Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: 98UWCpg6PuIYZbjS0Gn+5APj/IvlT8vFvnuzzjG1L28=
Subject key identifier: 03:35:33:C0:72:28:38:04:D3:A7:A0:35:C1:08:6A:F1:71:52:D3:D3
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0197692A01D4763144514003EF8B9FEC8A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 12:00:50 +0000
Manifest this update: Fri 13 Jun 2025 12:00:50 +0000
Manifest next update: Sat 14 Jun 2025 12:00:50 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: 2vlfPqVFIsU6jMe/cQj0I8EVndfFYTXTQ/zshJz2xok=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:01:d4:76:31:44:51:40:03:ef:8b:9f:ec:8a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jun 13 12:00:50 2025 GMT
Not After : Jun 14 12:00:50 2025 GMT
Subject: CN=033533c072283804d3a7a035c1086af17152d3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:01:61:75:61:4b:f6:7f:70:1b:26:a5:bf:
dd:e7:0d:a1:22:2f:82:e9:85:b3:a9:a4:4e:7a:cf:
94:cb:e9:06:22:59:35:f2:f8:c7:e2:85:ba:05:33:
1e:35:48:c8:ed:3a:b0:65:aa:ae:b2:77:cc:ec:b9:
7f:66:f3:ca:81:f0:21:58:9c:13:ce:e7:c6:b0:a0:
92:fe:00:77:0d:b0:eb:c9:42:c5:0b:18:2e:e8:38:
b7:cb:85:36:6e:c5:4b:dc:5d:61:85:1f:c9:94:f1:
93:c8:79:c5:f6:ff:51:f0:3b:4c:3d:bf:1e:46:a7:
f3:5a:aa:7e:a3:8b:1c:6d:20:2c:71:80:f8:bc:78:
cb:e6:2f:6d:94:d4:7c:c1:49:a7:f2:21:86:02:ee:
1f:b2:8e:50:73:5f:e6:81:f2:13:8d:0b:0e:6f:40:
95:07:25:88:5b:c2:3b:f8:51:50:4b:b5:a8:79:6b:
bf:c9:8f:c7:24:a0:5b:1b:ab:ee:fc:51:fa:4c:dd:
35:be:c9:f9:1e:24:81:89:ba:4c:1e:1d:44:74:43:
ad:a3:b8:08:38:a8:9c:be:91:93:e7:aa:82:45:4c:
d6:9a:7a:cc:6f:38:e8:e1:1a:d0:98:81:02:5b:cb:
ec:a2:3f:b0:d1:ac:58:42:19:35:19:30:7a:7d:ba:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:35:33:C0:72:28:38:04:D3:A7:A0:35:C1:08:6A:F1:71:52:D3:D3
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:30:de:c9:bd:92:7d:20:25:a3:1a:0e:1f:fe:be:69:ff:46:
a1:6d:63:4c:70:45:16:bf:42:09:d9:d2:79:1c:88:0e:d2:16:
4a:62:43:8d:05:e9:52:f2:a5:28:de:2d:48:b7:d2:77:c3:30:
f7:23:b3:9d:5e:09:42:33:d9:62:db:e8:82:92:b8:a8:a3:df:
bb:e6:33:64:26:4c:d4:3a:13:1a:25:a8:94:fe:91:87:cc:5f:
7c:d9:c3:29:80:03:7c:e1:6a:1e:61:7f:72:80:0c:ca:71:d5:
51:8d:53:9b:27:cc:c9:62:95:da:ea:44:a9:ab:42:b9:8c:89:
2b:67:84:5e:8b:0c:c3:9e:8c:e0:af:f0:0c:21:6d:25:65:3c:
a3:e6:d5:30:f7:e9:b3:3e:82:94:e3:b6:9b:10:98:75:a2:2c:
15:3e:58:33:e2:3f:ae:5f:de:83:5d:7a:16:f4:55:5d:35:b1:
28:f1:b2:f3:78:a0:77:fb:82:43:40:6c:de:56:c7:5b:af:06:
a8:10:90:55:eb:e0:df:cb:ec:f6:f2:2b:39:95:bc:d2:c9:ac:
2f:1c:1d:cc:46:7d:0b:78:b7:44:ca:f7:30:c6:49:92:4a:d3:
1e:96:c1:b4:3b:b9:b9:f0:b0:30:78:91:cb:f8:ce:d0:96:67:
ea:32:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:41 2025 by rpki-client