Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: R7Xo0SuOcIPAMPonMAebM7zNPcmyy0tj7hSTw1zEo6k=
Subject key identifier: 3B:E3:66:33:EE:6C:73:18:13:C5:22:44:81:68:DE:2C:AC:35:88:31
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 01976A05B18948E0FE671ED32A4AED6B4D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 16:00:47 +0000
Manifest this update: Fri 13 Jun 2025 16:00:47 +0000
Manifest next update: Sat 14 Jun 2025 16:00:47 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: vY1OOBGneiVhdukGa9CnDPD28U78vkAD+YVFUKi3ETA=)
2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:b1:89:48:e0:fe:67:1e:d3:2a:4a:ed:6b:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Jun 13 16:00:47 2025 GMT
Not After : Jun 14 16:00:47 2025 GMT
Subject: CN=3be36633ee6c731813c522448168de2cac358831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:cd:f4:c3:ec:cc:e2:7c:8e:c0:0e:26:c3:
3e:1e:02:28:67:df:8d:43:7f:79:8b:8d:1b:93:c4:
7b:77:36:b6:f7:b9:b4:35:2b:20:a7:e9:8a:92:91:
68:84:22:0c:6a:08:48:0c:e7:3b:92:9b:d0:58:24:
62:29:14:93:9e:73:99:91:c3:10:a8:26:61:dd:c7:
13:d1:8f:c7:77:4e:36:0d:32:47:30:64:27:5a:27:
eb:4c:c3:df:eb:fe:d6:68:e3:29:73:fd:4f:05:49:
50:be:2c:81:46:6d:16:94:a3:64:05:d8:02:87:18:
4b:f8:3e:30:eb:6f:c6:4e:e9:7d:c5:ee:af:e1:56:
66:77:fd:f6:64:d5:67:9b:e0:50:e9:36:fc:1e:ba:
7e:e0:83:22:69:be:87:3e:49:49:55:6d:56:4d:61:
e2:21:1e:cc:e1:2d:7a:c3:a1:26:0e:d9:9a:bb:b5:
3d:dc:9e:30:33:4f:f3:e8:01:bd:58:ea:5c:d5:3a:
8f:7c:0e:66:98:cb:aa:4e:ec:53:46:fd:34:7b:15:
b3:58:6e:d5:d6:ba:17:d4:cb:29:67:df:84:13:e3:
13:3d:4a:d0:67:71:dd:42:c8:7a:4b:7c:2a:4d:4e:
bb:55:8e:7e:eb:62:99:af:6c:9e:68:83:56:76:d5:
d4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:66:33:EE:6C:73:18:13:C5:22:44:81:68:DE:2C:AC:35:88:31
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b0:b7:40:cc:5a:dc:d2:68:3c:4e:27:31:a4:22:eb:36:b2:
f9:56:d1:c6:2f:9d:f3:38:0b:70:3b:dd:ee:e9:e4:e8:11:24:
9d:af:39:3e:89:15:83:c9:e7:e5:37:e2:3e:dc:5e:02:a0:0b:
9d:30:4b:ae:0d:65:4e:72:66:2b:e1:00:b2:96:cc:d8:b7:a3:
a1:fa:47:d8:ca:e4:7f:2b:3c:bb:7d:fe:da:26:4a:43:bf:50:
aa:f1:8b:13:31:4d:ce:62:46:13:8e:7b:cc:fd:97:07:15:f4:
db:b2:f3:21:a0:29:68:e8:5c:a4:ab:17:75:36:40:39:e1:37:
15:f9:fa:cf:07:76:90:0f:26:23:12:b2:5b:b2:42:7a:3d:f1:
07:59:63:44:19:ab:93:a1:1b:61:35:fe:63:8e:89:e4:df:f0:
28:23:c9:da:15:d8:d9:74:20:41:77:ff:37:91:80:2a:69:32:
43:8e:a1:9c:62:d6:21:c2:03:8c:17:67:99:76:08:88:55:87:
33:64:62:b0:28:46:cf:fa:01:a4:86:5f:4e:1d:5f:28:f4:1d:
4c:30:1a:5e:fc:28:cf:3e:c7:9e:2e:67:55:ec:5d:69:62:f9:
8b:47:b9:69:99:c3:26:11:85:f8:ca:a9:73:ac:a3:fa:84:d3:
f7:1d:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:12:34 2025 by rpki-client