Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: LFFpDm/akbeDP/OdF941kehEZfhc5eAbOtyIZKJKOQ4=
Subject key identifier: A8:75:02:47:B8:1C:78:B4:4B:CF:6C:6C:A3:E8:EF:FE:D7:A8:83:BE
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 019776AE9263C5C59FCAA53C6040A2C4637A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0ABA
Signing time: Mon 16 Jun 2025 03:00:41 +0000
Manifest this update: Mon 16 Jun 2025 03:00:41 +0000
Manifest next update: Tue 17 Jun 2025 03:00:41 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: 6APesaJi10bY5QZB1KZMRXFbnCfHOCZN1IYs7Xacivs=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:92:63:c5:c5:9f:ca:a5:3c:60:40:a2:c4:63:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Jun 16 03:00:41 2025 GMT
Not After : Jun 17 03:00:41 2025 GMT
Subject: CN=a8750247b81c78b44bcf6c6ca3e8effed7a883be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:57:2e:2a:ce:f1:fd:eb:7c:bc:9b:fc:79:
f4:19:0f:66:30:44:b7:36:0c:24:89:70:4e:81:88:
13:45:16:b0:e1:95:bc:cb:fa:a4:31:a2:fb:6b:1e:
e7:0c:5a:0b:63:9c:a6:79:dc:47:88:1c:d0:3a:d2:
96:03:55:42:1c:0b:68:7d:6a:9b:2d:61:89:2a:d4:
43:e6:c6:f1:fd:2a:95:42:4d:1e:51:b4:1f:58:08:
14:a7:2c:d3:16:1f:a5:cb:91:17:8f:f3:48:db:5c:
62:d3:af:d9:3e:b9:9e:7c:e9:12:26:ae:82:ed:be:
02:db:82:00:73:9c:64:80:5a:4e:4f:2e:17:5f:af:
b5:fc:ad:00:77:06:1b:b8:79:95:94:48:74:2e:5f:
cd:49:6c:17:cd:35:a4:82:29:ec:14:ba:08:4f:e6:
42:b9:f6:a4:86:9b:3e:6e:a2:f9:51:03:20:e4:1c:
3b:04:4b:f9:9d:d8:3c:c0:32:d5:b9:c5:79:70:32:
5c:d9:7a:ee:9a:95:ec:39:6d:59:36:3f:e3:38:61:
46:f5:36:af:4a:04:d9:c8:56:91:ca:45:04:24:d3:
a9:d1:60:0b:4b:b3:1d:24:91:bd:3e:f6:86:94:04:
e8:23:1e:d8:42:02:74:4e:3d:15:ea:b9:e8:2e:9f:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:02:47:B8:1C:78:B4:4B:CF:6C:6C:A3:E8:EF:FE:D7:A8:83:BE
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:6b:78:73:5a:d6:66:50:5b:ad:79:af:9a:d9:b9:23:ab:
da:94:c6:15:17:57:82:72:6d:19:1c:d3:37:93:55:6f:bb:58:
9d:fa:cd:60:0a:50:d2:d1:e1:84:d6:71:04:2a:c2:85:87:26:
3d:44:74:28:03:6e:e5:42:bb:fc:6b:62:e6:36:28:0c:d1:aa:
be:15:2b:62:b3:e1:69:4f:48:85:73:f8:4c:9f:2e:55:f8:08:
81:7b:27:ba:bd:52:31:b6:82:a3:49:cf:61:73:7a:63:4f:93:
ba:f0:24:fc:8a:8a:c0:82:8b:fa:24:5f:0b:ed:c5:ba:fb:48:
e0:2d:7f:5d:b3:8b:a2:a9:0d:ba:2e:22:58:6b:71:d9:f9:f1:
c2:62:da:88:a7:77:52:09:f2:c2:7a:80:20:bb:62:d2:a0:d6:
20:8b:a9:83:2f:56:48:59:c5:6f:03:eb:17:f2:65:4c:8a:fd:
6c:8d:84:26:b6:19:2c:17:ce:08:99:dc:16:0b:54:eb:e8:23:
67:c6:62:93:61:c4:03:e8:6c:4b:d0:6e:eb:73:48:d8:c4:cb:
5c:f6:17:54:43:ed:af:8d:48:9b:95:eb:2d:1a:05:8a:27:74:
35:0b:1b:4c:b1:32:21:fb:1b:cf:d7:be:24:cf:9d:b1:f7:06:
8c:8f:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:14 2025 by rpki-client