Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: JaW13qX26jq4ijYlPwrRCE6tj4WdzWJJUsGbLx4+cNU=
Subject key identifier: 74:C6:48:CA:57:7A:82:78:7D:C4:6B:8E:33:9A:58:94:8F:AD:CF:39
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 0197B7B2E58A8B829E9462F6E5A1F63CCEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 112C
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: 6T1LPcj4YMFyUiyvHz5YBzdIIqHtklLl8nN9xgFu5ig=)
2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e5:8a:8b:82:9e:94:62:f6:e5:a1:f6:3c:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=74c648ca577a82787dc46b8e339a58948fadcf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:61:a1:03:35:88:5b:34:22:c7:7b:20:b6:
69:37:7e:52:3d:6b:3b:db:f7:49:05:bc:b4:de:3e:
7d:e0:ad:2c:d4:6b:05:8f:a7:ce:84:b3:76:32:ba:
4c:10:a8:2b:aa:cb:0c:67:d3:9e:0c:aa:29:63:7f:
e9:c4:ed:91:9e:27:a4:f7:36:30:b2:7d:0e:0c:13:
0c:c1:64:76:d2:58:09:b1:0d:c0:27:d0:3e:31:12:
10:f5:21:a5:de:d6:8b:ef:da:33:e2:0c:d6:00:51:
03:ba:c1:12:db:0b:95:f1:3b:74:bb:49:40:a2:77:
79:da:6e:c2:38:ff:8a:59:e6:92:65:38:1a:28:cc:
af:5f:61:f0:8c:3b:b7:79:40:d2:f5:dc:1b:dc:14:
c0:17:4a:77:49:71:4f:9b:be:f9:e9:eb:d6:22:6e:
0a:5f:3e:26:3d:e4:f1:cf:83:13:8c:a2:8e:0c:6f:
23:da:66:dc:3a:cd:a5:96:c1:4c:dc:bf:8f:b5:94:
4e:49:d4:56:e7:29:ec:67:73:b7:4d:49:d0:b4:ec:
ee:90:7b:7e:56:e6:c0:18:ae:e7:98:c3:e3:e3:1d:
dd:b9:d2:3d:46:7f:bb:d8:38:5e:93:e4:26:c4:8f:
92:f2:eb:d8:13:3c:fb:34:e4:4f:e4:4b:1b:ef:36:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C6:48:CA:57:7A:82:78:7D:C4:6B:8E:33:9A:58:94:8F:AD:CF:39
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:fb:90:3b:43:e4:f3:1b:0a:8a:cb:bc:79:6d:1d:d2:60:
9d:11:9b:25:49:6e:39:c6:9d:15:39:a1:a8:ab:b9:5e:60:79:
d6:65:c1:da:6b:b8:98:45:5b:5d:6b:0d:29:d6:4d:1d:7a:8a:
56:85:08:75:18:16:ab:1d:a9:79:bb:ab:89:94:05:ea:a2:69:
93:6b:52:0e:a0:f1:17:fa:f9:11:85:1a:d4:12:5b:3d:4e:99:
4b:3e:40:e9:0c:ce:3a:c3:4d:01:27:c0:33:4a:46:42:0a:c6:
01:21:92:dd:bc:03:56:80:65:71:c6:de:d0:97:f4:bd:66:74:
e4:03:e2:01:d7:fb:d3:63:df:f8:ec:e2:ed:92:a1:15:ca:72:
81:a7:1c:e6:9b:a4:fc:a7:51:b2:ad:a8:f7:da:d5:ec:5f:f6:
72:e4:b0:77:79:24:59:4f:20:18:2c:05:72:dc:b4:94:bd:f5:
46:07:86:38:6a:76:d8:4c:9a:cf:d6:0f:30:da:14:3e:6f:36:
44:2a:85:6d:ae:74:fc:d4:7c:85:87:85:05:63:ce:75:4c:65:
a2:3c:42:15:26:9d:c0:39:cc:32:6a:08:98:90:4a:f5:01:c3:
d3:f8:c5:d0:a8:95:8b:a2:19:ca:e6:1a:f8:24:b1:31:e5:98:
29:37:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:16 2025 by rpki-client