Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier: rZrnfWwnnsx+UzHez61rXW7ZR7UzWcaE56f1QuLm9jE=
Subject key identifier: 89:40:25:61:A1:DF:EC:A1:28:FA:B6:54:98:B8:76:15:85:6F:56:44
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 01977DC33E0600CD8F9AA2FDF25C58D9D222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number: 159A
Signing time: Tue 17 Jun 2025 12:00:36 +0000
Manifest this update: Tue 17 Jun 2025 12:00:36 +0000
Manifest next update: Wed 18 Jun 2025 12:00:36 +0000
Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: a5BCsutL8kH5stxtqi4SDQmrgyzmYFIokf7T3i/8giI=)
2: iYCONvh_-VwWy1qAcfbIbkJR5L0.roa (hash: Mqum/pcnON+fvDqDFxLCGm1Sd5nnM2fK5bauzDteg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:3e:06:00:cd:8f:9a:a2:fd:f2:5c:58:d9:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Jun 17 12:00:36 2025 GMT
Not After : Jun 18 12:00:36 2025 GMT
Subject: CN=89402561a1dfeca128fab65498b87615856f5644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:e0:28:44:55:14:d0:c9:77:90:07:eb:64:
39:ac:9f:58:09:72:dc:ea:26:5f:0e:5c:7e:30:52:
6e:ae:35:ad:5e:d9:a2:17:57:06:2f:a3:92:55:58:
c8:51:56:a7:b9:3f:6d:4a:bd:3d:84:d7:e5:fb:8b:
47:a9:da:bb:1b:ee:69:2d:73:b8:5a:7e:35:d9:13:
3d:2c:2e:36:68:82:22:66:07:4a:8d:1c:67:bd:0a:
17:85:dd:70:2e:4e:59:b1:ae:6c:35:fc:14:21:0d:
c1:cb:7f:46:0d:74:3e:51:d4:db:e1:1c:c1:78:bb:
4e:db:27:d0:89:86:1e:01:aa:a1:0a:5a:9d:04:d6:
a5:90:63:c9:d9:53:f9:06:87:af:0c:6f:1b:83:e4:
58:f5:fd:72:77:18:ad:80:69:17:14:7b:c2:80:5c:
1d:45:49:17:b9:9a:cb:d5:37:d5:b8:b8:35:bf:03:
46:bf:fb:b9:e3:2d:7f:e3:f1:c2:43:0c:d2:15:6c:
a5:f2:d6:2a:aa:35:95:16:de:d5:d6:8b:52:31:67:
1a:64:31:68:a7:90:bd:25:b5:12:ea:28:3e:89:a4:
6f:6c:ba:d9:6b:ef:78:84:d5:fc:f7:0d:43:7f:97:
5f:11:32:03:3b:05:d5:13:91:46:93:41:6c:34:67:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:25:61:A1:DF:EC:A1:28:FA:B6:54:98:B8:76:15:85:6F:56:44
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f8:5e:5c:51:9e:05:39:cb:c5:3f:2e:06:9b:8b:54:38:cb:
02:70:b6:6c:92:cb:96:43:37:97:74:89:e4:2f:be:e0:14:d9:
7f:c3:93:86:88:0f:a9:02:d5:8a:aa:5e:bf:3d:87:da:cd:eb:
22:32:1c:88:f4:68:e3:17:ed:0d:03:30:d5:86:2e:77:54:72:
dc:6d:7b:db:fd:37:67:77:65:53:04:36:d6:40:e5:4d:07:ed:
f6:57:8b:76:b9:ac:d4:ae:8f:fe:1c:3c:b5:74:8e:42:ff:dc:
7e:e9:be:d2:67:21:94:4b:40:69:a3:4c:ab:d7:4a:19:7b:ea:
8c:97:57:c3:0b:9a:16:a7:0e:25:1d:6b:f7:fd:c8:c5:aa:22:
ce:e3:d3:cb:43:0b:61:c6:c8:89:fc:ae:4e:1e:72:0b:d9:41:
bd:c5:bb:1c:7d:b0:20:c9:b1:9a:4b:18:1e:88:ff:4f:e1:d9:
87:7f:b3:32:df:89:ef:a1:ae:a9:ce:81:78:ef:07:12:90:b2:
a4:1c:96:00:f8:21:36:61:a5:3c:bf:8d:ad:66:75:02:d5:61:
11:33:89:53:5d:5a:47:bb:8a:08:bd:60:76:78:c9:ef:13:cc:
23:44:06:66:93:9c:fd:8f:40:c6:15:8d:d4:20:1d:52:24:7b:
c2:be:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:44:28 2025 by rpki-client