Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier: tUsO7upK+J4Y2tFP04pix2w5RwlscSvRZPvgv9vYBP8=
Subject key identifier: 5A:61:B8:B8:E9:B5:E8:A9:7A:EE:F8:3E:91:A6:CA:B6:1B:D3:DB:2C
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial: 01976F2C603CD29BE2A113133DBF16A7904E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number: 0CA1
Signing time: Sat 14 Jun 2025 16:01:08 +0000
Manifest this update: Sat 14 Jun 2025 16:01:08 +0000
Manifest next update: Sun 15 Jun 2025 16:01:08 +0000
Files and hashes: 1: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: kkJZuHiMWoYFHR3EAqVgpJIhyjJQcvH1kY4eEvV3Lvk=)
2: kT72_rs6FeeCr3dDSGrEzG7Qc-Y.roa (hash: aU4YilQ/j5WNVY1Q5u9ZzL1FCZbvOH4ANv0D/Jw9+To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:60:3c:d2:9b:e2:a1:13:13:3d:bf:16:a7:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Validity
Not Before: Jun 14 16:01:08 2025 GMT
Not After : Jun 15 16:01:08 2025 GMT
Subject: CN=5a61b8b8e9b5e8a97aeef83e91a6cab61bd3db2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:d9:fa:cc:85:8b:78:de:88:c7:ce:02:b0:
c5:6e:c7:5a:14:e5:ac:5f:de:ba:d8:ad:1b:7c:90:
90:54:92:20:c0:59:1e:f1:9a:fc:51:75:aa:41:cc:
32:a3:98:cf:9c:c0:f1:82:87:36:b0:b8:eb:45:9c:
49:c9:aa:09:d8:3e:d8:74:ad:ce:ab:74:63:fd:bf:
e1:45:1f:72:04:7a:dc:27:62:30:0a:0c:66:05:38:
3b:d8:d2:73:8e:46:0a:c4:f9:2a:69:63:f5:8a:0a:
6d:a7:71:66:d2:a3:d6:e0:74:fc:f7:9a:83:20:7d:
10:65:81:e3:ce:67:99:56:d0:50:92:73:0d:ef:0f:
a2:28:08:d0:90:0e:5e:d3:a6:0f:59:21:44:49:be:
c3:48:73:4c:2d:57:ab:fe:51:cc:66:17:43:6b:f2:
02:fd:27:af:2f:f3:69:60:06:69:89:fe:ad:fd:27:
92:ed:df:40:62:2e:ba:e0:6d:69:3c:91:85:09:a9:
a1:82:e6:b4:43:29:ed:7f:20:c7:02:c8:db:45:94:
ce:fb:d9:79:c3:95:17:c9:1e:a0:79:17:65:e3:9d:
2c:3b:7a:0e:44:99:bd:25:0b:c4:ed:4c:97:70:46:
34:91:c4:54:eb:70:38:11:f4:95:cd:84:68:38:8b:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:B8:B8:E9:B5:E8:A9:7A:EE:F8:3E:91:A6:CA:B6:1B:D3:DB:2C
X509v3 Authority Key Identifier:
keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ab:58:99:45:2e:e2:9c:2d:00:ac:86:13:52:94:b3:a0:e6:
a8:a3:09:3e:29:7d:ca:2f:41:c7:82:c1:c3:4d:df:e7:50:5b:
7c:b6:64:79:13:8d:59:0b:3a:fe:e2:1d:3c:00:73:fd:f4:e3:
5b:fd:4a:d6:54:a8:85:e5:96:63:6d:77:9b:22:25:5d:aa:06:
50:b8:0f:91:4e:4b:ca:11:2c:0c:52:48:4e:80:e1:64:9b:d4:
c0:eb:fd:da:f7:2b:74:8e:50:5f:e8:99:ca:d5:61:e8:19:37:
d6:c2:c5:10:d8:2e:b3:b6:0f:59:7e:3a:77:bf:ad:dd:a1:f5:
f2:e0:d0:c3:52:60:17:93:ad:c8:50:27:cd:48:cc:db:00:9d:
f2:ae:e7:11:0c:fd:9f:03:aa:ba:83:f2:51:c4:15:c0:98:b7:
6f:fb:68:db:83:4b:b9:d4:6b:93:68:25:e5:0f:1c:a7:b4:56:
df:43:63:e7:1d:7e:16:ba:36:58:fa:a0:20:3d:26:53:13:0c:
c1:b2:a0:39:a8:90:4f:29:6c:d4:e5:96:9f:e7:36:f9:8f:05:
ea:8e:10:d3:84:8f:72:fa:28:4d:a6:1e:07:b8:dd:48:73:17:
a3:96:ff:4e:c5:a0:45:86:e0:62:dc:fd:0b:30:2d:92:1a:3d:
1f:c5:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:51:16 2025 by rpki-client