Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: VKcvezBdg6xR/bg8pG1ntBGKxjoIvzICn+5cOn8l0lg=
Subject key identifier: 4B:E8:C2:2E:52:E3:F7:24:27:80:9D:C7:EA:70:22:EE:58:BB:61:85
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 01977075F11C3C5132351EFC9EFBB904EF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 22:01:07 +0000
Manifest this update: Sat 14 Jun 2025 22:01:07 +0000
Manifest next update: Sun 15 Jun 2025 22:01:07 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: swTEnr+uPsSNKGcuFKy7OJpZuSwORA0cnKCm5e58BBk=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:f1:1c:3c:51:32:35:1e:fc:9e:fb:b9:04:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Jun 14 22:01:07 2025 GMT
Not After : Jun 15 22:01:07 2025 GMT
Subject: CN=4be8c22e52e3f72427809dc7ea7022ee58bb6185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d5:5e:67:6e:eb:bc:9a:4e:0f:7c:8c:0a:6f:
18:83:8f:dc:1b:7b:32:04:18:09:2b:5f:72:04:ac:
37:cb:f2:d1:ee:b6:9c:b3:1a:fa:a2:a7:ac:d1:d4:
9a:b3:81:38:9a:f8:a5:bd:24:8d:a9:17:d0:b8:6b:
5d:5c:ba:fb:f6:f1:1f:d1:64:8b:91:81:95:45:63:
0d:51:9b:71:77:89:56:e3:36:d8:66:de:c7:90:f8:
73:b7:80:2d:31:ae:45:df:94:03:7f:8d:92:e2:59:
00:62:16:d4:ef:f8:c7:49:4a:43:22:a6:33:ee:ea:
b7:ea:ec:ac:ea:6a:cd:ee:d9:41:92:2a:4e:fd:fd:
e9:d4:a4:48:c9:57:8f:af:ee:ff:8f:4c:a1:31:3a:
29:48:8f:89:b3:7a:41:5c:7d:1a:c7:bc:64:a2:b3:
ca:19:24:af:ae:ab:d6:77:e0:e6:68:81:21:fb:5c:
13:0d:9b:c8:bb:bc:79:e6:27:b3:42:8e:53:be:25:
9e:05:31:77:89:16:3b:a6:06:c9:5c:b4:a8:a4:72:
ce:ee:ee:b8:16:08:1c:3f:dd:23:5b:05:ae:76:df:
46:5e:20:59:37:67:08:c0:8c:bf:69:81:99:a0:c8:
17:68:66:1b:8b:7d:9a:cb:65:c4:53:5e:53:19:c2:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E8:C2:2E:52:E3:F7:24:27:80:9D:C7:EA:70:22:EE:58:BB:61:85
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cd:42:1a:05:5d:ed:fe:80:fd:08:37:68:2a:6e:3c:36:ad:
34:a1:69:05:70:0a:66:55:e8:c0:71:56:b6:84:88:93:ab:b1:
89:62:36:9f:b1:63:71:f4:a8:72:4c:e4:c7:59:e3:8b:8a:31:
bc:08:18:e9:85:7b:ed:36:74:30:c3:29:5b:ee:23:a1:71:e4:
f2:38:58:73:89:c8:1d:5c:3b:09:a8:32:75:4d:94:e2:9c:8b:
62:35:c5:fc:3d:f5:10:c5:96:78:2b:f7:cc:6e:8d:be:cd:08:
f0:e4:da:3e:6b:aa:cb:ee:9a:aa:f2:55:21:9d:1c:cb:c2:a4:
5f:11:22:5a:66:36:1f:52:87:cc:6a:b0:f9:64:45:2d:38:b4:
2a:8c:dd:d6:8c:ca:72:bd:06:bb:10:34:e3:f5:bd:e9:58:a3:
d8:67:ad:86:b4:ec:24:71:0a:39:05:16:e3:83:1e:12:ca:62:
ac:6e:84:b8:e0:d8:81:6e:55:54:1e:70:bc:7e:a6:11:fd:ef:
f0:e6:84:7a:d3:32:11:bf:eb:78:50:60:bf:cd:06:60:4a:c5:
e3:f9:3e:47:1d:b4:92:31:03:67:69:46:ca:95:81:7c:6a:8d:
67:94:10:48:6a:7f:03:12:52:8a:6d:50:72:05:88:ff:d2:10:
94:93:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:19 2025 by rpki-client