Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: J5MyJT9dSJo6TFYxE/Dy96YVUoOopAESGmIzCXAuH+Q=
Subject key identifier: 22:B8:E0:8E:89:68:2C:CB:ED:E1:46:20:93:B2:5A:32:27:B8:37:7C
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 0197700794CF2B5A14C749DE22692AA059EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 20:00:34 +0000
Manifest this update: Sat 14 Jun 2025 20:00:34 +0000
Manifest next update: Sun 15 Jun 2025 20:00:34 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: 4bNRhM82AUuGYe+roSwAEg2ntPbsPhyyoSFrUQnUOtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:94:cf:2b:5a:14:c7:49:de:22:69:2a:a0:59:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Jun 14 20:00:34 2025 GMT
Not After : Jun 15 20:00:34 2025 GMT
Subject: CN=22b8e08e89682ccbede1462093b25a3227b8377c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:c7:33:05:25:82:88:53:65:93:a1:bb:4a:
bb:1a:42:f2:1a:9a:b2:14:4c:88:a9:f0:e1:ab:6f:
3c:a5:2a:b5:de:56:64:c2:57:56:fd:91:b5:92:8a:
fb:4c:bb:e5:94:3b:58:7b:17:35:b4:48:da:6b:e3:
f7:06:23:37:09:9b:ca:6b:b9:dd:5b:7b:fc:e4:89:
3e:86:0d:ba:7f:de:1a:a3:27:16:ce:c7:a1:6c:29:
66:c9:11:c3:14:5c:38:2e:8d:78:82:c1:02:d4:1d:
bd:4e:41:2d:cd:6e:9b:24:19:75:52:b5:b8:a1:58:
48:5e:6c:bf:b0:a0:ee:81:7e:13:0b:f6:d7:29:12:
62:e5:8f:62:d0:cd:12:48:1a:0e:35:3f:04:86:05:
68:75:2e:d7:4a:c3:dc:bd:4c:9a:98:44:b1:87:38:
7c:cb:30:b2:ab:d6:eb:07:e7:c7:9f:f2:b4:ab:16:
59:e3:71:21:6c:89:05:d6:e0:10:13:b4:a8:a6:54:
1b:83:70:5d:ef:b6:02:ab:3c:81:15:dd:e5:76:af:
a4:13:23:7e:53:4c:91:6d:c3:f8:c4:97:37:ca:ed:
e3:a0:fc:b1:3e:b3:e1:68:0e:c6:47:c6:ab:c1:fe:
4b:f2:24:89:1b:32:58:4d:31:4a:ff:92:19:c5:0c:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:E0:8E:89:68:2C:CB:ED:E1:46:20:93:B2:5A:32:27:B8:37:7C
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a7:dd:ca:ef:e5:99:2a:95:6c:b1:72:7e:58:ac:b2:f0:d8:
1a:2d:6d:43:74:c4:b9:5c:ec:45:47:92:0b:df:52:44:f1:18:
63:65:79:0a:93:ad:97:92:0f:a8:69:3a:ae:4e:03:49:fc:dc:
fb:82:b8:f2:28:4a:65:70:7d:1c:d1:1d:22:a0:48:2b:9a:9d:
35:ff:01:4b:2f:00:00:e4:81:df:22:88:a2:96:d1:f3:41:26:
56:2b:a8:fa:9a:54:c5:26:b6:61:df:0b:ea:b4:f6:30:ee:8a:
34:cf:55:3a:1c:ac:76:48:6e:ad:38:97:91:27:6f:38:f1:3c:
f4:bb:05:b3:53:e6:b4:0e:95:a1:9a:a1:ea:5b:18:e1:ff:e4:
33:58:75:8b:80:31:c5:3d:c3:11:5a:30:0f:70:a1:31:21:cb:
00:1b:70:8e:2e:a6:59:15:6a:41:0f:96:2b:77:91:a6:97:58:
64:e1:f2:d7:6c:2a:73:db:fc:5e:42:c1:b5:d4:bf:f8:be:a1:
60:1a:80:a2:80:f2:6c:4f:d5:c6:88:8c:bf:50:78:ae:f6:fa:
26:7f:36:36:7c:d3:73:38:e3:eb:f2:0c:63:27:38:76:10:7f:
c7:77:df:ff:0d:e6:8a:7c:38:af:a3:49:15:b9:b1:98:2f:3e:
ee:26:20:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:42:51 2025 by rpki-client