Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: hsuCFztv6xuC2kjAzJOXuAIKHmshPfpBhcqOFndMFYE=
Subject key identifier: B9:09:86:7F:4F:73:93:24:4D:F1:84:7C:E0:89:38:DE:6E:AB:15:50
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 01976D066176F9B9F115AB33D050BDD1852B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 06:00:23 +0000
Manifest this update: Sat 14 Jun 2025 06:00:23 +0000
Manifest next update: Sun 15 Jun 2025 06:00:23 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: ZMMuNxEJH0xdDxfYF1ByCjTIwT+7lxZyWgHZJ6i/kCM=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:61:76:f9:b9:f1:15:ab:33:d0:50:bd:d1:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Jun 14 06:00:23 2025 GMT
Not After : Jun 15 06:00:23 2025 GMT
Subject: CN=b909867f4f7393244df1847ce08938de6eab1550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:a3:1c:db:d5:0d:27:a3:16:dd:38:1d:fe:
ce:22:7e:a9:bb:30:fe:84:88:92:50:50:90:0b:9a:
99:54:d2:af:b7:48:9d:24:13:c0:7f:21:1f:4b:e3:
e0:89:b3:75:1f:de:45:a9:75:ec:05:8c:e1:d6:2a:
13:9f:8c:db:4c:fa:63:0d:21:d5:b9:f3:36:3a:df:
97:83:dc:96:72:5a:88:96:f0:e1:64:2b:e6:11:7b:
07:4d:67:bb:93:f0:ba:e4:48:21:12:60:e5:a8:29:
ad:9c:cb:86:e0:40:66:2b:ae:de:ba:4d:1b:17:25:
48:6a:43:26:82:fd:f2:91:91:23:c9:f7:d0:98:2c:
19:85:c5:aa:6e:dd:cf:05:8d:16:f0:7d:63:ef:c0:
09:85:a9:91:8c:35:59:b3:57:3d:63:14:07:fc:2b:
ce:38:2e:ce:96:e7:23:80:06:ae:3c:95:23:a2:8a:
9e:3a:e6:4a:44:e1:c2:49:fd:fb:de:90:67:c7:ca:
a9:0c:d3:1d:22:e3:10:93:04:cb:09:4e:c6:0e:ee:
9d:30:d8:e5:d4:9a:54:37:79:18:99:b9:90:c2:81:
56:82:f8:e3:9e:aa:5d:de:5e:d6:46:6f:ef:b3:2e:
95:79:42:73:82:23:ed:d2:0f:04:ba:9e:ad:40:ae:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:86:7F:4F:73:93:24:4D:F1:84:7C:E0:89:38:DE:6E:AB:15:50
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:cb:4d:54:1f:87:9a:8b:0b:22:04:9d:ea:a3:5e:ff:f7:
c8:ca:2f:3f:82:17:13:67:f7:9f:49:8c:ab:74:27:ff:50:41:
81:bb:79:2f:5b:b1:ae:1a:93:66:2c:26:ff:61:28:48:61:42:
c6:6d:8f:39:4c:0c:16:66:48:99:32:2f:bf:94:dc:8a:91:a3:
73:59:c4:82:66:c9:43:70:b8:1e:8c:ff:ea:10:f2:37:70:51:
18:5a:3c:f6:a4:01:88:54:4c:0a:04:ba:c6:a2:ca:c5:c7:80:
dd:59:79:e9:26:82:2f:9f:87:98:67:f6:ae:01:7a:3b:92:5d:
3d:01:f0:7a:02:01:61:bb:86:42:59:96:0e:98:50:56:0a:4b:
1b:c0:85:73:cf:01:87:aa:87:bd:22:85:28:27:d8:99:ff:55:
99:18:15:80:6a:e5:c3:50:af:d3:21:6d:14:57:18:4f:83:07:
b1:be:df:2b:de:56:90:a4:ae:40:da:86:49:91:a6:bf:72:b2:
0f:e7:67:77:0f:88:91:ee:b7:84:9a:eb:00:6d:80:39:13:48:
97:26:dc:4f:86:d6:78:14:15:9a:e4:38:cd:17:cb:43:c2:c2:
b0:74:95:f7:f5:94:fc:aa:e9:2b:a1:7d:79:1e:55:47:8b:1a:
d1:aa:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:59 2025 by rpki-client