Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
File: gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json)
Hash identifier: q34KwgW8skOGYyY/B5uaFYZZHtKh1JH6iIdJuzmHpqw=
Subject key identifier: 55:E5:3A:50:57:99:ED:85:01:8D:8E:D8:22:E8:79:A9:93:D6:2D:F4
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 01976D3D5E4D532DC3E6FF383C22F2C340BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
Manifest number: 0E15
Signing time: Sat 14 Jun 2025 07:00:27 +0000
Manifest this update: Sat 14 Jun 2025 07:00:27 +0000
Manifest next update: Sun 15 Jun 2025 07:00:27 +0000
Files and hashes: 1: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: gMlTGhvOB5J91HN7KfYK3N2a2dbDp6ytEcIy1nmpJ2Y=)
2: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (hash: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:5e:4d:53:2d:c3:e6:ff:38:3c:22:f2:c3:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Jun 14 07:00:27 2025 GMT
Not After : Jun 15 07:00:27 2025 GMT
Subject: CN=55e53a505799ed85018d8ed822e879a993d62df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:ca:c1:a5:a3:15:88:4e:48:03:41:e7:e8:
2b:92:09:2f:d2:88:1b:57:a5:8c:12:89:13:e5:61:
ef:8f:aa:6d:43:78:a4:98:5b:4b:15:fe:20:c1:26:
31:97:9d:a8:7c:96:ce:82:8e:c6:df:d3:1f:8e:60:
64:e4:5f:a4:b9:83:20:89:73:6d:d0:59:c1:0d:77:
e8:92:d9:2d:e3:af:df:0b:a2:f9:db:ec:7f:78:af:
35:0e:93:02:a2:87:f7:20:6a:ac:05:61:84:9c:c4:
75:a2:61:23:e4:42:39:88:9b:5b:fe:2c:0a:d9:0c:
f6:8c:eb:fb:01:cc:f4:d6:55:eb:12:c1:d5:0d:ff:
4c:81:ca:e8:02:d8:13:5e:3b:14:26:34:49:af:e5:
03:d9:06:c2:83:7e:26:b4:14:e4:fe:74:f6:e7:8c:
54:87:ca:8e:43:1a:4c:36:da:71:e1:28:ea:c8:3f:
3c:1c:0f:08:88:00:35:d4:e2:97:ff:56:06:c4:f3:
f1:ed:7a:2e:83:2a:65:42:e5:5c:46:f6:81:c7:67:
09:bc:2d:9a:f6:1a:75:2b:0e:0b:f6:19:07:e1:0f:
b9:3f:68:cd:c5:05:e2:4f:32:51:05:da:83:47:81:
9d:37:bb:80:f7:b4:a2:bb:49:88:a5:27:31:6e:07:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:3A:50:57:99:ED:85:01:8D:8E:D8:22:E8:79:A9:93:D6:2D:F4
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:21:20:6f:f9:71:be:84:d4:23:3b:d8:6c:0f:68:d9:f3:07:
31:41:ad:57:fc:05:6f:1d:19:26:5e:9e:b1:2d:26:5d:57:78:
6f:99:84:81:6c:bf:c1:87:68:9f:f4:ff:94:30:46:3d:da:db:
08:52:0d:6e:24:a7:8a:0e:72:8c:30:0e:b8:54:d1:6e:cb:25:
cd:85:a4:a8:d3:30:03:d2:13:24:8d:0a:32:43:eb:28:24:21:
8e:1e:39:e9:0c:3f:fa:df:40:a7:06:24:9a:62:95:90:c5:56:
eb:40:15:04:b1:71:db:c9:45:00:51:87:08:14:85:f2:a1:c9:
32:53:5d:d2:4e:ee:76:dd:85:b0:fc:58:21:5a:2c:b7:ae:b0:
c3:d7:fc:0b:03:87:5f:29:27:fe:23:33:a2:26:bf:cc:c0:03:
2b:f3:26:8f:75:9c:44:b9:3d:fe:8d:02:98:55:7e:b6:7e:fe:
3a:2f:34:ac:f3:b8:e6:ec:6a:d3:18:f1:2d:75:89:f2:7a:57:
56:f0:99:18:1a:0a:46:7a:3d:d8:3e:33:9c:61:49:b4:5a:d1:
f5:cd:b2:72:47:2a:88:f7:fa:6f:7e:11:46:68:d8:b9:c2:bd:
3d:f7:ed:52:c1:b9:06:cb:b0:45:9e:82:87:87:67:96:27:06:
ec:7d:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:18:47 2025 by rpki-client