Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
File: gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json)
Hash identifier: YkxpA8knzi3oGItk4u3jmQ5H8uIBMiiW5hOJxSL+d74=
Subject key identifier: 1B:38:02:D3:E2:A1:37:38:17:FF:29:5E:0E:24:0C:24:3C:27:CB:C1
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Certificate issuer: /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial: 019776E5C4D764709B5CC47ACDB5D131E647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
Manifest number: 0710
Signing time: Mon 16 Jun 2025 04:00:58 +0000
Manifest this update: Mon 16 Jun 2025 04:00:58 +0000
Manifest next update: Tue 17 Jun 2025 04:00:58 +0000
Files and hashes: 1: 6-Zj3bcyCjNacB1xPlmd-41FIz0.roa (hash: A56X5AQbB29BB1sjg1qgfONBr80piND7T2p/Wos86gU=)
2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: sXJutKGX4+Os4cHwlQS0TqUoPfERVe1am0i+TJF59K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:c4:d7:64:70:9b:5c:c4:7a:cd:b5:d1:31:e6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Validity
Not Before: Jun 16 04:00:58 2025 GMT
Not After : Jun 17 04:00:58 2025 GMT
Subject: CN=1b3802d3e2a1373817ff295e0e240c243c27cbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:87:3d:e4:02:88:48:4d:ab:2a:ad:6d:d6:
9b:92:a0:df:81:ce:84:c6:12:0e:11:2d:05:71:11:
32:5d:cc:42:ac:f7:ab:f2:7e:3d:d3:65:0d:c2:e7:
08:fc:fd:aa:04:86:b7:05:61:54:43:1a:cd:13:11:
24:b2:db:fd:f4:d1:3f:08:84:07:83:c0:ab:66:aa:
26:32:9f:f5:aa:3d:58:55:12:83:a2:a8:a3:58:1c:
83:fd:6e:74:ed:c4:30:97:41:ea:20:ce:d5:71:19:
48:1c:78:ff:0f:0b:d3:34:b0:b9:5e:07:3e:d9:24:
e4:5d:51:79:3d:d5:5a:81:e4:e8:d9:83:0f:fe:80:
09:28:9a:b5:97:d6:21:65:8c:f8:6e:b5:4e:03:f4:
35:82:3c:b1:b3:e8:87:73:eb:24:5c:ba:92:bb:1e:
a4:6d:fa:a8:eb:b2:65:44:44:9f:1f:a3:b4:af:46:
f6:9d:5c:ca:4a:32:e4:6c:d4:1e:59:11:cb:eb:d5:
02:6d:74:9c:7f:ef:22:7b:4a:5b:86:ed:29:54:0d:
9c:b7:f3:3a:c8:01:f0:8d:0e:e4:4a:a7:7c:51:ec:
77:ea:85:7b:af:cd:46:af:ed:b7:fa:73:e5:b6:5e:
3b:8a:8b:3f:95:77:b3:05:26:42:c3:02:d6:41:c7:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:38:02:D3:E2:A1:37:38:17:FF:29:5E:0E:24:0C:24:3C:27:CB:C1
X509v3 Authority Key Identifier:
keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:db:54:8c:5e:10:68:d1:ff:92:e4:44:da:96:7d:eb:ca:8d:
4c:7a:de:89:01:45:b6:41:8d:64:f3:d7:d8:f1:7b:74:7e:04:
86:23:a1:6d:17:a0:1c:4b:39:81:32:b0:5c:a1:18:7b:cd:7b:
f8:c8:76:1a:c9:0a:fb:2d:f4:80:a9:e8:34:a9:35:c5:d8:ed:
b1:94:e9:48:3a:25:a4:3c:2f:36:c5:30:fe:d1:3d:9f:94:4d:
4b:ce:26:db:fc:82:e5:27:aa:3d:c4:7b:8a:a1:67:88:71:d7:
9e:00:b7:24:a1:4b:7f:3b:8c:77:79:57:91:b4:72:e7:2d:f7:
05:ed:e3:82:de:dd:19:e1:a5:dc:bb:14:a3:94:df:c2:bf:a3:
0b:21:9a:bc:f1:e6:dc:8d:21:91:b7:cc:e6:7c:c5:ec:7d:e7:
88:1b:d4:0b:99:48:84:47:68:ff:3e:81:64:a2:25:ca:8c:ad:
dd:10:73:f4:ca:e7:97:a8:cc:9a:c7:4a:ac:c9:56:ad:44:d9:
95:9a:f3:31:be:0a:5b:42:2f:7a:89:6d:5d:27:aa:e0:0e:03:
ba:9d:36:8e:f5:40:b5:68:5e:e6:fd:29:f5:a8:60:67:45:95:
d3:c9:55:86:a9:6f:d1:ed:fd:ad:52:b0:39:dc:1b:62:13:0c:
a8:0b:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:12:50 2025 by rpki-client