Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: cR0XgovvkfjibY4cdOF8bU7fXeDJG0vciUszqPnNP/U=
Subject key identifier: 2A:19:60:7C:53:A7:AD:CF:8F:45:1D:FF:38:07:7D:3D:9D:23:56:4A
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 01976BBD2769BA25322DA76F833B536C9F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 00:00:47 +0000
Manifest this update: Sat 14 Jun 2025 00:00:47 +0000
Manifest next update: Sun 15 Jun 2025 00:00:47 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: LNuQ5KH7Dp/TAoCJita0Ja9Wa0L7yItOL4MCO7DLmJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:27:69:ba:25:32:2d:a7:6f:83:3b:53:6c:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Jun 14 00:00:47 2025 GMT
Not After : Jun 15 00:00:47 2025 GMT
Subject: CN=2a19607c53a7adcf8f451dff38077d3d9d23564a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:cb:a2:64:71:25:fe:d9:c7:7c:52:6b:a4:
58:4f:04:4f:42:24:bf:15:af:67:3f:03:12:12:96:
96:59:47:50:22:88:57:d6:38:9a:7e:d7:62:6b:1f:
56:fc:3e:46:ad:b5:be:10:7e:61:2d:79:ec:20:4a:
23:d2:45:f5:0a:2e:18:e6:ab:20:2c:18:25:e4:64:
92:55:e7:a1:7e:bb:55:d7:42:f4:75:b5:f5:b0:fa:
7e:f2:d9:89:75:2b:c5:4c:59:82:30:d5:be:24:50:
c5:ff:13:fa:4a:76:34:10:19:52:b2:3b:90:65:df:
4d:d6:fd:e2:cf:a9:f0:d2:65:99:51:db:94:a3:ff:
12:1c:be:8a:f5:8c:cf:7d:33:1f:84:cd:f9:9a:27:
5d:39:bb:ee:65:8e:06:7a:f3:fb:17:8b:6b:c2:96:
d3:62:a8:e6:eb:a4:21:37:57:d3:cc:45:4e:a4:de:
0f:b2:ad:20:dc:b5:36:17:82:66:c9:ca:ca:79:b6:
70:49:d8:cb:70:0e:80:be:ae:d0:bd:91:73:2c:9e:
87:10:75:a7:05:8e:76:4b:97:3a:75:d0:04:42:88:
a7:1e:e1:c2:b6:10:88:b7:a6:80:71:fd:33:96:64:
1c:81:7f:88:18:9b:3b:08:32:b6:14:f0:10:d4:e2:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:19:60:7C:53:A7:AD:CF:8F:45:1D:FF:38:07:7D:3D:9D:23:56:4A
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b5:4d:e2:34:40:04:51:46:ab:c8:94:b5:f6:5c:66:84:cc:
76:ea:de:1e:72:c1:9c:07:82:50:7b:a1:ca:99:c0:f8:69:33:
7d:ea:0b:ea:05:66:5e:e6:0f:3f:d5:fd:ec:f4:f2:1f:15:ee:
a8:10:35:c4:66:23:38:e1:67:56:1a:df:76:e0:09:55:72:04:
1f:75:f8:ff:ff:2e:f3:bb:32:8a:9f:c2:06:29:da:17:72:71:
e3:31:fc:f0:bd:7d:84:b7:db:dc:f5:e0:c0:7b:1c:13:b4:b1:
9a:47:16:d2:36:91:04:e1:7a:91:fa:e0:3c:49:e7:b7:46:68:
f4:16:2c:3e:37:bc:51:d0:12:82:fb:53:3e:3c:8c:53:f6:8c:
1c:d4:1a:3f:81:a0:92:6a:a8:aa:1e:bb:21:bd:12:02:1c:7a:
e0:96:32:77:e4:91:d0:a6:a6:ea:00:33:68:03:cc:aa:ad:ac:
ce:4c:84:22:ee:5e:92:bb:44:9e:30:34:51:80:67:1c:a2:d0:
1d:66:cd:23:68:90:1c:a5:3e:67:71:ad:cf:69:1b:c9:87:35:
54:d5:44:c4:77:31:2d:3e:bf:93:c4:c9:5c:ba:8f:cc:cf:a5:
52:5e:f7:6e:df:1d:d0:ac:47:5e:16:8f:85:13:d6:98:22:7b:
72:9f:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:46:53 2025 by rpki-client