Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: 04xLlmDu/DGdt3yB9CTwaIlfOPbk9CleJDPVDOMG/r8=
Subject key identifier: 02:23:47:7A:E9:2C:FE:19:8E:FA:F0:F1:4A:A2:6B:12:E5:E1:6F:21
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 01976E86D170209692B08C805D31C2F31411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 13:00:18 +0000
Manifest this update: Sat 14 Jun 2025 13:00:18 +0000
Manifest next update: Sun 15 Jun 2025 13:00:18 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: KFOBi69DWkJHHPzjaf/n3dZlCBd5C0av082S9hnu3QI=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:d1:70:20:96:92:b0:8c:80:5d:31:c2:f3:14:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jun 14 13:00:18 2025 GMT
Not After : Jun 15 13:00:18 2025 GMT
Subject: CN=0223477ae92cfe198efaf0f14aa26b12e5e16f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:99:d9:3b:70:30:bc:44:a4:b0:b0:47:60:
7e:6d:bb:4e:48:68:50:74:0d:11:0d:f7:50:df:2b:
2b:9e:cc:7a:dd:84:c6:e7:ed:66:a7:b5:cd:ca:0f:
1c:7a:d3:09:a2:82:9d:95:3c:84:05:ca:40:95:dd:
ea:b3:0e:c5:c6:a7:90:7f:5b:0b:f3:13:c2:99:15:
b1:c8:e1:12:81:ee:fd:3c:62:72:ef:2f:0b:4b:5e:
b7:ff:9f:c4:fd:4a:14:f6:48:8b:c1:18:f9:93:f3:
b1:fd:83:d8:d7:6f:07:fb:34:9a:5b:14:ab:59:e4:
d8:c2:6b:af:69:4c:28:94:47:b3:c8:72:18:d2:27:
44:0e:8b:e9:08:a8:25:c1:a6:d1:72:af:29:a0:4b:
bd:65:55:4a:a8:37:87:49:00:9b:d3:38:e8:7c:ba:
02:73:a3:89:3d:4f:d6:76:67:94:94:89:53:62:4b:
cb:36:c4:8e:32:bc:e1:ec:83:35:38:c3:0a:f4:4e:
99:21:b1:f1:6e:8c:61:83:2b:0d:1c:e5:ea:60:a2:
39:ef:3e:0a:85:20:16:69:4e:ba:16:9f:ee:9d:42:
65:11:ca:36:3f:7f:74:7d:34:f0:38:db:3b:40:d0:
f5:7a:14:36:f0:28:b7:ff:49:18:44:57:60:ce:ac:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:23:47:7A:E9:2C:FE:19:8E:FA:F0:F1:4A:A2:6B:12:E5:E1:6F:21
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:ff:2e:41:75:38:03:0b:49:7b:15:3e:73:fa:85:53:d1:
87:1d:96:a4:dc:1d:d3:af:6e:22:8f:22:92:ab:1b:54:dd:e6:
3a:a2:1b:1f:d4:87:14:6f:05:64:19:94:69:49:c3:b8:61:f9:
fd:66:d7:bf:19:30:44:de:f9:b6:a4:6b:fd:2a:ea:31:35:8c:
e2:84:90:fa:1e:d7:ae:ed:1b:fc:82:bd:a3:03:e9:d2:b0:35:
72:67:42:41:b6:79:b1:9e:d3:cf:5a:5f:2e:30:c8:02:1d:04:
3e:a7:00:bb:2b:1e:51:6c:05:bc:7e:de:9f:93:9a:04:34:82:
35:53:24:2b:cb:ed:d6:08:f0:93:5b:17:85:c2:02:5e:82:e1:
dd:73:9b:e4:82:b4:25:48:aa:c2:91:bb:36:8b:7a:69:e2:d4:
8f:c5:0f:25:51:52:a0:c3:f1:3a:5c:2f:cc:fa:fd:60:e7:80:
27:8a:66:28:49:56:3f:c0:df:05:93:05:ef:6d:dd:66:f6:dc:
9b:e3:1f:c2:6d:b0:e2:6c:5b:01:ba:16:16:14:1c:ae:cd:20:
72:cc:a6:b3:93:3e:12:7b:aa:83:f9:b1:96:41:90:06:5a:ac:
70:ac:3f:0a:60:59:4b:9c:55:55:5d:00:ce:fa:b8:71:f0:48:
62:61:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:42 2025 by rpki-client