Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: RcsSG/kC2ripdBuGzfvPByCUPgAyu9YluiygXBpaNDM=
Subject key identifier: 64:3D:B3:CE:7E:F4:9E:2A:F5:FB:3C:02:37:84:E8:32:B0:9B:C1:76
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 019779788E8C1FBDA35200D52F30CF1369D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 16:00:33 +0000
Manifest this update: Mon 16 Jun 2025 16:00:33 +0000
Manifest next update: Tue 17 Jun 2025 16:00:33 +0000
Files and hashes: 1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: Tt7fQosuxBZOLCMqZIMZ32HY2ZObf68dNas+Ze9ZtuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:8e:8c:1f:bd:a3:52:00:d5:2f:30:cf:13:69:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Jun 16 16:00:33 2025 GMT
Not After : Jun 17 16:00:33 2025 GMT
Subject: CN=643db3ce7ef49e2af5fb3c023784e832b09bc176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:2d:8d:6c:3d:c5:4a:d1:f5:b5:4c:ee:5a:
bc:6c:8f:a5:a1:d3:f7:04:38:2b:1f:d5:2a:e2:9e:
35:4b:53:45:8d:14:c1:5f:52:42:14:6b:5c:85:43:
a4:7c:04:4c:60:63:ef:3e:f0:53:1e:d7:ba:a4:0a:
a6:2d:37:6b:f5:42:af:d5:c2:ad:e0:bc:65:5e:b1:
fe:db:44:5e:f2:6c:1c:16:93:69:13:c5:6a:a2:71:
1c:e5:19:70:3d:3e:92:63:50:24:cf:8a:d0:f7:36:
1e:30:6d:29:1e:0f:ce:2a:57:bb:26:78:b9:be:a3:
07:79:14:cc:1e:74:31:35:c2:94:8d:c6:08:82:5b:
fc:4b:6c:49:cf:d3:28:5e:2c:c8:47:08:df:59:32:
b5:9e:31:06:d9:d3:ff:26:be:3f:78:2b:b1:e0:95:
00:3f:6a:56:b9:c5:24:22:8b:34:a4:91:e2:56:03:
63:a2:ed:05:35:e3:97:70:98:06:50:b7:e0:74:7b:
6e:20:e7:90:49:ba:31:7c:09:88:84:24:b5:22:9c:
55:3d:d6:bd:ea:35:ad:7d:07:a3:23:78:db:81:4d:
ea:69:ef:03:8f:09:c1:8a:f8:75:ed:e3:ef:d5:0e:
ae:4c:c5:96:6e:d8:77:da:f1:f8:13:e2:0b:de:06:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3D:B3:CE:7E:F4:9E:2A:F5:FB:3C:02:37:84:E8:32:B0:9B:C1:76
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2c:b4:b2:bc:c5:15:9f:a6:ec:4e:70:d2:e5:19:ce:77:ca:
77:88:6f:13:58:73:4f:8b:63:91:4c:01:65:35:39:8f:0b:63:
7a:e1:fc:a8:91:17:c7:70:67:9f:1f:30:0e:a6:21:be:bc:eb:
d9:4d:25:16:9d:dc:db:59:0f:3d:e6:a0:10:38:aa:c3:15:79:
8c:81:88:27:55:c7:38:6c:42:5f:76:89:8c:a0:5e:63:3c:cd:
6f:41:f2:01:35:c3:e4:ff:d0:ef:78:44:23:08:dc:08:7f:1b:
23:da:ba:9b:75:76:93:2a:b6:8c:a8:bb:c5:6d:e6:40:d3:1e:
43:24:a3:1a:94:97:b9:1f:57:1d:ac:5b:19:25:0b:14:05:42:
ad:88:70:81:d2:00:23:68:9c:2c:2a:31:97:f9:69:86:8b:f9:
9f:e9:c0:a0:f7:e6:a4:ac:47:34:58:b3:0e:ef:d7:0e:79:ad:
44:61:c5:52:f6:10:a1:6e:bf:72:22:c1:4f:dc:83:0d:89:4e:
64:82:33:c0:e4:2f:32:cd:4c:e0:aa:97:f4:32:8a:eb:26:b8:
af:b5:9f:54:b8:be:78:bd:7a:a2:7d:ad:9f:9f:8a:08:2c:ad:
b0:9f:01:d3:a7:aa:87:7b:1a:a4:fd:a4:f6:22:e3:61:d2:d2:
2e:2c:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:24:05 2025 by rpki-client