Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier: MqLHbN2Ixcnd7vr6nz0/dhT1XFnsYO/Edi+ite3OpSY=
Subject key identifier: 79:5B:62:FB:5C:5B:DC:15:97:6D:A2:77:0A:D7:C6:66:24:DD:23:F7
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer: /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial: 0197B70E85D980618EAE2AAE0C95176A897A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number: 0F31
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: KMjEtUoaPFjjArJ1nBk8S+C3jT1F6UJ/VRcbTkfMcYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:85:d9:80:61:8e:ae:2a:ae:0c:95:17:6a:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=795b62fb5c5bdc15976da2770ad7c66624dd23f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:29:a8:3f:f9:24:55:d5:ab:e7:92:bb:ec:
29:e7:b9:ac:fa:16:e0:cc:7d:cb:cf:5d:c0:40:4d:
e2:34:5c:a6:0c:74:72:e8:ce:e1:f3:e5:b3:dd:da:
d5:f3:48:7b:95:94:e2:c1:e1:53:ce:da:5f:7a:19:
11:a5:68:44:6f:0f:e0:e0:69:e2:0a:f1:db:33:16:
0a:a2:6e:1c:2b:fe:b3:d6:35:e9:b6:00:9f:30:7d:
c0:49:54:c3:f6:35:30:c4:32:e2:a0:f6:12:34:42:
1e:a1:b4:76:0b:2b:1a:a2:3b:9f:86:3e:78:71:00:
3b:f6:a9:af:8b:92:a4:23:ef:9d:4a:74:ef:11:a1:
b0:3d:c4:4b:ff:15:a2:34:6f:61:6d:50:2e:95:07:
f4:4e:61:0e:63:98:8b:da:38:f1:6b:c9:48:8c:15:
a9:cf:05:f8:1b:09:89:79:b9:4a:56:95:52:59:6c:
34:97:fc:ba:d1:35:4d:de:5d:84:57:b9:58:1d:18:
0f:a5:74:6c:0f:3f:4b:26:b7:0f:81:a4:f3:ef:7c:
93:11:62:b5:a1:87:44:1a:5a:59:b4:fc:41:b9:f2:
bb:81:ee:e4:3d:59:9f:4d:77:30:ab:d2:7d:bd:94:
33:f4:95:55:a6:70:ac:2c:3e:2a:1b:9f:4f:46:e3:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:62:FB:5C:5B:DC:15:97:6D:A2:77:0A:D7:C6:66:24:DD:23:F7
X509v3 Authority Key Identifier:
keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:2c:90:c0:a8:e1:0e:4a:88:c2:1b:81:7c:95:f7:27:ba:
97:18:ec:7b:c2:fc:ec:86:db:9c:c5:c2:7d:bc:d2:60:66:58:
e2:2d:01:d5:eb:e3:04:d4:22:48:73:b5:a8:d7:40:3f:85:d9:
35:59:d2:24:d9:49:5e:e3:9d:4a:ee:74:7b:93:0e:ba:2a:45:
35:ec:50:d3:66:8f:12:28:19:37:e9:f9:da:12:9d:ed:8b:04:
79:3e:2f:e3:dd:33:04:55:7f:1d:54:c9:87:f4:8f:cb:76:ed:
de:8d:8e:6d:82:72:b3:04:39:04:71:1a:46:f2:fd:73:40:75:
ee:55:50:9c:db:fa:40:4a:06:90:db:d1:5e:91:ed:1b:08:15:
e7:80:80:8a:0b:cf:d0:cb:47:12:b8:b9:42:3d:f3:03:06:c4:
6b:f5:d0:13:81:4a:98:79:cb:b2:81:d7:1e:3b:eb:9c:18:18:
75:53:d9:e7:8e:a6:a6:fc:b0:15:bc:9f:04:cb:9b:09:c3:26:
d7:ac:77:d4:50:7d:d8:dd:99:92:db:ab:80:f6:33:23:ad:d7:
7c:ef:e4:4b:cf:57:1d:09:e5:5b:c4:35:b3:eb:49:f0:0c:25:
fe:3b:5e:6c:a3:e4:6e:f7:d7:85:3f:c3:9f:ee:a7:9b:4f:67:
84:42:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:34 2025 by rpki-client