Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: 89ELKneZ7AJ/I5uPQZIoCR5fk5R1gr+f6uHIAjb2U9A=
Subject key identifier: A9:55:12:7F:FB:01:43:4C:44:06:81:91:28:1A:CD:C4:89:4F:6B:AC
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 0197688509410D46615E9690505DFE2049F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 09:00:38 +0000
Manifest this update: Fri 13 Jun 2025 09:00:38 +0000
Manifest next update: Sat 14 Jun 2025 09:00:38 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: DQk0LHr+2Uk15TmN+Rbn/ge8DzfvSNl6tYN7k9kjdPQ=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:09:41:0d:46:61:5e:96:90:50:5d:fe:20:49:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jun 13 09:00:38 2025 GMT
Not After : Jun 14 09:00:38 2025 GMT
Subject: CN=a955127ffb01434c44068191281acdc4894f6bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:c0:aa:fb:b7:80:30:2d:88:31:57:27:2b:
e9:66:a2:99:a7:07:0c:48:3d:54:2c:20:ca:f3:a8:
49:9b:6e:bf:42:4a:99:a3:51:b6:1c:dd:1d:4c:75:
1f:7d:62:1b:09:90:4f:2e:47:c2:44:9b:15:1e:1f:
af:93:b6:7c:f8:a9:ca:15:00:b9:d4:a3:e1:14:be:
0c:c3:81:11:c5:cb:5d:cc:d1:70:f8:4d:5e:6f:9a:
fe:1f:ab:28:04:a5:14:13:37:b0:24:93:f9:3e:3d:
21:12:11:8e:55:e0:d0:9c:1e:21:8a:68:c5:51:14:
7e:95:67:94:76:34:6f:8b:3e:59:dc:78:8d:53:46:
96:c0:ea:fe:91:80:e7:d7:73:b7:10:e2:4d:c2:49:
8f:6a:70:19:7b:f8:ee:8c:bb:e7:49:33:2f:14:df:
dc:32:40:a4:39:82:f0:f8:19:30:9b:b9:05:cb:31:
0b:94:81:e6:fa:70:78:78:9e:33:6b:83:b9:81:fd:
8b:d1:4f:e0:d1:d4:08:37:e7:ba:cf:0a:5d:cc:c4:
73:be:b7:32:e0:de:6d:82:93:3f:62:b3:b6:87:b1:
08:4f:75:fd:2d:07:91:36:57:d8:cb:28:d8:70:71:
3a:63:57:b3:93:29:a4:22:22:47:69:31:08:43:12:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:12:7F:FB:01:43:4C:44:06:81:91:28:1A:CD:C4:89:4F:6B:AC
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e7:9e:d6:9b:b8:61:8f:06:e3:df:61:41:bb:5e:a4:af:89:
23:28:c4:23:d7:e0:54:75:de:50:18:c1:5f:f5:65:e9:9a:10:
c7:3a:39:c1:68:46:9e:f5:7b:79:89:c8:9b:2e:7f:42:94:3d:
95:ab:c8:8e:ab:c8:85:ca:73:e8:ef:b5:ac:0d:48:d7:be:d0:
56:ce:66:86:34:38:e9:dd:1d:a0:21:22:53:0a:fa:31:0c:a6:
df:7a:0c:4c:8f:0a:de:de:f8:85:82:43:df:02:06:dd:53:6f:
8d:63:02:60:90:94:62:0a:e2:a3:ca:61:8f:d5:8c:1f:cd:97:
83:28:a4:d2:99:41:03:23:89:bd:46:cb:a1:9d:65:0d:17:27:
15:9f:ab:70:79:d2:3c:59:dd:cc:6c:a7:05:39:77:db:07:14:
b7:55:44:fe:aa:f8:67:e7:f7:53:cf:84:fc:a5:dc:34:bb:e3:
4d:6f:ef:e8:61:94:4e:e3:17:0a:30:97:4d:96:23:ea:53:16:
a8:8f:38:0f:59:f9:b3:fb:e6:45:02:35:c5:40:3c:a3:bf:ce:
b0:3d:25:3a:ee:07:71:c7:54:5e:b9:75:8e:5b:82:3e:79:e2:
69:7b:2d:ee:86:c8:f7:c2:a4:08:44:06:47:f4:d6:b2:00:d0:
c1:96:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:31 2025 by rpki-client