Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File: gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier: Gcaaqkm+FtLxCqG3BhhJrp5VqYq5OkWJrDQgKGPjUFI=
Subject key identifier: 75:24:C3:9A:22:27:4D:8E:0C:C7:3B:B3:63:43:C8:5E:D7:89:74:36
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 01978C5A4998B8E097175DB5DCCD71B4A1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number: 15AB
Signing time: Fri 20 Jun 2025 08:00:16 +0000
Manifest this update: Fri 20 Jun 2025 08:00:16 +0000
Manifest next update: Sat 21 Jun 2025 08:00:16 +0000
Files and hashes: 1: NxiHrRFmOKs6DxSydD2sJuXQJK8.roa (hash: iNvcUhlJ9Yd5axlJbt+P6uyRKrZKBuBqEJ75zpPuiMk=)
2: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: H+drG7YGqqp+lvcKeWs6P7nLajM3i5XjGcdeHiN12uI=)
3: p-bGa3FNaz50p4t1OSNDAgoc_0s.roa (hash: kx//HiaOgl7Q7IqXK9lyKotPpA+1c6CW7SCJbi6+JVE=)
4: pHamM_FeTuziFQi2w75B0pezcGY.roa (hash: YLgRRlx24P8L2COTLzTtp0xHAktWAujjPd4Z7/lgx3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:5a:49:98:b8:e0:97:17:5d:b5:dc:cd:71:b4:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Jun 20 08:00:16 2025 GMT
Not After : Jun 21 08:00:16 2025 GMT
Subject: CN=7524c39a22274d8e0cc73bb36343c85ed7897436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:16:f6:4c:9a:f5:21:2c:58:51:96:68:66:
71:78:36:41:39:d5:7b:9e:5c:e0:e3:5c:6b:c6:48:
b7:1e:97:84:d1:cb:6f:bb:08:fe:bd:4b:4d:41:43:
cd:83:85:fd:e6:62:76:d8:34:4c:14:ad:03:f1:66:
cb:93:7e:27:ce:04:20:f8:12:44:d0:3b:20:50:52:
5b:29:d4:4a:07:9b:cb:52:d6:b1:70:0d:ad:4b:05:
a6:09:24:67:36:84:3c:92:94:fb:c1:8b:03:19:2b:
2e:19:d9:e6:a7:14:39:bb:3f:0e:28:a8:f9:12:2f:
c7:2b:20:44:b6:c0:82:22:a9:9c:8b:1d:f5:2f:e6:
cc:a8:fc:e9:f4:38:97:82:48:c5:94:8d:ed:05:d6:
8b:d9:99:12:69:32:b5:a8:d5:db:33:20:7e:66:53:
f9:0f:2e:86:0e:ea:5b:97:df:0e:eb:be:ea:7a:91:
f5:48:05:1b:33:dc:6c:10:d8:f6:fa:35:39:bd:3a:
7a:35:a7:77:c8:36:2d:ad:25:41:8d:80:3b:84:6b:
a2:78:b0:92:c4:c8:2b:59:aa:a6:a3:33:a7:ab:2b:
c4:20:24:0c:d0:e5:e4:56:38:e8:8d:8d:47:3b:74:
02:8e:23:19:91:c9:46:65:f6:64:59:26:70:7d:29:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:24:C3:9A:22:27:4D:8E:0C:C7:3B:B3:63:43:C8:5E:D7:89:74:36
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:1b:52:f8:35:29:bf:72:7b:6c:55:78:c7:70:ca:c7:58:
6d:d6:67:4e:8c:17:a4:8f:ff:a9:84:c5:57:e8:ab:2c:ca:32:
65:f2:98:72:e2:9c:93:a0:27:d6:8a:f3:bc:8d:86:7b:6c:53:
15:21:5e:f6:0d:fc:fb:dd:1b:46:d6:26:10:09:6f:2c:c0:79:
0f:2a:0f:f5:37:17:ca:d3:11:a5:8f:ce:f2:fe:0e:5f:cf:0b:
6b:75:21:e9:e8:9f:df:c0:ea:ce:01:b9:6e:ad:6f:52:31:99:
0b:4a:c1:b7:e6:96:24:be:16:3b:64:9f:7c:0f:79:87:76:71:
7b:fe:8f:42:8a:50:ad:22:33:9f:45:1c:63:16:a2:c1:c6:ff:
7a:f2:c2:7a:fc:1f:da:79:33:18:32:2a:5b:5c:57:6c:90:cc:
53:ca:ca:4c:61:76:7d:4e:2a:dd:e1:58:f9:50:95:0e:92:b7:
c0:92:9a:a8:c8:d5:cf:e9:b2:24:05:9f:33:30:7a:72:d1:a9:
16:02:4f:8c:37:71:c7:94:de:37:b2:e1:0a:82:d0:46:f9:3d:
56:ce:eb:54:a7:84:8c:a0:90:8a:ae:3a:c3:f7:56:39:3b:34:
e7:87:1f:7b:6e:0c:a4:70:fd:65:25:29:b1:d4:dc:e3:c8:6c:
f7:9d:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:48:16 2025 by rpki-client