Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: jEsOwB3oyR5Spcj2wT0h+DnRG5IsMDu/1NaFWtfBYjk=
Subject key identifier: F2:72:AC:71:9B:43:86:82:EB:CC:67:EA:1D:31:5B:01:67:AE:E7:90
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 01977CB050FF1A98944DC8B3B5BB0FC7E22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 159A
Signing time: Tue 17 Jun 2025 07:00:19 +0000
Manifest this update: Tue 17 Jun 2025 07:00:19 +0000
Manifest next update: Wed 18 Jun 2025 07:00:19 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: NrxRLsdz3BwL7QoLsACJIOEu6kUn0BTJ5fKoWOX4BQc=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:50:ff:1a:98:94:4d:c8:b3:b5:bb:0f:c7:e2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Jun 17 07:00:19 2025 GMT
Not After : Jun 18 07:00:19 2025 GMT
Subject: CN=f272ac719b438682ebcc67ea1d315b0167aee790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c9:a1:ef:5f:b5:17:02:f4:d9:ee:d2:3a:af:
a3:e4:83:8f:e5:96:f6:47:5b:f9:ee:f9:45:0a:7e:
12:8c:55:62:7c:5a:3a:0f:2a:09:33:f9:a5:52:7f:
25:0c:22:bf:3f:58:1e:25:1b:42:f5:c7:2c:0f:07:
f6:6e:0d:23:27:6e:69:28:8b:d0:cc:49:c9:ee:01:
a7:4b:3b:f8:fc:ff:8b:50:44:33:54:aa:1f:a2:fe:
97:5a:a5:b3:52:ed:1c:25:41:18:f6:c9:2b:68:c3:
fd:3e:60:95:93:68:09:67:58:cd:34:87:0a:a6:78:
fc:9b:b9:4e:22:75:dc:51:1b:5d:df:0f:e3:ab:08:
88:28:74:0d:00:f9:84:c5:20:ad:5c:81:80:4b:6e:
2b:dd:70:72:b5:5f:8e:df:33:58:21:1e:a0:89:c3:
23:fe:e0:cb:03:19:54:21:c1:52:49:26:c8:73:a6:
b4:8d:53:36:5d:23:d5:bc:b7:d6:ed:3b:74:69:b7:
cc:b3:63:10:60:e9:9f:50:a1:51:8e:89:b3:d3:6c:
ea:91:12:75:1e:78:de:26:89:63:99:00:d7:1b:3b:
bc:06:af:66:30:a3:2c:f8:6b:fa:4d:72:6a:93:55:
a3:ac:19:96:23:72:69:85:41:6b:61:b3:22:52:04:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:72:AC:71:9B:43:86:82:EB:CC:67:EA:1D:31:5B:01:67:AE:E7:90
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:24:b4:69:85:eb:48:f3:f3:a7:78:20:cd:57:26:67:18:39:
96:8d:8c:90:ad:04:47:27:05:ee:04:0d:9b:b4:f1:70:4b:20:
68:44:02:e0:c1:fd:92:e1:14:3b:a0:30:b9:03:98:5e:6d:a7:
e1:36:d0:f9:5e:47:95:ba:95:17:7f:d7:54:4d:0a:ac:e1:db:
5e:45:cd:f5:65:b9:12:e4:a6:3a:9e:d4:9e:81:79:e1:43:27:
4a:e5:20:c0:14:b5:98:32:ac:af:77:12:ed:51:44:33:54:f6:
f7:51:76:5e:79:5c:16:0c:05:4a:67:0e:77:07:79:32:f7:8d:
4f:67:27:f7:05:f4:c1:53:db:8c:e0:f3:89:b8:e4:64:5c:be:
e1:b8:61:3e:1e:86:08:cc:40:35:4c:12:94:06:09:a3:b7:f5:
b0:b6:48:ab:25:15:84:b8:01:8a:2c:57:50:4f:05:97:69:e9:
11:71:23:d7:3c:0d:c9:1e:20:05:75:35:e1:03:81:24:f5:e9:
02:c0:17:c2:a2:70:2e:2d:73:44:d3:16:3e:ff:2e:00:a5:08:
c7:7e:3c:9a:c4:9c:29:dc:fd:51:a5:fc:54:59:d1:63:be:99:
51:a5:79:7d:0c:e3:5a:b5:05:85:63:33:f9:bb:d8:c4:b7:18:
72:bc:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:18:52 2025 by rpki-client