Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: KZsLPhlAUi9XCUI21CX7U6/CEopEw9XCzHC1kfvKDI4=
Subject key identifier: 53:E5:B6:BE:B4:1D:BD:0B:1B:AC:E2:87:ED:58:E8:30:17:05:45:C5
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 0197692A0A5AC925BE40BF1DD59AC7E68462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0DD4
Signing time: Fri 13 Jun 2025 12:00:52 +0000
Manifest this update: Fri 13 Jun 2025 12:00:52 +0000
Manifest next update: Sat 14 Jun 2025 12:00:52 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: /UrbVOrTTPSqttLJlXNYd6Pic87PdfxFiu8Ab4+vsuo=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:0a:5a:c9:25:be:40:bf:1d:d5:9a:c7:e6:84:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Jun 13 12:00:52 2025 GMT
Not After : Jun 14 12:00:52 2025 GMT
Subject: CN=53e5b6beb41dbd0b1bace287ed58e830170545c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:d5:23:98:c8:c9:9a:19:3b:61:34:4e:6e:
5e:d9:57:b8:a8:d2:39:ac:eb:2e:62:0a:bd:bc:01:
9c:8a:c8:e2:15:e5:60:9e:67:3e:d7:34:d4:9f:6d:
48:02:d7:5c:85:31:72:3d:99:e3:d0:93:63:e9:33:
14:8a:be:b6:78:17:f8:c0:57:22:ce:f2:74:59:e8:
2c:c4:aa:06:40:f7:5d:ac:63:35:32:f2:41:6e:7c:
67:ab:6c:ad:a1:ae:bb:9c:ca:1c:a2:b7:87:4a:70:
aa:7f:af:ff:c7:8f:8e:3d:a3:af:82:cc:6e:19:3e:
fb:8c:53:c8:be:98:2c:4b:c5:e2:8b:bc:58:68:e1:
4a:65:77:65:cb:51:2b:b6:48:4d:93:a8:bf:bd:67:
47:5e:9d:92:ec:ca:22:5b:25:26:5e:ce:99:c2:e4:
a2:6e:ab:71:cc:f3:56:44:6d:2d:f6:8d:ca:63:b8:
27:04:14:06:08:3d:b4:84:f8:b4:76:b3:61:ce:2f:
b6:b5:b1:d6:b9:ce:f3:70:8d:34:ab:92:ef:95:6a:
1e:da:72:02:01:19:54:74:55:74:52:23:40:37:53:
27:e1:28:41:4f:24:31:b1:51:5a:7e:7a:a8:37:8d:
0b:a8:bd:1f:21:f9:43:3f:78:e9:3c:d2:bc:c4:9d:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E5:B6:BE:B4:1D:BD:0B:1B:AC:E2:87:ED:58:E8:30:17:05:45:C5
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a8:2c:18:c3:68:d0:27:d6:26:04:81:ed:bc:6f:af:ab:27:
ae:ab:80:d8:22:d9:5c:e2:62:1c:22:fa:42:ed:94:f0:c9:50:
cd:64:a2:8a:a0:ec:e8:f2:ab:17:f5:a1:e1:ef:44:4d:72:09:
32:91:bb:8b:f1:f7:3b:73:8c:5a:41:55:90:9e:72:01:e4:fd:
63:42:a5:b1:2f:59:78:2e:0a:e4:af:9c:23:66:a8:e6:9d:9c:
65:a9:4d:66:82:ba:32:78:95:5f:7c:81:bb:2f:d5:03:18:7c:
a2:8f:6d:ca:ae:a8:1e:71:bb:af:41:74:02:5a:6e:2a:22:ad:
ec:ba:e4:bc:5b:30:1c:92:04:f8:3b:46:01:ae:c3:3e:28:f6:
2a:f5:b0:6d:4d:d0:c9:c6:4c:2e:43:78:a9:d5:d0:c0:f7:14:
f4:2d:5c:45:12:fb:4e:2a:6f:b1:c0:de:a6:87:24:b7:0c:1b:
96:fd:49:86:2d:1e:b9:7e:9f:cc:8f:ad:4d:a4:3f:88:70:49:
34:ab:97:68:ee:8c:00:ab:7c:04:46:db:32:11:3d:7d:90:63:
7d:2b:52:5c:de:5e:84:1d:94:8b:e6:c1:ae:61:02:e6:0b:8f:
69:6d:d2:83:97:13:6e:83:ae:d0:95:4a:1e:1e:43:77:a9:71:
f9:73:f5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:51 2025 by rpki-client