7b:81:2b:b3:f6:36:b0:7f:48:06:
b1:04:03:c0:e4:71:4e:64:f9:d7:61:fa:84:6f:08:
8b:4f:6e:2e:dc:b8:33:86:1c:7b:82:87:71:37:24:
5b:e1:c6:09:4f:1b:32:f9:d6:5c:a3:bc:db:51:e9:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:C7:D3:C2:B2:12:11:89:B7:E2:DE:F6:A9:4D:A0:CA:5D:8E:34
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e5:08:2c:50:b3:11:5b:31:bc:31:ce:39:72:ed:9a:f3:c1:
ee:b3:ae:da:7e:ae:1e:bd:f7:04:15:dd:36:74:8a:ae:21:d7:
97:04:95:c1:23:de:fe:0a:70:b8:b7:06:c8:1b:51:55:0b:50:
73:23:8d:d8:47:24:d8:d1:2e:75:15:6b:f4:bb:1a:74:63:56:
ce:b4:a1:37:40:db:7f:e2:3e:ac:36:b4:bd:0e:21:95:0c:d0:
78:d4:c9:e6:a2:12:43:3c:8f:2e:7f:b7:65:b4:f0:87:e2:71:
da:95:6f:39:f2:6f:87:4b:e1:07:65:97:11:fb:e2:ed:ff:54:
96:a0:03:be:c0:c6:79:a3:52:0a:84:00:71:9f:b0:ce:5c:09:
16:16:85:1d:db:d1:97:60:3e:04:e3:a7:c4:6c:76:58:28:a9:
aa:9b:5f:9f:6e:33:e2:35:7d:09:47:69:5b:92:00:cc:6c:56:
70:a2:36:03:b0:aa:9e:d4:d2:1a:dc:f3:bc:34:ff:3e:de:2d:
68:43:bc:d9:4b:26:13:d3:64:d1:31:8d:67:f8:f1:5a:38:4a:
1c:89:b9:89:c7:85:c4:14:ab:2d:5b:a2:0f:2c:1a:d2:07:86:
62:e1:2e:cf:74:2a:2c:42:d7:01:fb:63:6e:20:f6:38:be:1d:
0e:26:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:25:15 2025 by rpki-client