Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: HDt1AmTYrY3BSMUjTTXFQmfIszCoRwzeQIYuohdw66M=
Subject key identifier: 13:B7:ED:38:2B:CE:AD:65:DF:F0:86:5F:49:89:1B:D2:43:42:B8:DF
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019768F2F92B708D424263AADB850EC7F345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 08D3
Signing time: Fri 13 Jun 2025 11:00:43 +0000
Manifest this update: Fri 13 Jun 2025 11:00:43 +0000
Manifest next update: Sat 14 Jun 2025 11:00:43 +0000
Files and hashes: 1: fvmPK9oBYawf3WrvWH2W-IrLack.roa (hash: jbyIzGoc+3nZMPPaYxP5PgX+7SvKTCObiN1ijSSrLNI=)
2: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: lvE8VBiRhI3s9KbErjHR9rcFWQfkm1IdnC4In5+Sajc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:f9:2b:70:8d:42:42:63:aa:db:85:0e:c7:f3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Jun 13 11:00:43 2025 GMT
Not After : Jun 14 11:00:43 2025 GMT
Subject: CN=13b7ed382bcead65dff0865f49891bd24342b8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:f9:be:17:c8:8c:aa:13:4e:a5:8b:e6:79:
4a:f6:fc:22:5a:f3:48:80:8d:27:37:39:ef:ef:75:
af:be:04:3e:d8:67:4b:01:8b:59:f7:34:b9:ce:9d:
ea:25:8e:c0:0a:a6:5f:04:8b:90:3e:b1:0c:b6:bf:
a3:74:03:02:7b:ec:a2:51:f1:3b:da:51:0c:8f:96:
0e:1e:d5:90:e0:8b:8f:17:0d:8a:65:a8:45:c0:0b:
35:f0:58:f4:5b:ce:59:f0:0e:81:6d:51:8d:02:bb:
af:a2:97:74:56:eb:ed:0d:5b:f1:aa:9d:63:cf:07:
1e:63:c7:1e:00:49:df:18:00:89:9f:0b:51:64:0c:
b7:f8:72:7a:c1:ec:4d:05:95:6c:41:9f:19:e1:42:
c7:d9:ea:c2:59:c6:07:5c:ff:fd:95:35:b1:5e:bc:
e2:74:2d:a5:2b:23:8e:28:ff:c4:f5:21:a8:6e:5e:
44:d4:37:9c:36:21:9f:66:cc:dd:1a:e2:2b:c1:dc:
ef:c1:44:31:c8:a7:99:a9:c6:5b:c6:9c:2e:2a:81:
7b:3c:83:30:9a:5f:64:ea:0c:04:19:e2:0f:b2:a8:
55:08:c0:aa:d7:e6:7c:38:46:45:05:0c:a5:e1:d0:
3b:a7:a5:6e:06:fe:b9:1e:1d:f7:2e:5f:12:83:71:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:ED:38:2B:CE:AD:65:DF:F0:86:5F:49:89:1B:D2:43:42:B8:DF
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5f:b2:d4:c5:fa:8a:1f:b0:9a:bd:1e:d1:5f:47:64:3e:59:
ee:c9:1e:43:bc:ab:d7:e7:dd:b0:97:82:0d:c8:93:4c:d0:12:
06:94:51:82:68:45:09:32:a2:45:3d:19:34:36:5b:01:83:22:
a0:07:d8:fb:78:92:37:e2:a1:ba:ff:7b:19:e9:49:45:37:7b:
4c:6a:73:34:02:6f:61:48:10:cc:92:47:16:33:f5:75:f9:65:
7e:54:05:de:c4:ae:31:7a:d1:fa:ac:52:5a:38:88:f7:98:76:
66:90:22:23:f8:1a:71:33:66:3c:bc:f4:05:90:01:11:09:69:
d6:f1:c4:77:d4:1b:94:f8:11:89:0c:c1:f4:47:26:f0:c1:9d:
1c:cd:01:40:1d:cc:3a:28:a6:a0:02:87:c7:0b:b5:52:e1:1b:
bd:fe:e6:96:a9:87:e2:23:fb:22:50:59:df:20:9f:9d:82:d6:
17:50:b8:b9:30:ce:78:ce:ca:91:63:dd:6f:de:45:58:d8:06:
c7:98:5d:9e:7a:36:3a:f7:63:b5:4d:b0:00:85:04:30:e1:f0:
90:b5:d6:41:50:07:5d:b5:a1:dd:05:6b:65:53:9e:34:ad:bd:
97:69:23:01:91:26:b6:59:7d:c3:1b:31:eb:42:a1:54:de:0e:
af:4b:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:09 2025 by rpki-client