Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: gUpXBIIZROOAxMbQ4KvC6wF4uM7nWkAr9A6gu+DI0A8=
Subject key identifier: 2B:E5:99:8F:B1:C2:85:80:E9:1F:E7:AD:2B:BE:E7:04:E7:EF:9D:9F
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 01978C2391663B8550330ADFCD256CC3BAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 15A0
Signing time: Fri 20 Jun 2025 07:00:30 +0000
Manifest this update: Fri 20 Jun 2025 07:00:30 +0000
Manifest next update: Sat 21 Jun 2025 07:00:30 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: TONbi3BIRaRV/Vp99LzXDt+oRYp764hhWtYJCXYXnZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:91:66:3b:85:50:33:0a:df:cd:25:6c:c3:ba:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Jun 20 07:00:30 2025 GMT
Not After : Jun 21 07:00:30 2025 GMT
Subject: CN=2be5998fb1c28580e91fe7ad2bbee704e7ef9d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:97:59:72:16:61:c3:48:f8:8e:d9:e3:8a:
71:a8:8f:a8:b7:86:be:74:d3:1d:73:8b:9b:28:e8:
b7:23:9d:c4:c8:cc:6c:63:2d:bc:5d:05:41:48:b1:
df:7d:f4:6d:92:9a:27:01:88:c0:6e:a6:54:ca:fc:
d4:ac:18:e3:92:80:ef:22:7c:92:00:41:e1:81:b0:
4d:48:dd:4c:c1:50:ff:79:4e:87:a9:ef:e1:3b:37:
c0:e3:d8:3c:22:e2:91:08:61:a9:f1:37:63:35:d3:
27:43:d2:14:ba:d2:77:2b:52:79:82:8f:37:c2:f5:
de:96:d7:fb:5a:71:1e:5e:86:24:a2:d5:da:91:ee:
02:32:b9:72:96:05:09:7b:63:34:34:54:9b:d8:9c:
49:65:d5:52:8f:7c:1b:de:fc:15:38:8e:c8:e1:e0:
35:56:2d:a9:e3:e8:d6:5d:ba:72:87:89:24:cf:19:
0e:6d:c7:87:dc:19:08:41:16:10:e9:36:00:6f:5b:
87:b6:11:92:7e:3d:50:e3:cd:b8:d9:92:3a:9c:78:
34:e8:18:8a:4c:9c:50:63:4a:d2:dc:91:b6:d1:46:
66:8b:c4:a0:24:21:fd:cb:4d:0f:5d:24:89:05:f9:
ee:a7:43:9d:ce:83:c3:33:ca:e8:f0:e5:67:26:a5:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:99:8F:B1:C2:85:80:E9:1F:E7:AD:2B:BE:E7:04:E7:EF:9D:9F
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b9:cc:ae:38:f7:5d:2b:42:a1:9a:36:52:66:cc:13:cd:28:
34:be:2f:ef:dd:85:0d:be:1b:c9:de:a4:1f:95:fd:0a:8b:e5:
d4:8c:da:7b:0b:6d:b7:b8:c0:e8:88:05:7e:39:a2:d6:3a:8e:
d7:16:8a:e8:39:8c:0f:4c:69:ec:5c:c4:9b:e6:ba:7c:53:d6:
c0:ae:72:47:4c:ed:0e:3e:be:4e:89:40:c9:78:67:a4:22:f3:
73:4d:a1:81:f3:a0:35:92:6b:71:a5:b8:26:d4:6d:51:f1:a1:
0b:3d:fb:8d:91:2d:91:77:01:db:f2:8a:a1:64:89:cb:12:5c:
ba:24:90:ae:a7:99:ac:ba:c0:31:50:81:ba:10:42:43:82:d1:
f0:f9:2e:01:54:f6:99:40:b5:44:3f:5d:26:59:04:42:de:be:
63:23:af:27:ee:3e:18:e2:7c:e8:8d:59:85:96:bd:b7:02:c0:
5e:1f:42:fa:79:5c:22:fa:c2:10:60:0c:a5:58:63:1a:ec:06:
60:95:d5:ee:47:d1:26:d2:a2:5c:e2:16:75:b7:02:45:c7:95:
ec:81:bd:ee:2a:68:5d:ea:10:7d:07:3c:9f:2a:6b:b0:40:4e:
d9:fb:75:c4:df:2a:8a:58:03:bb:68:b5:c7:20:15:0c:7a:6d:
8d:59:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:56:22 2025 by rpki-client