Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: AA54CV7thBL3+M5yuTc4oRJ3dLnc+TlNNQkxdsSWybc=
Subject key identifier: 27:A2:C2:35:AF:6E:55:C0:6D:3E:68:8C:C6:FC:DA:B4:10:67:87:FA
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01976D3E962284F1DBE09AB53D0A3378CE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0D3F
Signing time: Sat 14 Jun 2025 07:01:47 +0000
Manifest this update: Sat 14 Jun 2025 07:01:47 +0000
Manifest next update: Sun 15 Jun 2025 07:01:47 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: cXAyyC1HI77OyzH/YzfaogsUaJpdY/T3O+BJVlubkTA=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:96:22:84:f1:db:e0:9a:b5:3d:0a:33:78:ce:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Jun 14 07:01:47 2025 GMT
Not After : Jun 15 07:01:47 2025 GMT
Subject: CN=27a2c235af6e55c06d3e688cc6fcdab4106787fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:9a:03:76:27:34:e2:e4:2b:b4:19:d2:ad:
0f:a1:53:0f:86:a1:b8:68:54:d0:37:73:dd:9c:d2:
98:39:06:7e:be:71:8e:9d:56:f1:ad:30:1f:a6:29:
8e:fe:2b:e1:ae:12:7f:bd:e9:2f:f3:27:a1:1a:b8:
fc:a7:0b:61:99:a6:1a:a0:df:10:66:08:be:fa:84:
c0:09:33:71:60:51:15:ca:d6:81:1e:35:ac:cd:a2:
20:d0:4d:f3:9c:12:20:a6:3d:fa:fb:a2:24:7c:cb:
6b:63:9d:f6:34:59:b5:82:49:0b:d4:ab:e1:b6:a5:
6e:54:5e:ab:9f:d6:48:6a:52:bd:4d:7e:c5:74:24:
ac:45:d9:5d:b6:c0:04:12:d1:cc:ca:8c:dd:07:f2:
5d:e3:a1:68:b9:4c:61:bc:67:3a:b9:49:44:de:83:
00:da:47:72:ec:91:fb:5f:5c:ea:c7:e5:91:db:23:
e9:be:5a:61:3a:95:16:b5:9e:71:7d:6b:12:79:11:
3d:52:da:02:b8:3e:f1:01:7c:dd:43:b7:a9:91:92:
5c:61:67:82:35:73:c8:aa:98:20:9e:ff:40:e4:c9:
7d:32:9f:82:ed:6a:5a:d2:98:52:cd:16:c3:04:3a:
61:4f:47:5a:bd:02:56:ae:3d:41:92:d3:e1:0f:b1:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:C2:35:AF:6E:55:C0:6D:3E:68:8C:C6:FC:DA:B4:10:67:87:FA
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:78:e5:f3:1a:83:11:e2:a3:33:26:ff:7a:2c:d2:aa:68:a7:
5e:1e:60:34:93:09:55:08:66:20:5b:ea:f1:96:15:78:9f:6d:
dc:1b:d2:d4:d0:0c:39:b3:15:bd:14:0f:5e:00:89:39:d5:b7:
cc:7f:f2:30:9b:28:5f:1b:fe:13:47:ad:ef:88:dd:66:f9:45:
36:04:b5:bd:85:55:23:a6:dc:f7:ec:fe:94:d4:45:3c:e2:bf:
d6:e7:be:50:30:cb:b4:70:52:9b:ec:03:aa:c6:3b:d4:97:43:
75:2a:f1:f8:b0:41:23:c2:a7:49:ee:b3:a1:ed:e6:05:fa:4a:
7e:86:ee:84:3e:fc:80:1b:1e:d0:b7:ff:bb:80:de:bd:48:7e:
98:03:10:17:89:99:3d:ac:27:12:88:ff:da:5a:91:31:1a:17:
ce:15:67:f9:b5:84:c3:d7:68:aa:b4:fe:2b:bc:16:0c:9d:c9:
0c:c0:f0:a5:39:69:91:9e:a9:bf:a3:23:f1:00:65:32:cf:a7:
fe:06:c8:c5:f7:84:bd:ba:16:ff:d0:ea:77:28:d4:95:42:73:
cb:0a:fb:9b:cb:d7:e0:b0:f3:df:26:23:09:83:60:65:c9:ee:
f0:9d:17:e1:91:05:e2:10:8c:b0:e2:a3:f8:53:7b:b4:3a:ee:
3f:54:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:59:29 2025 by rpki-client