Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: H1shdg53WWQo3WoXvMaAWiQwzdS/xUwxXRYCjyeJ1ao=
Subject key identifier: 30:92:1A:E7:46:D7:56:29:A5:EF:F3:D0:A1:50:CD:2A:D7:8F:25:4C
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 01976BBD7993C1FB14946E95C419B819F3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 00:01:08 +0000
Manifest this update: Sat 14 Jun 2025 00:01:08 +0000
Manifest next update: Sun 15 Jun 2025 00:01:08 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: 7u3xutPwKyyHDmJJnjHG91hDKvwRYbkXSK5CBLbeR1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:79:93:c1:fb:14:94:6e:95:c4:19:b8:19:f3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Jun 14 00:01:08 2025 GMT
Not After : Jun 15 00:01:08 2025 GMT
Subject: CN=30921ae746d75629a5eff3d0a150cd2ad78f254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:5a:40:94:d3:62:54:c5:22:91:59:85:ba:
c4:24:d1:88:33:4b:68:ca:f1:be:66:74:8c:43:04:
d5:3a:e1:e2:80:e9:ec:35:38:a4:90:cb:4e:fa:23:
06:67:6c:49:c4:c1:bc:da:c0:8d:ef:34:59:57:fa:
c3:3f:bb:05:4c:85:d5:41:6c:b4:1b:eb:51:0d:5d:
b8:95:bc:a6:82:88:ba:7e:c0:9d:a0:5f:c2:5f:55:
78:5a:c4:97:05:47:2d:32:41:03:49:bf:6f:01:e8:
f4:6d:86:e4:51:ac:3a:54:eb:5f:02:b4:88:8e:02:
b0:62:2c:d9:87:57:c6:35:bb:76:3b:ad:98:72:30:
93:24:95:42:7a:28:f3:e4:cc:8c:2e:6d:8b:f6:ed:
62:fa:b8:da:38:26:fc:f1:82:e9:6a:76:82:96:07:
98:9f:94:b6:df:d6:34:c9:6b:32:5c:b0:21:31:cd:
ff:01:f3:6c:13:9b:50:14:96:6c:97:5d:fe:3d:bc:
9b:93:62:9e:be:f3:ff:8d:63:be:ec:7f:dd:ed:bd:
69:90:91:1e:a2:43:fd:91:70:44:83:2f:38:43:29:
6c:aa:bb:23:8e:1d:fb:76:d8:b8:43:e0:36:30:c1:
72:a0:81:78:a1:03:d4:77:24:4f:be:25:be:7d:8a:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:92:1A:E7:46:D7:56:29:A5:EF:F3:D0:A1:50:CD:2A:D7:8F:25:4C
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2d:75:b1:fa:72:ef:32:52:5b:12:b1:c1:89:0b:c5:d4:94:
19:87:e4:4f:e8:82:4c:58:41:df:65:a2:16:a7:55:7f:34:9a:
92:05:c3:4d:7c:f5:5a:3f:8f:0c:2b:b6:11:f0:81:92:ae:6d:
a9:29:1f:c5:99:be:a8:d7:14:3e:b7:df:4b:29:03:62:e8:e1:
56:be:8d:e7:6d:a6:de:d0:a3:e3:6f:bd:1a:0e:c0:e1:1e:93:
5d:a6:4c:80:d9:b9:a4:ff:f9:0d:83:4e:b6:8e:99:9b:6b:f4:
bd:9f:ce:53:e5:a0:b2:ee:b9:c3:7f:0a:6c:d2:60:dd:3f:b0:
70:82:89:41:25:3f:2a:d1:72:ed:c7:eb:f9:82:d3:9a:e0:c3:
59:48:49:16:7e:ac:54:90:ae:15:c3:4f:35:79:13:01:9a:18:
3c:0a:33:8e:a2:85:d9:70:a9:bc:ac:cf:c1:24:64:0a:0a:89:
82:cf:46:db:79:16:53:86:d5:82:25:53:7e:cc:45:e8:98:d7:
b2:de:7c:89:eb:84:44:a6:87:95:32:08:23:7d:14:e8:9e:27:
22:f5:c4:df:8f:72:a0:c0:ab:4c:48:a2:c8:71:ca:c6:bb:5b:
6f:22:3b:8b:23:69:23:d3:4b:96:38:65:ed:fb:79:e2:e9:9d:
75:85:2d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:22:51 2025 by rpki-client