Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: qctsFlCzDdSUoXODMQmIOhf2/eLI9+IryAQP9/8MC0s=
Subject key identifier: 77:42:F7:6E:D6:BA:BC:C7:8A:6D:E0:70:8D:65:2D:EF:C5:A9:53:55
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 0197B5FC642D57FC248458A05BA0325BD3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 10:01:46 +0000
Manifest this update: Sat 28 Jun 2025 10:01:46 +0000
Manifest next update: Sun 29 Jun 2025 10:01:46 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: ylaEZArHiS9e+mX5WUMdhEwyuaowMXMa4sScSA1+QUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:64:2d:57:fc:24:84:58:a0:5b:a0:32:5b:d3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Jun 28 10:01:46 2025 GMT
Not After : Jun 29 10:01:46 2025 GMT
Subject: CN=7742f76ed6babcc78a6de0708d652defc5a95355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:18:4d:82:43:6a:f5:b5:d7:0a:9b:85:dd:
55:65:1b:d0:71:9d:8a:a3:05:2e:f2:d7:f1:aa:a1:
7a:e0:d1:31:72:0a:13:b7:8a:87:2b:6e:74:d8:17:
c3:cb:a6:98:0a:78:1b:d7:02:ae:30:c4:16:2a:74:
f0:6a:e5:49:07:a7:a3:0e:a4:ff:4e:21:d6:f4:1e:
54:f0:76:42:87:62:09:77:45:66:aa:fc:71:10:4e:
d6:a8:a4:40:3b:15:07:0b:6e:bc:59:15:84:4f:a6:
01:10:02:47:17:9f:1e:3d:9d:0d:46:38:73:01:d5:
79:08:ec:e5:07:b7:4a:9f:7c:97:9c:83:0b:cd:04:
87:be:c2:0c:fc:2b:e1:cf:e2:05:44:aa:44:a4:68:
ee:1c:47:b1:f8:79:d5:70:88:7c:76:63:ee:f7:74:
61:56:98:98:35:61:29:0f:fa:20:b2:10:52:b8:4e:
d3:0d:44:78:22:60:44:de:c3:4c:da:f1:9c:5e:72:
25:0d:34:57:37:0f:ac:89:05:56:2f:48:1c:24:4f:
f4:ed:08:4d:6c:a1:3f:4a:4a:e2:e4:ad:5d:11:00:
89:2a:50:64:88:1b:79:f4:4b:a2:15:a9:cc:2c:c5:
02:6b:20:c0:9f:4b:1d:cc:61:0b:bb:90:14:e5:53:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:F7:6E:D6:BA:BC:C7:8A:6D:E0:70:8D:65:2D:EF:C5:A9:53:55
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:33:52:a8:34:74:d2:fa:af:c6:25:be:d4:f4:d0:c8:90:06:
9f:27:26:d1:30:80:71:02:85:61:d7:d6:39:af:c0:9d:c4:73:
b4:b6:58:6d:39:7e:8a:f6:56:11:57:86:4b:fd:9d:c1:30:98:
18:ed:71:bc:64:2f:af:ba:17:db:e1:7c:af:dc:81:40:fa:92:
7e:53:3f:fc:b2:cc:7d:7f:3b:55:4a:7a:af:d3:06:e8:90:8b:
c0:4c:10:84:b3:90:44:bc:24:25:2d:58:3f:b2:76:94:d1:92:
52:4b:07:5e:01:49:b9:e1:f0:72:43:35:ea:a7:7a:ee:c4:cb:
63:06:0a:d9:6d:f2:ee:65:89:e3:a6:eb:5e:ee:b7:e4:90:1e:
2a:8d:70:ff:36:31:87:ca:e9:2a:e7:b7:e1:7c:9e:57:87:e5:
85:5d:bd:05:c7:e1:01:cb:f6:5e:7b:cb:6c:84:eb:06:85:55:
c3:1b:17:22:9e:de:94:2b:9e:7f:e2:0d:6c:fe:2a:0d:d9:ff:
bd:20:9b:80:22:77:a0:56:f8:c6:7a:4d:54:1a:dc:85:d5:dc:
68:7c:0d:2a:49:1e:82:97:af:f4:f3:9f:ce:a5:cf:7e:4f:58:
db:3d:77:ee:cf:44:56:28:d9:14:3f:e1:d2:0b:5f:7c:6e:f1:
9b:b1:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:10 2025 by rpki-client