Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier: 6N0ZHwJ3SdV5a7SuxdvprnhNdbkCtDHHMa0O9aCA5CI=
Subject key identifier: C2:99:2A:F4:C7:02:BE:B2:FE:16:5A:56:75:9E:F9:4A:6C:3F:FE:3B
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 01976D3D53F030A87164216F23327A43149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number: 036A
Signing time: Sat 14 Jun 2025 07:00:25 +0000
Manifest this update: Sat 14 Jun 2025 07:00:25 +0000
Manifest next update: Sun 15 Jun 2025 07:00:25 +0000
Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: iAS9uzzt3588lHX4S0UrODOAGflsxHWV4AGr8iElW3I=)
2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:53:f0:30:a8:71:64:21:6f:23:32:7a:43:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Jun 14 07:00:25 2025 GMT
Not After : Jun 15 07:00:25 2025 GMT
Subject: CN=c2992af4c702beb2fe165a56759ef94a6c3ffe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:4d:56:bf:83:d6:4e:52:7c:1c:e9:af:d9:
30:40:87:21:4b:e6:1a:a4:18:9f:e3:95:7d:e9:6d:
42:22:82:69:af:48:3d:f4:8b:2a:ce:43:cd:f1:80:
22:67:e4:08:bf:f7:fe:5f:80:88:a5:5e:80:fc:e9:
03:99:fc:1e:83:dd:a4:34:c5:38:ad:3c:99:8b:35:
ab:88:fa:a5:ad:9c:d9:c8:aa:00:5e:84:7a:80:8a:
ce:39:fe:05:d3:29:3e:22:55:1a:06:47:4a:b9:ee:
55:74:10:bc:53:63:91:2d:1b:e1:f7:b5:1b:48:2d:
a3:56:fa:90:98:b6:86:5d:d4:65:53:ee:0d:c7:74:
55:05:d9:d6:27:33:79:2d:7e:97:2c:03:1c:a9:b8:
87:26:d5:12:0e:75:01:fd:7e:c6:6c:0e:e6:d0:79:
5c:73:b6:5c:fc:de:f4:b2:6d:b3:18:02:2d:20:b3:
d0:b0:af:8a:b6:96:c1:4d:c1:d9:bd:bc:4e:f4:5b:
42:ab:fc:0b:23:71:b9:e6:db:c9:aa:65:75:3e:c7:
7d:18:c8:38:c9:09:67:19:62:b9:53:09:97:02:c6:
2c:02:c2:02:88:0a:e9:e8:7b:97:2d:cb:2c:01:ef:
44:ee:d7:df:ea:0c:3d:a1:64:a2:b0:68:be:0f:f7:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:99:2A:F4:C7:02:BE:B2:FE:16:5A:56:75:9E:F9:4A:6C:3F:FE:3B
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:41:b7:5c:69:56:e7:6a:9c:f8:b4:fd:7f:97:db:53:a1:61:
29:f8:f9:fb:d2:45:17:d8:f0:f4:7b:a7:27:d8:20:4b:3e:d7:
33:9b:39:cb:89:3b:78:4d:43:fd:32:3b:34:75:77:bc:4e:6a:
0d:f7:ad:4e:70:ae:5a:15:c4:df:7b:e1:61:5a:a9:23:53:1f:
86:e5:b2:3e:64:3b:a8:22:56:60:46:3e:ec:f0:74:d9:8a:8c:
b5:a0:e1:f7:b2:5b:eb:8e:8d:3a:3f:1d:fd:f6:09:0e:07:c1:
db:10:cb:05:84:42:4f:04:63:c8:25:24:6b:c1:11:33:43:f2:
5d:81:91:ca:ab:73:fd:5e:36:ff:39:27:06:bb:41:fe:fc:56:
65:6f:67:30:1e:ff:d8:8c:22:39:ee:0b:ee:6f:77:71:44:db:
65:04:46:7f:27:7a:bb:0c:a2:37:7c:7c:be:fe:45:40:0f:a6:
e4:83:9d:e4:92:2c:81:c6:25:08:99:d2:83:af:e9:99:05:83:
58:18:ec:9f:9e:2a:d2:82:a4:7f:40:5a:11:a7:39:74:b6:a8:
2f:15:ef:3f:47:c7:ec:25:24:2a:d7:07:a3:2c:c6:c3:17:96:
64:00:ff:00:fd:67:87:fa:31:dd:9a:f5:db:49:1a:45:a1:99:
60:c9:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:45 2025 by rpki-client