Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
File: GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json)
Hash identifier: RmWj5psZpc+ON3dhSHTdYb9MZ0M47wPR6NPemIdSrLk=
Subject key identifier: 41:8A:C7:DF:3D:43:D7:BD:8B:3F:72:0B:B9:E3:F1:F9:5F:B4:56:48
Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Certificate issuer: /CN=18021459300d15fac550705cf6e258999d3d86ba
Certificate serial: 0197B7EA28273D5CEBD33C909EC946CA703A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
Manifest number: 0A98
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: dgxmANpIZp99I4QhoykRHMMZw1F7X3FxN4+bKyq4tVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:28:27:3d:5c:eb:d3:3c:90:9e:c9:46:ca:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=418ac7df3d43d7bd8b3f720bb9e3f1f95fb45648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:19:30:e3:6f:88:4b:ee:2f:66:30:56:fa:
b4:63:71:0a:0a:4a:06:97:32:09:8e:16:4d:a9:9c:
ef:c9:9f:d0:6c:e4:37:6f:f8:aa:5a:d1:8a:71:a8:
2b:18:da:65:35:3e:05:44:94:4d:1e:33:a7:53:90:
02:e9:7c:d9:36:2f:da:57:e0:a2:a0:49:76:bf:f3:
7c:fd:cd:72:3f:24:5c:8e:9a:26:bc:73:d4:6b:61:
ea:15:d0:2b:78:ea:28:dc:a3:de:21:ec:a3:a0:0d:
d2:3c:48:5a:81:18:31:46:b7:8f:33:db:7e:2e:92:
dd:4c:cb:c7:d5:f1:e2:af:a2:7b:04:79:4a:5e:82:
34:b2:f4:df:2c:fa:2c:96:c1:4f:04:0f:28:21:76:
c5:04:de:b0:d2:5f:a2:d5:85:f4:4c:f6:e2:bc:29:
7d:30:74:65:0d:98:e0:1f:8d:db:b5:40:4c:a2:70:
0b:bc:72:76:6c:b0:1e:e0:a8:88:75:52:4c:c1:4d:
a5:ad:e4:ff:55:c4:eb:f3:68:57:e4:7a:b6:ed:65:
02:b5:91:a9:08:b1:20:b0:b6:f3:86:e5:e9:3f:4d:
b7:13:3c:01:e7:77:a4:e7:f9:8b:ab:3b:92:1c:e4:
d1:bb:0c:4b:2d:5b:37:07:6c:98:66:f8:5e:b9:5b:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8A:C7:DF:3D:43:D7:BD:8B:3F:72:0B:B9:E3:F1:F9:5F:B4:56:48
X509v3 Authority Key Identifier:
keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:83:f7:2c:8c:57:a3:c1:30:08:0a:ba:f5:f5:ef:07:23:c8:
26:32:3b:03:37:13:e3:08:c3:2f:33:4b:e6:73:06:05:f6:69:
a3:2f:f9:21:0b:ed:bd:d3:dd:60:09:a6:73:2e:7e:38:a5:9b:
8a:f2:98:d1:e9:0e:d9:e7:0d:50:c4:da:1b:9f:b3:60:28:e4:
9e:07:4c:b5:3b:6e:3b:e8:26:97:12:6f:6c:5c:20:23:ab:8e:
8c:00:55:74:0e:32:cc:51:ce:28:23:43:9d:c5:d9:1e:bf:10:
ba:3d:5f:34:55:5a:2c:2e:f7:da:cf:e8:bd:13:15:af:1f:1b:
d3:a7:86:ed:1b:ed:94:88:e9:d7:7c:bf:31:ee:94:f5:07:8f:
95:ad:fe:04:7d:91:8f:e0:99:a9:d7:88:fe:db:b2:14:89:67:
0d:83:b1:b7:0c:1d:cf:c4:e8:ec:ef:a7:e9:34:1d:3c:87:55:
4e:3f:48:9b:25:c5:02:a0:55:b9:32:1b:a0:44:fa:16:a0:34:
95:8d:28:78:c3:b2:5b:d0:dc:a7:5b:f3:49:54:27:f1:80:94:
68:60:f7:f2:e8:94:1c:93:77:3a:c6:53:d5:09:50:6f:52:1d:
6c:77:34:a4:ef:b3:46:0b:ab:2e:df:60:d2:62:29:19:9b:7c:
aa:cc:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:03 2025 by rpki-client