Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File: gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier: Ob9f5HauQ63ZsaA/enidJU7Yte0qYEh7Syysixve7eg=
Subject key identifier: 1C:0D:19:73:0F:5E:29:52:FB:62:2D:67:E8:C3:63:23:FF:31:1F:E1
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 01978B47D011EF43471353A4EE6614EDC2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number: 15A3
Signing time: Fri 20 Jun 2025 03:00:28 +0000
Manifest this update: Fri 20 Jun 2025 03:00:28 +0000
Manifest next update: Sat 21 Jun 2025 03:00:28 +0000
Files and hashes: 1: FG-bEioa4civ6jvoSnaUtHZPEQE.roa (hash: w4e7tpxeaBQHMoRYqhi0o1qJLopKx8fwD7s6iGDvqgY=)
2: aGlvUdVJOWbqaat4vglrkQH1tNo.roa (hash: svvIGknsbQhU6YBIsZkBO7bjTdjQ0GNK1yuIVKiea6E=)
3: eZ8arxnGDWk7xkVHJ1bRXWZ355M.roa (hash: AeIoI4f85DUeWbFvZ4SxFOX1IxHcOJjIFceKESNKiJo=)
4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: I/RL8kOnvM6eLoeK2uKMWhBJcOt9jZJfu1Mj1iaExVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:47:d0:11:ef:43:47:13:53:a4:ee:66:14:ed:c2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Jun 20 03:00:28 2025 GMT
Not After : Jun 21 03:00:28 2025 GMT
Subject: CN=1c0d19730f5e2952fb622d67e8c36323ff311fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:0a:ea:a1:b9:15:49:d0:0b:ff:dd:82:cf:
9c:61:3b:0b:09:39:17:cd:8d:43:99:78:0a:bd:b6:
79:46:9a:dd:77:31:3a:7b:c1:b0:16:f4:70:5e:aa:
f1:bd:04:79:bc:09:ff:6a:c5:6a:70:2f:0e:a6:f0:
c1:e6:0d:43:ca:01:63:ca:2b:34:c2:e2:f9:5d:5e:
24:60:17:27:3f:9d:14:2d:8a:d6:da:b5:02:64:09:
5c:e0:27:86:3f:27:c5:83:b2:c7:2a:1b:60:e9:08:
fb:76:43:b2:78:0c:b5:89:e4:7c:94:33:20:c7:fc:
16:bf:36:69:ac:1d:3d:01:4e:5f:49:95:fa:6a:6d:
ea:00:ea:7a:3e:40:ba:ba:ac:a8:14:3a:38:de:2c:
80:3c:ee:b6:54:3f:be:c2:ce:a5:7e:ef:32:9e:7a:
97:7b:40:c8:ab:97:b0:be:5c:20:2b:35:5a:57:54:
d2:0f:c4:3d:c7:3b:b3:f2:70:41:e8:d8:6b:9d:5e:
b6:81:a2:34:c6:30:ef:9a:f4:08:2f:4c:7d:90:06:
0b:1c:41:c7:ac:52:36:4a:9e:b9:f3:a2:c6:73:14:
a8:d1:77:6a:17:f3:65:ba:cd:7c:f2:a3:78:32:9a:
03:01:3b:2a:d7:a3:f0:6e:d6:ef:b0:9e:d7:c0:f3:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0D:19:73:0F:5E:29:52:FB:62:2D:67:E8:C3:63:23:FF:31:1F:E1
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f5:dd:e8:f7:b2:7c:53:8f:cf:91:8b:57:42:e8:23:bf:5f:
5a:b2:42:0b:81:83:50:67:80:c8:14:5a:d5:d1:0f:51:3f:a3:
a7:c6:cb:c2:ee:e5:37:66:09:56:02:eb:4a:a5:a3:fc:4a:80:
30:40:e7:3c:8b:40:01:4e:b6:e0:08:25:f1:38:cd:6d:16:39:
f1:50:86:f2:17:6f:b0:e7:19:0c:fa:5c:3a:f6:cd:69:a3:53:
32:9c:73:6c:20:bd:8f:7f:54:8e:97:c3:2f:62:e8:54:63:09:
81:ce:df:c0:bd:7d:23:2a:5c:e0:7e:cb:c0:0d:5e:ac:d6:81:
2c:48:1b:88:f9:c7:28:4a:43:53:03:a6:22:fc:c6:ec:0e:79:
c6:28:ec:5b:5a:0c:a2:cb:a2:cc:bc:68:51:1c:97:de:c7:c2:
57:79:27:e2:51:ab:46:63:ac:f2:20:84:15:b8:2a:45:12:bc:
7c:91:66:c0:bb:e7:81:19:77:57:d3:e7:51:24:da:f1:96:9c:
ae:11:5f:eb:d5:35:5c:06:c8:ee:ef:90:ab:f4:0b:14:73:4e:
5a:ee:d0:29:1a:69:92:6f:2c:25:f9:f8:ff:e9:3b:78:3b:c0:
e5:95:b6:9b:96:41:13:58:7b:b5:91:4d:01:22:f6:7b:b8:34:
43:cf:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:39:46 2025 by rpki-client