Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: XVgj8DaxMdNgkok77f4S0fI1r76x2he3Rf3tMYkE0q4=
Subject key identifier: 1C:15:68:F2:BF:67:25:63:42:D2:90:24:1D:C7:2B:B8:39:ED:2C:B6
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 019771BF4869EDA0DF3D71392032469CAE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 0135
Signing time: Sun 15 Jun 2025 04:00:50 +0000
Manifest this update: Sun 15 Jun 2025 04:00:50 +0000
Manifest next update: Mon 16 Jun 2025 04:00:50 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: iYnBsrdW016Mitqytts3+t1PtdlowlarM/h+c7Em6tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:48:69:ed:a0:df:3d:71:39:20:32:46:9c:ae:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Jun 15 04:00:50 2025 GMT
Not After : Jun 16 04:00:50 2025 GMT
Subject: CN=1c1568f2bf67256342d290241dc72bb839ed2cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:5d:c0:42:54:12:16:77:a7:01:a5:59:8d:
ee:87:a8:31:18:8b:a2:d0:71:b1:5b:eb:19:5d:5e:
0c:b1:1f:1c:b7:2a:c3:07:de:ca:5f:ae:53:1b:e8:
37:14:48:7a:c0:46:f2:fc:cf:90:71:a4:c5:b2:3f:
47:ce:13:12:d2:ea:4b:73:29:4e:fa:15:b0:7f:a3:
d9:58:1f:3f:78:53:d0:b4:88:f3:ec:ef:16:bf:50:
b7:1b:09:b8:3f:0c:9d:7a:4f:12:f0:bf:48:1b:eb:
b2:ae:ac:37:f9:5c:72:c9:df:77:c3:50:68:59:48:
89:37:df:a9:ee:e9:ad:5d:ea:61:70:0d:07:7f:a2:
78:c0:44:b0:3e:1d:d1:05:8e:81:79:63:06:28:67:
11:b0:4a:3f:67:b5:08:2a:f7:7c:30:17:a0:b2:5a:
ec:13:20:dc:32:6c:d8:4a:98:d8:92:b1:e7:73:19:
c8:f5:df:21:62:14:21:3d:9d:c3:44:46:71:b5:41:
83:08:92:fd:fc:cd:66:f3:82:48:d1:47:de:b4:c8:
02:49:53:4c:20:e0:71:49:8a:b4:43:9b:36:73:e6:
02:26:23:83:05:4b:8d:a7:c4:ee:15:0c:38:1b:77:
36:7f:4b:4f:6a:45:9e:31:fe:51:4a:bc:c7:5b:1e:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:15:68:F2:BF:67:25:63:42:D2:90:24:1D:C7:2B:B8:39:ED:2C:B6
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:37:88:b5:4f:18:5c:9c:82:ca:17:84:a6:be:ad:75:b3:74:
16:20:15:6e:a8:65:2a:d8:10:19:00:b3:73:e3:c5:c4:96:8b:
e6:a0:5d:62:6f:6f:3a:b9:1f:6f:1f:79:c8:a4:be:9b:d3:95:
80:e6:8d:98:75:9c:18:8a:7d:2c:03:8b:6f:1f:40:89:53:a3:
e3:d2:de:29:96:0b:f5:96:d7:f0:8a:ab:ba:06:bc:9d:28:f9:
a0:e1:7a:ff:fc:7f:ac:dd:f6:31:f3:bc:d8:28:8d:37:89:b9:
2e:77:d7:06:e2:fc:66:a2:6d:5d:9b:d2:3c:33:6a:d5:94:69:
a0:7f:49:8f:28:d7:af:4c:1a:13:bd:b2:49:3a:36:dc:57:88:
04:f2:86:e9:2e:df:3f:89:29:b6:db:7c:ac:f3:7f:6c:1e:6c:
3c:fe:6d:3e:33:fb:66:4a:f6:bb:b3:db:53:66:fb:d1:ed:56:
91:61:d9:17:ac:56:d6:25:a8:00:14:e4:d3:25:1e:0a:3a:39:
fc:f7:41:b6:1f:ac:2f:86:16:82:38:8e:0a:48:5c:21:d0:bf:
00:50:13:a7:5a:14:00:e4:99:93:69:c7:31:57:b0:f0:02:ca:
ee:79:7e:f2:0d:a8:47:51:1a:ab:a4:c5:ec:63:32:0e:67:2f:
0c:e3:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:39 2025 by rpki-client