Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: tufI+/WLndJ2VrF8BSZWBb4NWlvWmzGiFQzVPNLrNVY=
Subject key identifier: 63:95:2D:E8:D7:F2:09:89:46:22:CC:CA:E9:96:37:CE:67:51:5E:48
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 0197696143ABD6EDFEB315CB4831B4DE7FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 13:01:11 +0000
Manifest this update: Fri 13 Jun 2025 13:01:11 +0000
Manifest next update: Sat 14 Jun 2025 13:01:11 +0000
Files and hashes: 1: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (hash: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=)
2: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: m0Ew/x4Dc+kiMhwAu140f9mFLij3zVfoe/7jwlFeYZU=)
3: l5yAXyPGwA9Y5lyLs2yb1MceJsY.roa (hash: AJ6lbq1xzcp35bTjVgiXhAuT5kBSyVNhwmMHHhgVeKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:43:ab:d6:ed:fe:b3:15:cb:48:31:b4:de:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Jun 13 13:01:11 2025 GMT
Not After : Jun 14 13:01:11 2025 GMT
Subject: CN=63952de8d7f209894622cccae99637ce67515e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:07:b3:fe:6f:b4:7a:ba:f8:5b:c8:c7:8e:
d9:f3:06:e5:57:3a:8c:3b:a9:24:81:cf:38:c2:63:
b8:d9:44:88:36:eb:f4:2f:13:ec:c2:f1:45:66:0e:
da:63:92:db:98:50:c3:d9:d5:a0:19:5e:7e:9a:11:
66:df:89:14:a2:26:ca:7a:6e:3f:d8:91:01:0f:6c:
f9:94:a5:31:b5:89:a8:94:5b:e0:6c:96:54:86:84:
ee:88:6a:51:fb:c1:e4:e8:0d:9e:3f:2b:9e:23:ba:
3e:35:0a:35:f6:f8:47:4e:7e:16:e5:dc:69:0d:44:
d3:ce:75:d5:43:57:d4:9f:93:0f:a2:ae:ff:60:de:
5c:19:67:ab:f8:24:b9:2c:75:2b:32:a7:de:bc:fd:
f4:c8:1d:ac:93:e0:a8:b0:d2:eb:51:a0:ac:26:84:
ef:db:7e:92:35:59:1a:c1:c6:31:cb:b3:fc:7e:90:
42:e2:a3:30:cb:3c:c3:4b:e7:19:6f:fb:0d:c0:79:
77:1c:f4:95:ec:73:6c:85:41:69:0f:7e:0d:de:16:
20:59:c7:f2:fe:b4:68:fa:59:bf:71:0e:03:09:e7:
e8:95:44:68:0f:e3:3c:84:17:a7:1a:a9:a1:f3:1e:
f8:98:ab:a3:cc:04:9c:36:78:74:2b:41:06:df:ec:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:2D:E8:D7:F2:09:89:46:22:CC:CA:E9:96:37:CE:67:51:5E:48
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:16:9b:11:d8:6f:7c:da:43:4b:53:f1:f4:85:4f:e1:83:6b:
0f:41:9d:03:2f:f2:4f:05:11:05:48:aa:8b:87:18:79:19:e4:
14:b0:51:df:e9:a8:b3:11:c6:e4:86:cf:1c:af:7e:60:b5:36:
a1:02:de:58:72:01:c5:93:8f:5e:1b:0e:c2:e3:11:1f:2a:19:
18:ac:70:2a:0b:f5:08:cc:fd:21:b1:c2:07:aa:7b:d2:2b:a9:
26:9e:4b:96:a3:71:d1:4f:f3:37:0c:eb:86:13:17:c5:a4:72:
41:45:b2:d5:72:98:b9:45:04:bc:07:ee:63:83:34:3f:0a:7b:
e8:e2:92:70:57:46:6f:b6:52:6c:c0:03:3c:cd:18:b4:1d:18:
b3:15:32:65:7a:9a:f7:b4:f6:84:bc:be:81:b0:ec:3c:8b:71:
e4:23:5c:50:ef:2e:69:9e:db:15:93:5c:d9:19:38:1e:13:79:
f2:b1:cf:0c:00:b0:03:fa:5e:19:9e:7f:70:e8:50:31:8f:4e:
38:4c:a1:72:72:11:2b:4f:bd:c9:9a:39:da:46:37:5b:6c:69:
40:26:32:f3:ef:74:4f:08:fb:ea:09:8e:1b:cb:6c:de:bd:e9:
d5:0e:62:bf:53:60:cb:b5:81:d5:d7:e5:e9:25:ee:43:aa:39:
a8:77:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:47 2025 by rpki-client