Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: jy8XfvfeoTqdTEtEbt8w+7ZMJUs67fL167zsuwxW7vM=
Subject key identifier: AD:F2:F9:90:96:BE:65:F8:4F:6E:1C:C9:71:22:8E:07:DD:3F:0C:87
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 01976CCF7D055CDC746EB9C2A767A5D68D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 35
Signing time: Sat 14 Jun 2025 05:00:26 +0000
Manifest this update: Sat 14 Jun 2025 05:00:26 +0000
Manifest next update: Sun 15 Jun 2025 05:00:26 +0000
Files and hashes: 1: 9PkegdPcOVaHYch8whuUGhkGOzc.roa (hash: nTpt8kDLjSLrMGR0C/m0j9Ftj77WGzhvL7KxFH3u7Z8=)
2: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: MO14Ez+EzbzKH1qhNJk27IwyYAyZAjhQ4s8/tTKtSv0=)
3: mo525hECNfAEonllRKyyBVCuVuY.roa (hash: a5b0LUZ9waSvhihXnwQQ6mCuKjGwIDzPkvhonuJ3oDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:7d:05:5c:dc:74:6e:b9:c2:a7:67:a5:d6:8d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Jun 14 05:00:26 2025 GMT
Not After : Jun 15 05:00:26 2025 GMT
Subject: CN=adf2f99096be65f84f6e1cc971228e07dd3f0c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:b8:63:a9:ad:e5:03:40:23:c0:3a:65:ae:
5d:94:aa:e7:24:d4:ae:9d:e8:09:0a:92:a0:73:f2:
ad:33:e4:bf:8d:9e:9b:11:b5:ba:f6:28:c1:5f:75:
39:29:ff:d9:60:e1:22:be:ac:21:6d:8b:39:4a:08:
25:25:5b:95:2e:0b:8e:b2:bb:57:84:56:33:e1:ac:
38:1b:05:37:48:47:ee:da:1e:8c:23:4b:20:14:01:
ca:4e:b0:af:51:54:16:1a:0a:0b:94:74:36:62:03:
63:05:b2:5c:e0:ab:7d:51:64:4d:ea:86:f4:d0:84:
b0:fb:82:62:cb:40:a2:3c:14:5d:2f:05:45:16:65:
c4:81:b3:cc:fa:f7:dd:e0:b7:f5:96:28:66:ba:ec:
1c:a6:97:b7:7e:3a:5a:35:7d:b2:b7:fa:03:c8:94:
fe:b0:26:99:ad:c2:3f:11:57:67:c7:50:b4:39:22:
7c:5b:27:73:9b:9e:ea:42:2a:98:89:f7:7a:b6:35:
18:df:a8:b1:a3:ba:9a:1b:41:69:3a:47:bb:5e:ae:
cb:3d:34:4b:e5:59:1e:54:87:1f:6d:46:85:3c:b4:
94:c0:c6:cd:ad:6e:25:d2:a0:22:cd:62:c5:09:eb:
cd:33:28:41:85:ad:2c:aa:63:4e:6a:13:a8:e4:bf:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F2:F9:90:96:BE:65:F8:4F:6E:1C:C9:71:22:8E:07:DD:3F:0C:87
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:92:03:30:90:20:c8:02:1f:2c:86:53:11:67:a2:3c:98:5e:
64:9a:28:8c:30:75:f2:33:e0:a4:81:98:91:e5:e4:33:d8:4c:
14:ab:7e:e1:e8:0a:9f:21:6a:23:46:1c:a5:e2:33:23:d7:5c:
d0:ed:af:fe:27:00:cc:2c:17:bd:70:a6:1b:f8:76:57:cd:bb:
e0:f5:46:40:71:c1:7c:ce:f4:79:46:47:45:56:16:2a:7a:26:
da:9f:38:27:91:94:97:39:6d:14:29:92:71:fb:9a:8e:5e:a8:
26:7f:17:d6:00:e1:1a:8f:1a:49:09:9e:cc:12:fa:fa:cc:43:
21:8d:4c:59:ec:41:be:bc:52:03:2b:0c:eb:5e:f5:f5:87:5d:
c0:34:a8:92:76:98:f2:fd:53:86:cc:b3:f4:0f:24:52:a3:cc:
40:85:bf:22:f3:ba:ea:26:dc:af:b2:d7:9e:1f:8d:94:92:55:
33:91:a3:4f:09:38:52:c5:5f:1f:0e:04:6f:a7:6f:18:87:8f:
28:b6:b4:23:a8:1f:62:0b:1e:90:0d:dd:24:0e:b6:02:fc:68:
41:f1:a1:69:f9:d1:ef:04:3a:20:99:be:5a:78:19:5d:4b:df:
48:eb:dc:43:3b:d1:27:6e:31:34:72:39:e7:e3:39:17:9e:84:
b8:d6:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:48 2025 by rpki-client