Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
File: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json)
Hash identifier: ViA66j5AMyX31CP5veeZUBXsqn2cNjst6gKLRvi/yW8=
Subject key identifier: 99:AC:85:65:04:17:ED:F3:93:CC:32:60:2E:41:20:5E:C7:A3:C6:7F
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Certificate issuer: /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial: 01976DE2BF3F2BF614FC7F61725CF34BE01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 10:01:05 +0000
Manifest this update: Sat 14 Jun 2025 10:01:05 +0000
Manifest next update: Sun 15 Jun 2025 10:01:05 +0000
Files and hashes: 1: 2nLsQqPE5llC17hwQkkSOMH6bAs.roa (hash: bh0+wwwfSzTifnsB5Zplv4YF5NGG3Z0ysixgx0plOO8=)
2: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: vRdDdKPKIQnfhdSfe8ObyzE2rUYyKlhIYbzqwlVECso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:bf:3f:2b:f6:14:fc:7f:61:72:5c:f3:4b:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Validity
Not Before: Jun 14 10:01:05 2025 GMT
Not After : Jun 15 10:01:05 2025 GMT
Subject: CN=99ac85650417edf393cc32602e41205ec7a3c67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:cd:65:40:7f:c4:c4:a2:17:3b:8b:4c:34:
d1:13:2e:19:62:f3:eb:4e:02:47:0c:55:73:79:73:
26:f4:83:3e:bd:29:80:f4:5b:cf:f3:5e:cb:20:5c:
5d:80:01:a6:d7:ce:b4:d5:d9:10:25:3d:29:36:d9:
35:4e:fe:dc:62:32:2a:b4:e8:22:35:aa:8d:35:74:
14:ae:67:14:4a:cb:ec:72:2e:c0:36:77:19:0b:7e:
0a:94:5f:10:5c:63:fc:71:35:24:08:12:c0:31:26:
fc:15:dd:71:58:2b:b5:54:27:1f:ad:4b:6b:e9:01:
c7:6c:66:24:e0:c2:cd:88:d0:87:4d:11:fd:3c:e9:
3b:67:42:13:05:9b:4a:64:d3:6f:3a:6a:6e:f6:3a:
d8:e9:9f:1f:55:e7:f5:43:4e:66:f5:4e:69:e1:87:
5e:7f:30:67:39:15:36:7e:45:3b:91:3b:a0:24:92:
b7:0c:37:39:11:0a:b7:01:c2:0e:fe:80:d3:51:c2:
1d:27:49:9a:8a:fd:a6:d6:8e:ac:6c:d2:b4:2c:b0:
12:22:01:fe:83:43:0d:37:a3:dd:ec:46:c7:5b:56:
8e:0d:f5:af:62:d4:3f:cc:d9:11:b6:80:12:f3:b2:
9b:39:5f:8b:25:68:4c:d4:1e:35:6f:e1:9b:4e:4a:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:85:65:04:17:ED:F3:93:CC:32:60:2E:41:20:5E:C7:A3:C6:7F
X509v3 Authority Key Identifier:
keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:46:6c:70:41:c2:70:38:0a:c0:04:65:1f:d4:b2:25:2c:46:
38:e0:f6:74:0a:e1:84:a3:8c:97:bd:71:56:2e:6c:22:11:42:
15:f4:ce:1f:3f:a1:10:bc:80:25:40:0c:af:44:f1:cf:18:5b:
47:da:00:48:2b:6d:4f:dd:91:5f:13:7e:36:91:a1:3e:ae:25:
ef:b4:82:a3:71:6a:27:ee:13:52:e1:fa:7b:04:d4:89:5e:cb:
90:78:9b:f6:db:9a:e7:5f:a8:ae:38:92:32:07:28:5e:b5:c8:
b4:94:cc:fa:e9:ed:ca:36:54:19:fe:02:cf:fc:50:41:ff:2f:
32:fc:8c:35:df:53:9c:0e:cc:27:b9:2b:68:7b:b5:35:7b:d9:
f1:04:45:fc:1f:a8:6e:fe:47:e2:91:31:c7:27:a8:6a:4e:5f:
e1:71:c1:35:11:5d:93:50:35:69:d3:40:68:86:1f:7c:37:c8:
e7:d7:2e:8a:36:1c:aa:98:37:fd:2f:e7:a5:ec:1b:61:60:36:
8c:68:ac:99:a6:38:9b:cf:fa:9f:f9:6c:a2:f4:2b:75:73:9f:
9f:93:af:c0:2d:33:82:aa:b2:64:8f:bd:82:44:94:d2:ec:0c:
09:f7:e2:b6:28:a0:7c:bf:88:0c:8c:5e:61:fb:ba:73:af:e8:
e4:d5:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:08:32 2025 by rpki-client