Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: CBu8UNpJNqeFVvtHDGW8RSgvw1vJfnzdP49MZn2/9os=
Subject key identifier: 4B:12:21:9E:53:FB:0B:38:C7:87:D1:C3:39:40:3D:5A:CE:D8:34:A6
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 01976FD134209E3E884D72CC1074A5E6E1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 19:01:10 +0000
Manifest this update: Sat 14 Jun 2025 19:01:10 +0000
Manifest next update: Sun 15 Jun 2025 19:01:10 +0000
Files and hashes: 1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: VcOUpltC3jWHyUJTknOoNJB3AWjU5ZLmT5jSWiT2p1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:34:20:9e:3e:88:4d:72:cc:10:74:a5:e6:e1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jun 14 19:01:10 2025 GMT
Not After : Jun 15 19:01:10 2025 GMT
Subject: CN=4b12219e53fb0b38c787d1c339403d5aced834a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:7a:7b:4e:9b:61:c8:6e:31:45:dd:31:b6:
0d:e0:f9:d8:68:f9:69:5f:84:42:c5:d7:51:34:d4:
ef:7b:34:e7:4e:a8:fc:19:3c:ff:69:17:71:05:c7:
7b:53:36:80:70:1a:fa:17:b5:17:f2:11:48:70:f9:
1e:3d:9b:d9:13:d7:5d:15:2e:0f:8c:0d:cf:db:ff:
c3:0d:6e:b4:6c:33:7a:f7:4c:18:80:ef:a3:db:fc:
07:9b:cb:e3:24:cd:ce:0c:98:87:c1:08:b1:0b:d0:
1a:30:4f:a7:f4:e4:33:ce:a0:67:db:18:a8:bb:cc:
ab:02:89:c1:12:ec:ae:56:70:00:fe:1a:09:6e:0e:
00:06:cc:7b:db:8c:13:45:57:cd:70:f1:51:93:5c:
78:00:56:41:34:d2:7d:c0:72:6f:d1:bf:cc:87:a8:
2b:2f:39:d5:b5:8a:52:92:f9:8a:4e:fc:74:46:a5:
54:8d:6f:31:95:84:cf:4d:83:e0:35:56:6a:12:8a:
8f:37:8a:38:3d:5e:39:7d:e5:1f:db:38:5f:13:c6:
b6:66:63:13:2a:65:a5:f9:2e:0d:38:da:bf:7d:3c:
7f:db:98:b8:89:57:ad:c6:e2:62:d9:f5:bd:ad:c7:
63:f4:23:31:cd:c7:76:f3:8a:8f:e4:b7:3e:a9:07:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:12:21:9E:53:FB:0B:38:C7:87:D1:C3:39:40:3D:5A:CE:D8:34:A6
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f0:b6:46:51:e5:f2:02:31:83:61:b4:97:0d:72:6b:c5:11:
d8:57:9e:53:52:b2:36:da:bc:99:58:59:06:0c:81:83:40:05:
39:f8:e7:f4:5e:e3:15:1e:79:d3:3f:18:2a:23:8d:4b:d7:18:
64:a3:03:1f:e3:61:93:83:1d:91:5f:af:c9:7b:11:0c:a1:f6:
b0:8e:6d:bc:00:5f:a9:87:0b:9a:ad:3d:13:24:20:14:e7:46:
9c:cf:54:e8:9f:20:d3:c4:5a:d7:98:17:56:a8:b5:6c:7f:dc:
03:dc:4c:71:40:73:46:01:28:f5:6e:0e:d7:de:ee:d0:70:c5:
aa:52:56:53:6b:4b:e9:2c:9b:ee:da:87:50:2e:b2:74:cf:f7:
9b:11:43:7e:75:24:fd:79:b4:81:aa:19:13:07:ff:12:4a:95:
26:8b:b6:7d:df:c5:55:e9:85:f8:c2:b6:a4:ba:db:58:c6:62:
8c:a4:d5:21:d8:ed:c3:04:60:ee:0c:ed:04:53:f6:f0:b0:0a:
e0:a4:fc:8f:c3:bf:c5:b1:69:d1:a9:68:ad:cd:0c:95:9a:f4:
0f:64:3d:7b:d6:04:9a:66:7c:42:5f:78:63:2b:d3:d6:6c:98:
b1:2c:82:74:75:6f:f9:ed:c3:89:53:ca:dd:da:73:72:34:9a:
6a:bb:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:20 2025 by rpki-client