Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: 1Ctx0zJiyWU0jimxJrjUVtoyaxNLfx3pRRie2F4ard0=
Subject key identifier: 6D:D8:D4:C8:C6:92:43:3A:2A:B0:CD:AD:94:A3:AF:F9:D0:78:20:16
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 01976B8659B1DC6ED44CD44024D8E3AAC0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 23:00:56 +0000
Manifest this update: Fri 13 Jun 2025 23:00:56 +0000
Manifest next update: Sat 14 Jun 2025 23:00:56 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: dwH0BncQ+dP0gYKb0XJYMkDI/wJQ1F/QRWZn5icYGfs=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:59:b1:dc:6e:d4:4c:d4:40:24:d8:e3:aa:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Jun 13 23:00:56 2025 GMT
Not After : Jun 14 23:00:56 2025 GMT
Subject: CN=6dd8d4c8c692433a2ab0cdad94a3aff9d0782016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:45:d2:2c:f0:c0:db:53:cd:b9:dc:d1:25:ef:
09:9d:7a:3a:1e:07:e6:fc:a2:2c:68:5a:68:fa:5f:
f3:f8:af:5f:8d:96:ce:df:58:ea:e6:b0:45:37:de:
e5:8a:37:89:8e:83:3a:92:a5:48:00:76:1f:c1:25:
c5:3c:31:ab:b9:2b:4c:06:2d:00:3a:80:ab:dd:e9:
ee:c8:81:cf:cb:73:33:f2:c6:2a:7b:03:68:67:86:
2b:18:8f:9d:88:46:9f:f5:5b:0d:57:6c:7e:95:3d:
b3:26:de:6a:28:31:2d:ff:eb:b4:2f:05:46:38:a0:
a8:c6:55:3b:83:c7:23:d2:f5:e4:c6:32:1d:1c:52:
ac:2b:a2:6b:af:92:02:4e:17:48:e7:1e:ee:e6:31:
96:c7:6b:26:10:57:b8:d5:de:b8:a0:2d:cb:f3:38:
22:40:2c:02:1e:46:cf:df:30:50:2b:0a:c1:a5:99:
be:59:38:36:2a:af:e6:a5:87:99:b0:03:a3:6b:77:
13:71:fc:41:7e:ac:5c:51:a7:23:cb:de:e6:a2:69:
73:1f:5b:86:1e:77:9f:ee:25:2c:17:63:e2:e0:ee:
bb:24:32:ca:66:5b:80:bf:a6:7d:38:fa:3a:10:f7:
b2:85:32:22:39:94:65:6a:92:cc:ab:dc:59:87:41:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D8:D4:C8:C6:92:43:3A:2A:B0:CD:AD:94:A3:AF:F9:D0:78:20:16
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f7:b8:b1:f3:19:23:45:3d:4c:f1:b1:3b:14:22:ad:1a:10:
c1:1d:b2:2b:de:e6:bb:8d:d9:60:56:2f:e1:14:ab:ae:07:5b:
03:4e:b3:09:e9:13:a9:8f:d6:9f:6d:a7:7a:e1:bb:74:f4:fd:
2f:28:41:9f:44:bb:4f:4c:4b:eb:be:c3:ce:a9:a2:d6:b6:3d:
2d:7a:b9:1c:f1:68:6d:e0:ee:ef:7b:c6:49:a1:9b:fc:81:f0:
04:5e:85:2f:cf:3a:ab:19:e1:6a:83:15:66:bc:e4:f6:c5:b1:
26:cf:c7:ba:cb:a9:50:1a:7a:c2:c5:e0:fe:e1:a2:07:0a:bd:
96:dc:55:64:b0:76:42:6d:b3:aa:ef:47:5c:1d:67:0c:8a:ac:
9c:19:e8:57:9e:25:71:15:7b:5c:35:09:86:77:43:bf:36:73:
88:92:7b:7a:8e:18:0b:dc:df:e2:75:93:f0:96:60:63:8b:70:
06:c3:17:27:5b:1b:e1:47:e7:2e:45:65:75:a3:dc:b4:60:82:
93:d1:dc:38:8c:88:c5:ff:3b:92:d6:9b:3d:fa:69:60:5a:e6:
f8:44:a7:68:fa:75:c2:e1:99:6e:ff:56:66:22:89:ea:f2:ed:
ae:d5:64:2f:85:3c:e2:b4:62:ea:e0:5f:3d:27:fd:34:d9:7c:
f3:20:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:43 2025 by rpki-client