Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: Qi2ddRiQmS5ilL6hL0CvEY+KSAVrB5mCFvORrtc+hF8=
Subject key identifier: 41:DC:AA:2A:16:68:A5:3F:DD:69:F9:DC:B7:08:FD:C2:A3:80:E1:71
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 01977FE976ADE07E19B44FD9ABD677611A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 127A
Signing time: Tue 17 Jun 2025 22:01:36 +0000
Manifest this update: Tue 17 Jun 2025 22:01:36 +0000
Manifest next update: Wed 18 Jun 2025 22:01:36 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: 4d2a4UgItTIB56bs0rt2WYPoDc9l3FziH6f1ARTd5pc=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e9:76:ad:e0:7e:19:b4:4f:d9:ab:d6:77:61:1a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jun 17 22:01:36 2025 GMT
Not After : Jun 18 22:01:36 2025 GMT
Subject: CN=41dcaa2a1668a53fdd69f9dcb708fdc2a380e171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:09:d2:ea:44:2e:96:e5:64:56:8d:8c:71:
5d:86:1b:60:04:a2:1d:86:f4:4b:0a:6b:44:02:a9:
06:42:1a:34:b0:d3:2f:38:09:f9:ad:da:f9:3b:d0:
f2:e4:c1:e4:77:c4:a8:e7:e2:da:83:e4:2e:0a:49:
ad:29:7c:f7:3b:1d:aa:ed:29:b0:80:8d:9d:f2:c7:
93:b4:8f:71:22:53:de:bb:3a:6e:f0:f3:77:5a:59:
d2:35:96:df:03:c5:25:c2:74:50:e1:9a:7d:69:3a:
2f:cf:7e:44:7e:8f:75:dd:ff:bd:e2:39:ff:8b:2b:
ab:e6:01:7f:94:da:06:ac:c7:3e:55:d9:b4:d6:be:
03:b4:25:8d:ba:8d:f7:ca:6b:d2:cf:96:58:9e:5f:
75:e3:2c:a9:98:c5:c6:86:6e:e8:ba:c4:55:3f:ea:
d9:b2:06:e8:0b:23:9c:03:c2:fb:b1:58:c4:fe:25:
56:61:18:6b:aa:f6:ca:ba:7d:3f:74:e2:f7:7e:ed:
70:32:ce:7c:41:55:50:1e:08:be:22:ae:9c:dc:31:
25:87:05:0a:1e:ca:18:26:d5:76:60:d6:43:44:83:
f0:c0:f3:01:13:94:de:5d:55:8b:91:83:1a:d2:ff:
89:34:ef:dc:9f:51:4a:50:bb:7d:77:a1:12:a7:e6:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:AA:2A:16:68:A5:3F:DD:69:F9:DC:B7:08:FD:C2:A3:80:E1:71
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e0:39:fd:e6:2f:75:85:03:73:1b:00:73:a6:3d:70:b0:17:
59:00:11:c9:9e:84:63:fe:cd:ee:30:61:1c:9b:97:86:c7:b1:
f7:ad:0b:d3:e8:9e:2b:c4:72:03:f2:c5:e4:15:78:ae:18:16:
55:65:8b:b2:05:64:6b:5c:1b:61:5b:d6:92:33:f3:67:8e:c5:
bb:fe:19:00:76:b3:ff:fe:af:9f:da:cb:9f:01:d9:13:90:2a:
0b:e8:06:0a:a5:60:92:cf:4b:b2:ae:b3:e8:e6:75:fd:26:6a:
cd:26:22:4e:88:ea:d8:e9:d8:fa:e7:84:17:d6:23:31:7a:be:
1f:f5:6d:ab:3d:56:56:e5:25:8c:6c:16:25:a0:0a:f1:7e:a5:
4b:7b:46:8a:1e:fa:11:77:55:4c:81:13:22:9b:3c:d1:6a:44:
63:4d:0f:05:34:dc:4a:6b:42:23:f0:61:41:1a:43:7f:ca:06:
01:82:4e:55:69:1c:1b:eb:fd:95:e1:97:a9:2a:0d:16:10:6d:
9b:56:1b:e0:7b:56:d4:8d:b7:96:4b:5e:27:6f:50:c3:c3:a7:
3a:56:b6:fe:aa:c4:71:5d:4d:4e:ae:59:e6:37:9a:7e:12:62:
c5:71:d3:21:ff:1f:d8:5f:23:7a:c2:9d:58:a6:20:90:87:2c:
f1:7b:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:52:10 2025 by rpki-client