Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: RCQcFuwQL9x0Bh/yrorqPDn9bkwiROzGYFiyikgnVeA=
Subject key identifier: 38:9F:92:DA:F7:91:2E:E5:F6:1B:71:96:53:05:12:DA:60:07:70:7B
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 01976F2BD8CE110C138032A8D540F570EEED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0BFE
Signing time: Sat 14 Jun 2025 16:00:33 +0000
Manifest this update: Sat 14 Jun 2025 16:00:33 +0000
Manifest next update: Sun 15 Jun 2025 16:00:33 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: D+OZQcdIDMBpR16Lz4vwFYa44cCOiX6ZtUlUy/mWF9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:d8:ce:11:0c:13:80:32:a8:d5:40:f5:70:ee:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Jun 14 16:00:33 2025 GMT
Not After : Jun 15 16:00:33 2025 GMT
Subject: CN=389f92daf7912ee5f61b7196530512da6007707b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:cb:eb:6f:6d:e6:54:fc:9e:ec:64:eb:67:
78:90:d5:9e:c3:b6:75:13:af:6c:a1:a0:98:56:e0:
a6:04:1b:1d:40:b7:e2:47:23:92:b0:74:ac:67:4f:
13:52:c0:7e:92:7e:f5:31:08:37:fc:84:9d:6a:34:
39:54:64:48:5b:91:eb:4d:dc:f6:7e:dc:97:9e:94:
7e:ef:e8:66:26:f2:7d:6e:59:af:d1:8c:b6:a5:40:
f7:98:92:18:bd:c8:71:bb:18:59:2c:4a:ce:c5:04:
f1:63:21:4d:0f:bc:3d:41:d4:1b:7a:44:a4:71:1c:
ac:0e:9b:77:fc:dc:b7:b3:4b:b4:1e:0d:3e:87:a7:
7c:74:b9:9f:c3:47:52:fe:4e:1c:92:5c:ee:b7:d6:
39:57:94:22:73:fe:bd:06:e4:0f:b1:6e:04:2c:23:
74:b8:c7:82:68:ea:af:94:62:a8:76:97:59:6f:16:
d7:df:e5:c4:4b:b1:09:15:cd:ab:f8:1f:11:01:bb:
28:78:33:06:d8:e6:22:42:b6:4a:c5:ae:df:ef:63:
3c:3b:b9:1d:c2:9c:c3:95:5f:56:fc:38:72:6d:7c:
65:89:64:9e:1a:54:40:5b:71:f3:fb:32:5c:bb:dc:
51:c2:eb:ec:d9:91:8d:d1:0a:54:7c:ee:9b:28:f4:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:92:DA:F7:91:2E:E5:F6:1B:71:96:53:05:12:DA:60:07:70:7B
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:69:f5:24:e6:cf:29:45:a6:56:c1:b4:ca:e5:ce:14:ea:a9:
f1:12:e1:83:3a:bd:07:e1:3b:12:38:3b:d4:61:29:b1:83:ad:
96:b2:1a:e3:31:d7:fe:fb:47:b8:ca:64:a5:5b:af:bd:e6:8e:
d2:24:50:21:c2:bf:68:aa:c9:6b:3e:be:e7:b2:6b:ef:fe:ab:
64:39:c2:af:46:6d:e0:76:f5:a1:f5:4e:b8:ce:d5:fc:5e:37:
f8:13:66:4f:50:f2:6e:1a:0e:8f:bf:b1:d9:f6:e5:04:ac:e5:
f2:ab:d2:a5:0a:e4:6e:db:09:06:78:11:5d:c4:47:4e:c0:2d:
e1:83:95:14:ae:e4:50:1a:0a:aa:e0:96:7c:1f:0d:34:28:05:
32:67:a1:46:27:7d:c4:48:69:63:14:09:96:91:b3:9e:35:40:
d6:0f:9e:c5:32:84:40:40:3d:e1:1d:bf:b6:48:d7:eb:01:b9:
e2:0d:3c:89:6b:cf:b0:49:6d:a5:56:17:25:5f:27:74:60:c0:
d6:6c:c9:1a:3c:82:99:14:d9:4e:11:0e:db:34:ba:59:cc:83:
db:44:15:3a:b8:85:e8:3b:ad:4b:f7:ec:a7:89:ed:3c:c8:ac:
11:13:3c:94:36:74:06:84:99:df:2f:40:5f:5b:bc:80:df:83:
e5:77:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:59:11 2025 by rpki-client