Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: NDpnvShCaa+xbnSrUP5NRS0YUHe2sVMnT1F5s2103ag=
Subject key identifier: 25:F9:1E:2A:AC:5B:82:8E:B7:35:15:73:4F:A4:04:B1:9F:69:F4:4E
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019781D6F2C69ED4C519F887F70017340803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 07:00:36 +0000
Manifest this update: Wed 18 Jun 2025 07:00:36 +0000
Manifest next update: Thu 19 Jun 2025 07:00:36 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: kN6mgGj777swYnjtGYC2PGaSpdhfVaTaPvkTzQ2qAnk=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d6:f2:c6:9e:d4:c5:19:f8:87:f7:00:17:34:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jun 18 07:00:36 2025 GMT
Not After : Jun 19 07:00:36 2025 GMT
Subject: CN=25f91e2aac5b828eb73515734fa404b19f69f44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:b4:e8:a3:e7:4d:19:63:58:58:2a:45:41:
d9:74:9b:85:3b:67:c5:29:c0:1b:5d:4b:04:82:e2:
f0:5a:0d:f9:94:9e:a8:95:ce:01:52:5d:22:4a:a7:
9a:58:db:0f:16:26:08:9f:42:13:0a:75:f0:ab:aa:
06:02:57:86:46:c0:17:cc:e8:3d:1c:9f:b0:63:0c:
23:65:0d:a9:81:d0:d9:78:5a:ae:e4:ba:a2:76:fd:
d1:c9:c1:92:3d:92:62:3e:bb:87:35:e9:83:83:31:
85:b7:9a:89:62:cd:fc:ff:e3:8f:12:6f:49:bd:63:
86:0b:fd:71:17:7f:b3:54:5b:c6:b0:44:1f:16:04:
92:a4:3d:22:b9:f1:30:85:ad:38:10:05:a2:27:a1:
fc:62:ec:34:ba:ac:b3:2f:5f:40:67:c2:2a:0d:7b:
13:07:f7:5b:dc:c1:d1:e8:56:92:3a:87:ce:35:18:
0d:9c:82:06:d6:eb:e1:9a:93:3d:96:aa:84:d7:0f:
08:8a:5a:4c:2e:f9:f3:c1:76:fc:8c:e7:09:01:19:
06:03:dc:d9:50:e2:f0:05:73:5e:2c:b9:2f:2c:c1:
cb:53:f4:a2:69:dd:22:66:cb:40:ef:ee:b9:05:9d:
50:02:1a:8a:df:18:71:e0:12:64:ef:1f:3d:4d:de:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:1E:2A:AC:5B:82:8E:B7:35:15:73:4F:A4:04:B1:9F:69:F4:4E
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:62:ee:75:c8:86:af:9c:f2:a5:e0:f8:6a:b9:2f:0d:68:31:
7e:9a:d1:ae:85:d8:ad:48:99:dd:c1:a3:74:00:88:25:3a:69:
12:80:3e:0c:05:05:38:e0:a3:c6:04:43:57:d7:cc:95:fe:91:
ec:92:f5:bf:c6:b6:1c:38:70:8c:61:69:d1:ca:aa:e7:77:48:
c7:80:fe:c2:bc:aa:28:27:f0:ac:68:da:24:0e:54:dc:ad:53:
12:51:e1:6b:2e:40:4f:cf:b5:61:35:58:f2:d2:67:fd:91:e6:
ed:07:82:7e:55:8d:8f:b6:ad:d6:d2:09:4a:36:06:78:a8:26:
a6:cd:59:46:38:4e:9d:6f:86:66:85:a7:bd:0e:d1:ad:bd:a1:
03:59:8b:2f:cc:c3:89:e0:36:8b:e4:5e:a8:ce:2d:c3:2b:d8:
76:a6:18:40:c0:0c:b6:14:b9:1b:03:fc:c5:1a:2e:72:79:4f:
c8:6a:cc:6a:46:a0:1a:66:93:39:83:66:d6:e0:04:3b:7d:49:
c2:57:2b:7c:c3:5d:d3:30:67:3e:42:93:29:c1:51:e3:36:59:
9f:ab:a2:7f:80:3b:de:59:60:a3:83:51:8b:da:26:3d:35:1e:
28:64:4d:79:25:bd:73:a1:df:87:0b:d5:f2:a9:08:b0:9c:0d:
fb:93:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:36:33 2025 by rpki-client