Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: I9ccw5PF+RzILcubrP07C9wc0ADkIanSnuUg6Hpn6Zc=
Subject key identifier: 79:6D:7C:48:FF:06:39:5B:38:F6:D5:49:59:58:27:59:55:F3:61:E2
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 01976DAB9E1017C2211E9BA40ED4CDB8B0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 1564
Signing time: Sat 14 Jun 2025 09:00:52 +0000
Manifest this update: Sat 14 Jun 2025 09:00:52 +0000
Manifest next update: Sun 15 Jun 2025 09:00:52 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: b171/Xpo2wxvKMoJyHmIO9z3maZ6ZfmDaKT156uZsGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:9e:10:17:c2:21:1e:9b:a4:0e:d4:cd:b8:b0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Jun 14 09:00:52 2025 GMT
Not After : Jun 15 09:00:52 2025 GMT
Subject: CN=796d7c48ff06395b38f6d5495958275955f361e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:ed:db:cc:70:51:be:08:ec:ce:01:a8:e1:
28:93:08:0e:f6:1b:15:e4:42:c5:2b:2e:a8:a1:67:
95:1e:27:5b:75:d5:94:23:7c:ab:e3:97:60:a6:bd:
2b:d9:87:52:12:dd:10:f1:69:42:b3:49:70:85:45:
17:12:86:b3:21:aa:e6:5b:22:a2:c2:99:56:98:13:
a3:97:69:34:a0:3d:8f:8e:6a:71:08:fa:f5:9b:5d:
ec:17:f8:cf:06:13:b0:f0:34:a7:f3:42:41:b1:a4:
a1:ff:83:25:3e:46:4b:49:fa:03:91:98:a3:cd:79:
f7:f9:5d:07:45:4f:3b:64:9a:40:a4:07:3f:22:83:
ad:62:8b:3f:61:ec:ee:c4:ba:d2:17:a5:79:0d:89:
35:97:68:09:72:ca:c0:27:6b:75:f9:ac:93:58:08:
67:07:48:5c:05:6c:36:3f:fc:28:45:10:17:21:5a:
79:7a:39:61:d1:32:ea:95:75:f3:c6:36:99:3b:d0:
86:04:72:73:60:4c:3d:c3:b2:01:4f:67:31:4c:1d:
fb:be:a3:ad:bb:ca:64:04:bb:59:f2:ab:4a:e5:9c:
9b:41:21:4f:20:c0:ce:6a:48:71:61:07:b7:00:9c:
f8:3d:0b:42:fd:99:ff:a8:09:7b:93:09:68:4c:3d:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:7C:48:FF:06:39:5B:38:F6:D5:49:59:58:27:59:55:F3:61:E2
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4f:08:00:bf:52:21:2f:e2:cf:80:69:c5:5f:9e:b3:f4:a1:
56:83:86:1f:b2:98:52:29:36:5d:a4:a5:6f:08:1c:d1:23:21:
27:10:e1:51:ad:3a:e6:22:a3:8e:50:9c:51:ef:c9:16:67:7e:
cf:59:96:4f:df:93:36:ba:28:95:63:26:93:86:a2:2d:68:29:
61:6d:a5:62:25:34:99:7a:0a:7a:d2:9c:38:c4:79:0e:e3:6d:
83:ef:91:4e:b4:5e:52:31:1e:37:b8:0c:58:c2:87:92:9b:5c:
a5:ed:1a:ff:52:a7:fe:71:c3:82:c4:10:a1:81:6d:a4:0d:b8:
ad:c6:91:f5:e0:b5:3c:5f:07:38:4d:31:30:88:6a:7f:bd:88:
9c:fe:b5:bf:e8:51:59:f0:e5:69:40:34:e4:91:1f:e1:0c:d7:
94:5c:da:79:24:d3:84:52:3c:a9:10:b5:5f:e5:79:76:55:ce:
1a:d7:cc:ec:93:de:56:66:d9:54:c6:84:90:75:2d:09:e2:3e:
23:ee:1d:e7:8c:fb:5f:46:25:3e:4e:53:20:03:c3:c3:e4:5a:
2a:9c:2e:9e:75:ee:2d:e6:bd:91:e3:27:31:02:e3:57:cf:99:
8c:85:e1:85:c1:7b:f8:99:10:5c:a8:70:4a:0a:6c:35:af:f1:
07:aa:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:35 2025 by rpki-client