Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: DybCenH+izJth+EKaNGQbcnjCQpUgHn37bw0tbkrb1U=
Subject key identifier: 7C:D6:72:46:A0:B7:B1:5E:C5:5E:AA:B2:42:4B:B1:4B:E5:37:B1:02
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 01976D3D98EE6F5928B9DFF50BD9BDE8E143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 0ED2
Signing time: Sat 14 Jun 2025 07:00:42 +0000
Manifest this update: Sat 14 Jun 2025 07:00:42 +0000
Manifest next update: Sun 15 Jun 2025 07:00:42 +0000
Files and hashes: 1: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: DmrT6HYj4L2220Wfdwoom3rN9BXQsyiAxVWkd+TvWMk=)
2: qWiRXpCL0NKtXzFBLcgeaF0mM4A.roa (hash: V0gkUhFHDtKhWrN/3cVBozf0t4RmZJghnQqebhSHl+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:98:ee:6f:59:28:b9:df:f5:0b:d9:bd:e8:e1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Jun 14 07:00:42 2025 GMT
Not After : Jun 15 07:00:42 2025 GMT
Subject: CN=7cd67246a0b7b15ec55eaab2424bb14be537b102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:ed:0d:01:ec:e0:d2:b7:bd:69:51:d7:cc:
a5:60:59:5f:f1:50:d9:44:73:d7:8b:aa:35:58:ee:
23:f1:dd:d8:83:d2:93:50:7b:c1:78:bd:ed:8e:ae:
f0:3c:10:14:b6:d7:cc:4d:4e:8a:96:1c:27:de:e2:
62:e3:76:75:03:67:57:99:31:75:81:ed:a4:71:bf:
95:6b:77:a7:87:4b:81:01:81:38:db:2e:8f:2e:f4:
77:8b:3b:d1:59:d0:71:e7:52:b3:78:08:59:a3:42:
7a:86:f3:8e:b9:9e:49:4f:d4:1c:e3:37:21:f2:fc:
ba:97:53:0c:6d:b2:dd:50:4f:8f:37:7c:c4:f6:9e:
da:d6:ff:ed:ce:2f:ef:7d:e7:ff:aa:54:8d:cf:7b:
da:61:ea:39:54:a6:b9:26:42:19:86:35:0c:21:b1:
e9:46:a4:bd:4a:53:cb:86:80:50:be:d4:ec:10:cb:
a9:bb:76:7a:ca:6a:a7:eb:07:cd:1d:0f:0f:01:32:
9a:c5:2b:82:95:05:dc:2f:46:10:75:26:0d:40:62:
f1:c6:42:cf:7b:87:7a:fb:df:dd:cd:74:14:ee:62:
11:3c:a6:b7:38:35:81:af:4f:bc:b8:35:6a:9c:82:
03:46:64:31:8a:88:a9:f6:db:1b:7f:b3:dc:d2:e9:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:72:46:A0:B7:B1:5E:C5:5E:AA:B2:42:4B:B1:4B:E5:37:B1:02
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2c:56:a1:2d:6c:00:0b:bb:23:71:bc:84:77:57:17:ae:c8:
1a:ea:39:9b:09:2a:39:4f:c4:ac:5c:f4:7f:fe:7f:5e:47:95:
63:b5:99:8f:6b:61:aa:40:1c:18:6d:47:ce:88:c4:c8:23:02:
63:b7:e4:e6:8d:af:63:51:95:28:2f:eb:7e:b5:06:ec:d0:fe:
c5:8d:7e:78:1e:9f:1f:46:8c:4e:0e:72:db:ef:60:af:3b:11:
0c:35:93:d6:41:8e:48:f9:d7:b7:65:08:31:ff:0c:3d:12:02:
5c:3c:12:68:e8:7b:9c:98:75:1f:c0:20:ba:0a:f5:28:94:cd:
76:66:1d:fe:05:42:b5:39:fc:02:20:db:58:1c:a3:9b:b0:77:
53:27:29:1d:c2:9e:df:43:3c:d4:dc:30:2d:eb:bd:39:9d:a3:
64:7f:8d:e2:cf:3c:02:b1:02:8e:69:e2:3f:a5:bc:ba:48:8e:
72:d0:47:65:03:09:eb:c2:94:6e:7c:89:87:23:ad:94:4b:47:
e0:6c:a0:74:1c:fe:cd:9a:53:02:92:56:b0:93:62:ad:d9:ea:
9a:f2:19:82:8a:48:d5:82:56:93:7d:61:1b:bc:ad:f8:99:c7:
8f:ee:bb:62:3e:b5:66:01:c6:68:4d:24:f4:94:99:fc:e0:5c:
60:54:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:55 2025 by rpki-client