Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: KOHKsJjHtndr9wsjvb0+t3MDDxe8JCG3YrGp3aWwbzY=
Subject key identifier: 80:5D:0D:9A:94:8D:3A:97:79:1E:55:DF:FF:3B:A1:49:F6:B2:C9:6A
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 019768BC61EAEA5560469BB175568D3629D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 11FF
Signing time: Fri 13 Jun 2025 10:01:05 +0000
Manifest this update: Fri 13 Jun 2025 10:01:05 +0000
Manifest next update: Sat 14 Jun 2025 10:01:05 +0000
Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=)
2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: 3Xrff2ecncFeKIYCMENGl15eeIfZjsZy65OhhwJlksU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:61:ea:ea:55:60:46:9b:b1:75:56:8d:36:29:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Jun 13 10:01:05 2025 GMT
Not After : Jun 14 10:01:05 2025 GMT
Subject: CN=805d0d9a948d3a97791e55dfff3ba149f6b2c96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:42:29:98:f9:03:83:98:65:80:de:4e:57:
16:a9:85:95:55:c2:b3:59:7e:e4:91:c7:5e:53:ac:
24:21:8f:0f:8f:b4:f7:07:73:d7:f6:0d:65:90:ba:
ae:55:c0:92:ba:c1:3e:97:09:92:8d:1c:04:b9:9f:
7b:20:e5:55:d9:06:7d:1e:bc:14:1c:6c:ad:ce:03:
89:01:c9:8f:74:d8:f1:7d:39:74:82:e1:20:44:3d:
ec:95:60:70:70:59:a3:45:c9:1e:c8:05:64:86:54:
e4:e8:a4:25:65:cc:4a:29:82:70:13:a3:52:9b:8c:
1f:5a:2a:75:31:b8:26:0d:75:c1:72:61:c3:35:3b:
c5:43:52:99:d3:1b:46:dc:a9:a2:79:a0:75:92:e9:
eb:f1:df:ba:38:55:64:20:13:4e:bd:fa:74:b3:1c:
83:f7:0b:d2:19:f1:a5:0b:2c:69:8c:04:9a:af:a6:
fa:3b:50:04:9a:63:3b:1f:23:a3:34:51:66:38:20:
8d:f8:d3:8f:37:02:35:eb:e4:30:99:6b:b9:14:8e:
a8:5b:1d:d2:fa:12:79:2f:90:1e:8e:8e:39:ea:e7:
b7:44:44:92:a7:67:c3:b0:84:03:22:f8:93:64:ca:
e4:a9:4d:ef:8a:50:57:98:db:c4:65:79:01:7d:1d:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:0D:9A:94:8D:3A:97:79:1E:55:DF:FF:3B:A1:49:F6:B2:C9:6A
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ea:a4:a7:cf:7b:d2:94:e9:03:db:bb:fb:34:bc:81:14:ac:
a6:f5:29:6a:71:1c:74:c7:d2:73:d4:f3:42:f2:e5:4e:e5:46:
e6:ef:63:8e:6b:4f:08:54:db:8e:85:cb:26:de:2c:23:04:1a:
e5:25:92:58:2e:ec:3e:f6:b5:05:7c:63:7c:6e:5e:dc:b8:ab:
e3:6b:12:9e:81:1a:4a:a8:6e:b3:1c:c9:d0:79:3c:87:e3:5e:
a1:d0:36:24:8a:a3:a3:37:6a:83:80:11:c5:48:12:95:80:70:
ac:f7:db:22:e7:d6:1d:da:d8:44:79:51:63:78:ac:e2:c2:6b:
1e:d5:b8:84:9a:a0:96:46:de:7d:b3:04:16:87:f6:9c:04:3a:
39:33:f3:2b:b2:21:00:15:ed:88:4d:dd:54:94:87:95:36:21:
a9:68:69:6f:04:d9:3d:e1:87:23:3f:b4:f1:10:f9:c3:38:04:
b9:ea:a9:5a:fb:94:78:cc:df:f5:6b:09:b5:b9:28:63:68:60:
e4:aa:21:51:7a:d6:d4:05:6b:00:f9:bd:a2:41:15:03:2d:32:
2b:0d:b6:a2:eb:51:83:ab:4a:ca:d8:3b:7a:81:b3:94:98:7a:
56:fd:f4:17:23:2a:b5:b2:a8:e9:c3:35:69:82:0e:79:6c:6d:
46:9f:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:58 2025 by rpki-client