Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: /Xt76xUmaxn5B9QLsxTHiUbUwPSeeII+VsHZalOrdjM=
Subject key identifier: AE:D7:25:17:30:0A:B7:D6:12:E4:39:BE:B5:83:D1:13:8E:A9:CE:74
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 01976D74AC6D68F354D01F7720D6F17B4CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 08:00:52 +0000
Manifest this update: Sat 14 Jun 2025 08:00:52 +0000
Manifest next update: Sun 15 Jun 2025 08:00:52 +0000
Files and hashes: 1: PcG8Sq5FdbAe30rm_n_GcaQonsg.roa (hash: Bm8FQyjRUmW9/pGMLb92kJbH7eLAq4FPc7+Cd5r6swA=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: hMxMh92YPV4U+NSpZZSUBFOV0hXAYQWi9dro1kOSI/g=)
3: vCyJ_4gbyrukZoytmDIUJKLGPq0.roa (hash: MURqYSpROMIIkoPGoMUJ5DUudVIqQ91/GFdxEyduads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:ac:6d:68:f3:54:d0:1f:77:20:d6:f1:7b:4c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Jun 14 08:00:52 2025 GMT
Not After : Jun 15 08:00:52 2025 GMT
Subject: CN=aed72517300ab7d612e439beb583d1138ea9ce74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:27:79:df:28:08:66:e8:b8:c0:8e:f7:87:
66:59:91:85:c3:b8:db:56:ed:20:9d:25:52:cd:2b:
b1:81:7a:14:03:7a:08:72:8c:be:ef:73:57:73:17:
ea:04:1a:f9:53:b6:e8:47:00:0e:e4:6b:8d:e2:9b:
53:2c:c6:4a:a1:99:a1:3a:47:91:95:a5:aa:87:3b:
0d:41:bf:0f:74:ae:71:70:e4:25:4f:47:fd:b2:e9:
b7:3c:51:a3:45:89:c6:26:7c:8b:8a:e5:01:eb:89:
cb:90:0a:86:c6:c7:b1:b6:a4:3e:47:4d:9c:8f:a9:
b1:45:0a:ce:da:b1:a8:36:d9:5d:d4:c0:06:03:f7:
cf:b3:e1:53:b5:23:74:55:52:25:86:9a:35:7b:7b:
79:f8:77:56:80:76:5f:a6:40:87:61:88:55:5b:ad:
44:55:44:6d:cd:f7:3d:17:6c:4a:74:71:9f:03:73:
ad:4c:f8:46:62:bb:88:24:d4:43:30:ac:1c:b0:73:
f2:db:da:d9:d7:bb:b7:50:62:07:ef:a8:a7:17:79:
1f:2b:a1:af:57:26:14:2c:9c:f0:a8:aa:a8:e0:cb:
2b:b4:24:96:a6:7b:f3:99:12:b3:b0:d4:5d:9c:ff:
e6:09:41:21:c5:e0:71:4d:99:a5:26:08:20:c7:f2:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D7:25:17:30:0A:B7:D6:12:E4:39:BE:B5:83:D1:13:8E:A9:CE:74
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:91:de:4d:8f:b1:05:c6:f0:6f:36:bc:96:7a:4d:eb:2a:4a:
d5:f9:2d:ee:72:fc:df:8e:d2:47:0a:c8:b8:be:75:02:d9:6f:
19:21:d9:75:b2:7d:ec:a7:0c:b2:31:c7:43:ba:7f:76:ba:74:
2b:1c:dd:1e:7b:5b:db:10:c0:b7:70:88:e8:07:0b:45:85:99:
c1:9f:5f:09:7c:58:70:25:8d:ab:7a:5c:be:c2:9c:f5:5a:95:
d0:a7:78:28:01:d4:51:c4:e2:5f:c1:e8:90:a0:e6:a4:1e:7c:
85:e4:54:5b:58:12:99:b2:d8:25:d9:22:63:fd:61:bf:a4:92:
af:66:30:d1:cc:e7:e1:01:61:6b:36:bb:45:a3:9a:d4:e3:e8:
0c:76:d8:10:f0:da:91:ad:78:5f:e2:48:96:23:4a:7a:a0:73:
26:3a:fc:80:10:78:b3:e7:3b:62:30:aa:63:72:1b:94:de:78:
d7:d7:46:11:8b:7c:b5:cc:f1:fc:ea:d3:bb:a2:dd:55:46:45:
7e:4f:e8:91:23:73:77:c2:41:67:5c:c8:d9:46:bb:02:60:43:
fc:66:6c:7f:5d:43:e5:22:a9:b6:da:9b:66:05:a0:95:f5:cd:
d3:29:00:2f:2e:30:49:69:4d:4a:8c:ea:0a:f7:85:81:be:ab:
55:5f:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:07 2025 by rpki-client