Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: sJD0QpX1rrWGSfRpNYnTPXH/h95ML94OIT2zh4B2xeQ=
Subject key identifier: AB:80:4C:2E:66:34:AF:2C:7F:B4:D1:9B:BF:57:81:14:F3:A8:97:69
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 01976DAB4F9C1D53C82A3C2A55FBFF673493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 09:00:32 +0000
Manifest this update: Sat 14 Jun 2025 09:00:32 +0000
Manifest next update: Sun 15 Jun 2025 09:00:32 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: BCO38tLsleTdbCteixiGgno0XPGiY61fFetnCdBACXU=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:4f:9c:1d:53:c8:2a:3c:2a:55:fb:ff:67:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jun 14 09:00:32 2025 GMT
Not After : Jun 15 09:00:32 2025 GMT
Subject: CN=ab804c2e6634af2c7fb4d19bbf578114f3a89769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:ef:05:3b:f3:3a:1b:00:64:69:dc:b8:99:
df:45:0d:3e:cb:ed:3a:46:8d:aa:e7:4f:74:4f:43:
97:7c:72:2e:f8:97:1d:0c:c9:74:23:c1:d6:1a:05:
b0:6f:cf:83:4f:d7:4d:2d:37:04:9c:9d:1a:d0:b0:
ef:92:e5:55:39:b5:f6:05:76:2e:61:b6:60:65:18:
4c:bd:2a:30:ab:21:ce:3a:7b:82:4a:99:98:25:e4:
38:2d:3f:55:e0:0f:9b:01:eb:9e:17:e5:9a:1a:4f:
3c:c7:d7:82:55:23:51:1e:de:7e:fa:ea:bd:10:a1:
f6:a1:c5:6a:19:6d:63:62:85:23:48:4f:78:c3:9e:
36:45:00:b4:d0:b3:aa:fd:fe:24:c1:4f:65:9c:2f:
dc:7b:b3:8a:6c:7b:98:86:41:fe:b3:dd:38:f5:13:
1a:54:d1:12:76:e8:d3:31:fd:2b:ee:64:c0:c5:32:
11:0e:95:fb:76:41:c4:50:79:f1:07:9c:75:e5:85:
64:68:6a:5b:88:ef:1d:2c:59:9b:11:76:7a:ba:6b:
b3:96:77:b3:32:0c:e1:60:1e:eb:3a:cb:c0:0e:39:
f7:48:cf:2d:90:d3:07:46:ee:4a:b1:21:5a:5c:af:
45:e8:2f:c9:3e:44:41:b2:25:48:91:ce:35:45:92:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:80:4C:2E:66:34:AF:2C:7F:B4:D1:9B:BF:57:81:14:F3:A8:97:69
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c4:7f:ca:87:e7:4f:84:76:43:b3:e0:7a:99:58:04:33:54:
9c:b7:62:76:4a:86:35:7c:13:05:5c:12:e8:6c:d3:ff:47:fb:
d1:fb:1b:14:22:6f:ca:4a:15:3c:d0:c6:bd:d0:ec:a1:1a:32:
01:fb:97:ac:0e:47:17:01:f0:2f:bf:f9:4a:49:10:9f:f8:a9:
7a:ea:30:bc:dd:85:cc:20:38:12:d2:8e:98:a8:90:0a:36:45:
e1:da:18:6d:a9:7c:8a:67:df:7e:2c:33:a9:7e:ed:f2:03:d5:
02:bd:fa:80:93:78:d1:96:16:22:0d:fa:69:6d:62:c5:19:4c:
b0:a4:dc:69:68:d2:e7:16:38:6e:8b:4a:bb:1a:88:47:fd:e0:
84:e6:40:56:c4:ad:18:ab:9e:39:9f:ac:f1:39:69:f9:0b:0c:
ec:10:5a:77:0c:fc:08:98:62:56:5d:44:a3:28:b3:9c:9f:9b:
ee:6e:45:40:33:d6:19:a3:43:a3:ef:96:32:76:5e:fc:ff:a3:
39:13:9e:32:e2:77:11:3d:95:db:ea:1a:d5:c9:fc:a1:0e:d5:
e5:50:f0:1d:45:3d:5b:ee:b0:f2:41:db:17:19:cd:1a:1f:7c:
20:cf:d8:b4:2d:9d:6a:14:f7:dc:a0:23:67:1b:3b:8b:3b:3c:
18:13:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:18:03 2025 by rpki-client