Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File: gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier: 1TKR6Am1lNLnyKPTv2DEfVRo2de6l1PqzoXocGKh74o=
Subject key identifier: 23:18:ED:31:C2:7D:D9:01:F6:42:9F:CE:F0:0E:3E:3F:24:05:24:BB
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer: /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial: 0197752DDA4E48187514EE4734E213F0BAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number: 1253
Signing time: Sun 15 Jun 2025 20:00:28 +0000
Manifest this update: Sun 15 Jun 2025 20:00:28 +0000
Manifest next update: Mon 16 Jun 2025 20:00:28 +0000
Files and hashes: 1: 3Ecxk2P7e71r675s-iUcdql5m18.roa (hash: T89HhXcDe17TB/b7r8oC0290hjOpZyi3qRar9s99IcM=)
2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: jcJ0Qx3Hi/dVIgjCOa4YdlpSpJEICh7vo/IT6dCiYrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2d:da:4e:48:18:75:14:ee:47:34:e2:13:f0:ba:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Validity
Not Before: Jun 15 20:00:28 2025 GMT
Not After : Jun 16 20:00:28 2025 GMT
Subject: CN=2318ed31c27dd901f6429fcef00e3e3f240524bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:3b:c2:85:26:5c:8c:25:cd:a9:83:b6:0d:
13:99:56:c6:2f:f3:0d:a0:81:3c:02:99:ef:87:ee:
03:1e:1f:91:b4:8e:52:cf:1c:44:35:ba:78:02:4b:
fc:4d:8b:87:53:47:03:78:92:89:2a:e1:4d:71:81:
1d:9c:e6:39:fe:1c:b6:e4:fe:1d:49:ef:10:10:0d:
ef:5a:a1:c5:d9:ff:42:3d:cc:4a:4a:f7:e9:3e:e7:
fb:87:fa:da:c3:3f:05:d3:f4:d0:43:c7:27:b5:29:
88:97:57:92:be:2d:72:b8:6e:e0:d6:28:83:0f:7e:
3e:d0:2c:45:7b:1b:d8:a4:e2:69:94:76:3a:8c:33:
dd:24:25:5a:c5:72:7c:63:da:75:a6:98:13:8c:fe:
56:20:b7:f7:7e:ea:1d:59:27:f7:4c:a1:34:58:59:
46:07:94:83:5a:9c:c0:95:8c:d5:b1:cb:63:ef:52:
84:6b:f6:66:03:73:53:29:fa:24:8a:70:28:32:f9:
29:04:f6:29:be:73:aa:85:f9:75:77:58:e5:ba:ea:
f0:49:ed:19:8e:43:7c:b2:ca:57:2e:ba:6a:cf:f6:
91:f9:13:ad:32:75:5e:62:c1:dd:bb:5f:1f:d3:81:
c9:47:26:a6:ac:d0:1d:28:23:25:80:b2:19:2e:58:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:ED:31:C2:7D:D9:01:F6:42:9F:CE:F0:0E:3E:3F:24:05:24:BB
X509v3 Authority Key Identifier:
keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:30:a2:d0:03:55:c7:a9:ac:dd:ee:eb:3d:ae:59:c3:f0:72:
13:48:70:f5:d4:4e:e6:1c:ab:82:a2:88:94:ff:1e:0f:93:37:
d7:70:dc:b3:c4:3f:79:ca:c1:b0:02:3c:0b:8f:f1:88:f0:7d:
10:af:d4:cc:5d:25:e3:b0:59:19:dc:f4:0c:16:02:4f:86:dc:
ea:a4:d7:be:bc:ed:f1:bf:0c:8d:2e:58:f1:ed:37:05:26:01:
03:8a:01:11:8d:92:ce:fe:f2:f1:d9:c1:58:e5:cb:28:1d:4a:
b0:72:da:85:69:a6:3c:ad:fd:cf:51:4c:76:9d:55:50:e0:a0:
bd:7e:23:64:7a:72:3a:0e:ed:6d:3f:1a:10:9e:86:85:52:88:
b3:22:26:e3:c7:e5:c3:87:f8:8d:6b:51:95:24:6c:c9:1c:07:
c1:fd:45:59:8f:c6:84:9f:1f:cd:0c:6d:d6:4d:2d:e5:8a:eb:
8f:19:8d:4f:f4:b8:78:9e:7f:56:9e:ab:ff:78:80:8e:ce:5a:
58:a9:9b:bb:ca:c6:7d:f2:ab:01:8f:e3:a9:5d:fd:f3:ee:af:
75:e2:cf:7b:2e:e5:08:da:d4:74:35:f6:d1:df:75:7b:26:c8:
d9:7d:2f:41:b6:26:2a:df:fb:b7:dd:e9:ad:b5:2e:95:4d:1a:
79:fa:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:26:14 2025 by rpki-client