Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: 8a7wHovw6CJGe1A0Evma7WdSzmU5urdS0RFJbDIUfGQ=
Subject key identifier: C7:5A:B6:9C:61:51:7D:D6:F1:92:D0:AB:65:19:39:99:DB:E2:DF:DC
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 01976F62A47B989A89237380EE19D09443A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 089A
Signing time: Sat 14 Jun 2025 17:00:24 +0000
Manifest this update: Sat 14 Jun 2025 17:00:24 +0000
Manifest next update: Sun 15 Jun 2025 17:00:24 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: d/sGxKILPGpJ2U/ycGFxP2pEDX8NRWg8daEJh0rKr5k=)
2: e-R839WD2s0lY-SLIuwOK0gz1NA.roa (hash: Br/dbcJ4O349JzP2gYAkSObA1wvRVc0Vvam1hapVqyI=)
3: wQpXfE9JEQ0xae3JNQ5WII9BPtg.roa (hash: Wc6T5r1GtvbV1icqr7Rl021bCXOyiaZtPpB0GH2eHqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:a4:7b:98:9a:89:23:73:80:ee:19:d0:94:43:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Jun 14 17:00:24 2025 GMT
Not After : Jun 15 17:00:24 2025 GMT
Subject: CN=c75ab69c61517dd6f192d0ab65193999dbe2dfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:fc:d9:85:d4:8e:8e:94:6e:66:9e:27:5f:
4b:f8:b2:6e:ad:7c:6c:e5:51:ba:07:a5:31:15:55:
c8:08:d0:16:88:ef:c3:0e:ab:d2:0d:86:82:46:b8:
67:03:64:6f:bd:d3:75:72:2c:81:4b:41:99:14:03:
94:d2:19:3a:88:57:72:ec:f0:d2:45:b9:ea:40:9d:
eb:e8:88:5e:99:13:45:ca:eb:5a:0a:23:9c:84:6f:
cd:dd:c8:48:d1:a4:93:2b:a6:3f:58:76:90:e2:9b:
27:e4:38:a3:95:29:c4:6b:e8:7e:39:06:3c:63:5e:
92:2b:2d:cd:54:72:03:aa:6f:d4:f1:a7:fe:32:39:
74:ef:07:bc:96:6f:66:54:cc:00:13:43:42:b6:a4:
88:56:a8:dd:07:00:d8:d9:0c:7e:62:d3:9a:6b:bd:
56:08:c8:a2:71:a8:45:08:72:ef:41:c3:33:93:ef:
13:3f:41:d9:93:f2:18:ec:f9:eb:da:8c:16:79:cd:
1a:34:21:4b:e4:c4:b8:d0:88:1d:09:a8:51:2a:e2:
0a:63:f6:6b:8c:39:ba:c2:5c:7e:87:2d:cb:2d:63:
37:2f:be:06:04:d8:11:ed:9d:25:12:ec:59:be:16:
60:f4:e0:37:46:09:67:92:34:8f:d5:dd:e4:45:fc:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:B6:9C:61:51:7D:D6:F1:92:D0:AB:65:19:39:99:DB:E2:DF:DC
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0f:58:fc:70:a3:bb:e3:9f:10:0c:5c:e6:23:c8:66:24:e5:
b2:34:bc:7c:04:49:7e:61:39:df:14:3e:5b:47:c0:4a:65:ec:
2c:ac:3d:df:a1:5c:4b:af:1e:5a:8c:18:81:82:61:aa:b8:b6:
c5:a9:55:5f:79:a7:f3:3e:83:e0:ea:ef:4a:f6:7d:a4:cb:55:
b6:54:01:5c:8f:8e:28:f5:e3:be:da:60:57:f1:b4:b5:64:03:
5c:9d:90:01:e7:e5:ee:25:cf:76:5d:b0:b9:30:12:81:bf:62:
a2:50:2a:ab:95:37:6a:6c:b8:2b:65:21:81:66:5e:06:6b:2e:
c1:42:95:dc:3d:0a:b2:15:cb:b6:bc:07:fb:3f:93:ad:89:21:
98:9c:c0:c9:38:22:fd:2c:47:a8:5f:e6:aa:f5:41:3b:92:8b:
7e:f3:06:3e:ec:d3:e6:ba:5d:3c:3b:3f:ee:fc:81:f9:53:5f:
d9:17:9b:eb:f2:9b:0f:a2:36:01:26:59:47:02:ff:be:2a:ab:
16:4c:cf:98:13:b8:83:38:76:f2:a6:da:46:df:de:9c:36:f7:
86:14:f2:fa:02:87:86:24:0d:e7:72:c0:8a:c8:77:aa:74:e1:
df:6a:e7:61:ba:0c:ff:56:12:a1:dd:95:30:a9:ef:da:ad:f7:
4b:57:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:55 2025 by rpki-client