Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File: gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier: PCSzwbRW4ug6I0DCvulZry2QVaXpBt8XEQtfnMNGhRo=
Subject key identifier: 42:5A:B8:4B:7A:A2:43:E2:C8:74:A3:86:B5:F2:69:AA:73:88:6C:A9
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 01976997A4068BD6C3E25079146375B6FCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number: 14E9
Signing time: Fri 13 Jun 2025 14:00:34 +0000
Manifest this update: Fri 13 Jun 2025 14:00:34 +0000
Manifest next update: Sat 14 Jun 2025 14:00:34 +0000
Files and hashes: 1: 7bfhk4avMv3aXwEYlLbXhXoy75k.roa (hash: ahW1+x6JyHSj5mcCjtaoHK41xJuZSnTDOh9RfWnmSUA=)
2: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: XMFlvP3wcFsvDq7teoZ9DzhdzlCl/qC9VNT1qTamnyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:a4:06:8b:d6:c3:e2:50:79:14:63:75:b6:fc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: Jun 13 14:00:34 2025 GMT
Not After : Jun 14 14:00:34 2025 GMT
Subject: CN=425ab84b7aa243e2c874a386b5f269aa73886ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:0a:d6:3d:dc:a9:c5:ad:4d:3c:8c:dc:2a:
9f:4a:20:4a:cc:ed:d5:98:a7:92:73:6d:92:26:79:
4c:10:35:54:62:be:f1:74:b2:bf:fc:89:be:a5:75:
3b:69:a1:ff:31:17:f2:31:f6:48:bd:08:c8:8c:52:
44:8d:03:6e:41:d1:3a:54:12:00:f7:5d:a1:d0:6c:
6a:69:71:4f:87:40:f2:57:6b:11:a2:2e:a5:1f:d0:
b8:1c:68:50:12:b7:29:e7:f5:dd:09:6f:3e:73:a5:
15:6e:36:2f:8a:32:c5:63:17:bf:ff:8f:e9:06:5e:
cf:55:b3:f0:60:5f:6c:66:91:ab:4c:db:37:a3:ce:
df:ac:f0:22:72:eb:22:b3:b2:a2:55:53:20:ba:75:
b9:38:08:bb:36:e6:a1:0e:52:a0:16:9c:38:2a:86:
e9:15:6e:e0:76:1e:e9:e4:89:3b:1b:2c:a4:b3:15:
39:24:22:7b:99:60:ec:de:4f:a1:41:ec:99:b2:e3:
85:a1:c3:aa:db:c8:02:51:95:20:e2:1f:26:84:9b:
07:2e:5b:ed:5f:7f:8d:3a:44:f1:46:f9:34:85:cf:
e9:7e:14:ff:7c:ff:0c:1f:d1:ae:00:ce:96:37:0d:
da:30:29:dd:df:8a:ae:d8:0b:e7:3d:32:ce:61:d7:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:B8:4B:7A:A2:43:E2:C8:74:A3:86:B5:F2:69:AA:73:88:6C:A9
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2b:2e:01:b4:30:48:fb:ad:d9:1d:75:2c:77:3b:35:85:e9:
5b:28:ff:12:9a:6a:35:88:16:22:63:88:49:2f:97:d4:72:e5:
b8:f6:a0:a1:c2:5b:99:94:e4:96:e8:16:4e:31:04:72:62:16:
cd:26:28:95:a4:15:6e:0d:6f:15:2c:0d:35:e0:1b:1e:33:34:
e4:3d:93:dd:27:f2:ba:c9:24:6f:a8:6f:f3:da:dd:e6:a4:dd:
f8:e8:ee:dd:79:27:39:44:4c:0d:45:e0:8d:7d:54:33:e6:8b:
da:13:dc:72:aa:63:f9:a7:89:4b:be:17:58:ab:bd:84:34:16:
07:42:52:bf:dc:2f:16:fe:93:f4:75:48:c5:74:d4:6d:2c:42:
be:9a:e0:34:74:5e:d1:d5:15:2c:02:2f:49:6c:f8:07:22:41:
fe:0e:3c:c5:88:25:35:43:ed:e4:7f:d5:3f:21:8a:16:3e:6e:
e9:e8:f3:36:1a:30:2c:1a:f8:c3:fd:23:f7:b6:e1:4f:84:c8:
e1:6b:bd:02:a0:0d:69:30:35:3a:3e:28:7d:9f:f1:2d:8f:6f:
c4:61:d0:0c:5b:02:5d:e1:d0:c2:c6:fc:73:1e:80:98:2b:89:
a7:35:6b:f4:ca:5d:94:a5:c4:ad:40:d0:e8:a1:c5:1a:35:66:
4f:6f:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:41 2025 by rpki-client