Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: PIcMIbjCOmJUjwKzl68xeLi2EXKpKe9+3XSpWLiLHgo=
Subject key identifier: 39:C8:62:A4:D0:65:14:4C:84:D2:FE:4D:B7:47:A3:F6:BF:0D:3D:00
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 01976D06700725770CC513876208651526C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 0735
Signing time: Sat 14 Jun 2025 06:00:27 +0000
Manifest this update: Sat 14 Jun 2025 06:00:27 +0000
Manifest next update: Sun 15 Jun 2025 06:00:27 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: IzJ6j4Vz23OIm7dO6d0u/4sW9sNMtMx3lK/rQdxGibs=)
2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:70:07:25:77:0c:c5:13:87:62:08:65:15:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Jun 14 06:00:27 2025 GMT
Not After : Jun 15 06:00:27 2025 GMT
Subject: CN=39c862a4d065144c84d2fe4db747a3f6bf0d3d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:07:bc:34:51:6d:95:4e:f7:95:b1:75:cd:
37:3f:7f:b5:97:ff:47:b6:fc:8b:db:3f:ac:ae:cf:
59:c7:ee:15:c4:09:e9:e2:5f:f1:97:f8:31:af:8f:
a5:e5:72:08:55:55:bd:32:96:01:01:d4:70:9c:1b:
a4:d4:8d:94:93:b4:89:a7:6c:a6:fc:5d:61:83:6c:
2b:68:c3:4f:2f:fb:e6:cd:ef:cc:ff:32:fa:f1:28:
6d:72:21:aa:11:c5:6f:2d:61:86:ef:e0:a0:24:51:
7d:87:06:2e:93:ef:59:ad:74:dc:a7:69:29:2a:26:
44:fd:0f:2b:31:98:e3:b7:c3:24:91:78:c7:08:8e:
85:5a:29:68:d5:03:5f:99:14:b1:12:bf:22:e3:a6:
1d:b0:93:c3:80:69:14:e0:49:a2:8d:c5:e0:0d:35:
68:7e:68:65:74:99:3a:bc:e0:bf:00:b9:7a:29:15:
0f:b7:72:a5:5d:1b:89:06:e2:cc:ca:09:16:25:d5:
fd:35:35:f0:4c:05:ea:ba:4f:51:e6:70:d4:16:97:
71:08:c9:d9:27:c0:e8:ab:87:48:f5:66:2c:48:a3:
cb:99:8f:3c:fd:c1:e2:e7:fd:98:cc:43:d0:93:3f:
e4:f0:c1:99:d7:3f:85:d4:8b:e8:84:1c:3f:af:82:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:62:A4:D0:65:14:4C:84:D2:FE:4D:B7:47:A3:F6:BF:0D:3D:00
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:35:e4:ce:00:03:3c:95:3d:dd:26:38:b0:10:96:f2:82:ca:
41:75:83:76:9a:3a:d9:43:eb:84:01:9f:34:aa:2e:02:63:22:
20:79:b0:52:9d:8b:45:62:bb:94:2d:ee:5f:03:ee:bc:db:33:
fa:95:0b:d6:4a:f0:10:44:9d:4c:bd:db:34:f9:42:84:18:89:
74:c9:ef:06:1d:3a:a0:62:f6:42:81:01:89:3e:8c:8d:32:17:
0d:6a:64:61:cc:d2:ad:a6:e8:f2:1e:1b:4a:b1:bb:f1:c0:28:
ab:57:21:f6:61:3f:7a:e0:ff:66:6d:66:dc:aa:f2:d5:b2:a7:
e5:5c:18:c1:ad:9e:c1:8a:70:64:d9:4d:5d:e5:44:4d:bc:0e:
13:ca:2b:0f:19:cf:1e:11:3f:ac:74:04:34:61:cf:0e:5e:f6:
63:76:1e:0f:69:be:e6:cd:f0:b2:96:d9:ed:7c:63:11:9c:93:
66:cf:2e:2c:c6:22:ce:dc:47:e3:4e:ba:88:75:bf:e5:6d:6d:
17:c6:10:77:95:ad:7e:7d:bf:5a:13:61:66:c3:90:a7:62:0a:
39:37:92:e7:de:b4:c8:7b:ec:41:a4:e6:1b:9b:0f:01:e4:95:
10:1d:1a:a0:0b:fb:81:a6:17:bf:be:0c:3e:87:be:3f:33:73:
c3:dd:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:25:08 2025 by rpki-client