Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: KU9XXGC0SqP+uTEXl5lxSI7bjTFR0+7hYdwhxjkXReo=
Subject key identifier: 1E:DD:B2:34:D0:05:61:3F:DF:E0:BA:B8:E8:9A:71:FB:46:FB:32:55
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 0197711B11D2093AF6CC06FB9AD65A960CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 159E
Signing time: Sun 15 Jun 2025 01:01:28 +0000
Manifest this update: Sun 15 Jun 2025 01:01:28 +0000
Manifest next update: Mon 16 Jun 2025 01:01:28 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: x9733Uv50KvnR0YkIxJXDu10ey1xfWCdR2qm1ou5Ozg=)
2: s5NfBBJCWwkg56h64SxZMZxnlwg.roa (hash: FJxF1xFcRFmlC4MqQuyUXAAPNu/l5AbVFkQWsYjIQ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:11:d2:09:3a:f6:cc:06:fb:9a:d6:5a:96:0c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Jun 15 01:01:28 2025 GMT
Not After : Jun 16 01:01:28 2025 GMT
Subject: CN=1eddb234d005613fdfe0bab8e89a71fb46fb3255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:aa:5f:6b:29:4c:db:f8:e6:64:df:33:73:
02:0c:1e:3e:5e:c8:d7:1b:c3:7a:16:ba:e2:a6:51:
02:e8:26:b9:51:75:89:b4:3f:e8:ae:b1:79:fa:d6:
1c:90:d6:0d:c0:a7:1b:10:9e:a1:08:ba:d3:db:a4:
e0:da:32:82:6d:8f:78:f7:5f:4d:6e:6d:12:bb:dc:
93:be:fb:92:4a:37:83:e7:92:11:ab:0e:79:59:66:
dc:57:a5:73:a5:ef:2f:6a:2f:52:f0:21:94:af:a2:
a5:e4:2d:fd:a5:1c:5a:15:c0:a0:24:42:f3:ef:4e:
bc:4a:c9:ae:b7:86:af:0e:ff:d7:a3:6e:a6:37:77:
a1:b1:b2:82:83:cd:f3:68:e8:ab:65:cc:54:29:ae:
42:73:01:0b:03:3f:12:84:73:e3:84:f4:b1:4e:cd:
58:84:f0:b2:41:45:65:d3:4a:5e:cf:04:c4:f0:b7:
84:32:69:6e:de:56:98:de:59:70:00:c6:ac:38:31:
bd:32:43:31:95:6e:40:b0:7a:2f:4d:ad:42:9e:89:
27:17:8b:e9:ac:a3:f4:0e:fb:7a:21:25:20:b4:df:
f2:d0:40:99:84:ac:9d:2e:a4:45:c7:5a:b9:17:ab:
1c:cc:0f:54:4c:83:2f:88:69:df:15:33:f2:53:69:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:B2:34:D0:05:61:3F:DF:E0:BA:B8:E8:9A:71:FB:46:FB:32:55
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:11:54:75:b6:6f:07:05:e2:be:4a:0a:7c:89:d5:17:88:cd:
0c:bd:2f:bb:15:f2:cf:92:6e:f9:8f:24:c2:ae:53:ff:1c:27:
6e:d3:7d:d6:5e:7a:b1:e4:bf:54:23:36:4b:2c:e5:30:b6:70:
ed:04:85:84:94:55:62:91:36:15:22:d6:44:08:cb:86:13:39:
ae:c4:0f:f5:1a:5e:88:1d:cf:9e:7f:58:e0:4e:d5:7b:62:8d:
49:98:5f:9b:72:c5:37:dd:58:f4:52:d5:f0:24:72:00:d9:6d:
fc:27:42:82:94:38:d6:80:53:f6:c2:33:1f:0c:e8:e1:7e:db:
a0:9f:94:36:a7:8b:28:94:1c:a4:87:7b:63:40:95:f5:63:e5:
5a:28:fa:5a:12:f1:4b:bd:80:99:4a:a9:28:52:3e:73:f4:3f:
81:31:bc:29:f9:e3:b2:cd:ff:9d:a9:bb:17:49:d5:4f:c2:45:
c4:b6:03:5d:b9:be:e2:e3:97:04:d3:ad:77:8e:d3:ac:ec:b9:
eb:8e:7e:83:78:f6:4d:78:52:19:eb:c3:2a:97:b9:cc:4c:93:
9f:13:56:e1:99:43:d0:10:9b:89:2f:34:28:3c:1a:15:9d:9d:
69:6a:ae:d1:3b:5e:a4:6c:4d:93:73:3c:9b:32:6f:7f:4c:f7:
11:86:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:11:38 2025 by rpki-client