Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
File: gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft (raw, json)
Hash identifier: AngF2nRbopdBgfGWE/6quP4iVBJGU41KwDwLryHqjrk=
Subject key identifier: EA:6A:FA:77:15:48:38:06:F3:A7:ED:35:4F:02:9E:46:B0:43:B4:C9
Authority key identifier: 80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
Certificate issuer: /CN=80eb71d019a483225c324c88c6c48020ef9f1168
Certificate serial: 0197C0ED3DB46C6FE27C05A2AA70B47073CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
Manifest number: 15B7
Signing time: Mon 30 Jun 2025 13:01:02 +0000
Manifest this update: Mon 30 Jun 2025 13:01:02 +0000
Manifest next update: Tue 01 Jul 2025 13:01:02 +0000
Files and hashes: 1: gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl (hash: 4zrwibZ4KXUw4Ma9zH23/t1X0ecP+TxHAG0yxsIvSdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:3d:b4:6c:6f:e2:7c:05:a2:aa:70:b4:70:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80eb71d019a483225c324c88c6c48020ef9f1168
Validity
Not Before: Jun 30 13:01:02 2025 GMT
Not After : Jul 1 13:01:02 2025 GMT
Subject: CN=ea6afa7715483806f3a7ed354f029e46b043b4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:63:e1:80:c6:7f:30:40:93:cc:2a:32:cb:
f4:08:c7:2d:87:38:22:cf:25:4e:78:02:f4:e2:70:
0d:44:d8:26:3f:da:17:13:52:9b:ec:15:0c:ac:fb:
5c:21:91:cc:21:13:9b:77:2d:2c:db:9e:4b:e6:e2:
ce:5f:0c:33:4f:2e:b3:03:6e:9d:02:d1:3b:d9:30:
5c:cf:47:9d:dc:b3:b9:e7:ca:c9:25:34:57:7b:ce:
37:64:0f:65:2a:95:e7:97:6c:7f:16:78:2c:cd:65:
6b:78:58:ff:86:c0:2d:96:f7:12:c0:e0:41:5a:7e:
34:e8:9a:a0:6f:29:83:03:9f:70:01:27:da:0a:73:
b0:b0:11:0a:1e:15:bd:bb:2d:14:4a:fd:2d:d4:ad:
58:d0:ef:f9:0c:c6:4b:9b:f2:5e:16:5c:3d:e5:ab:
07:22:36:6c:95:e9:19:ed:c0:1e:d4:b3:a6:d3:2b:
a8:9d:50:5c:72:2b:65:ca:ec:01:86:ad:72:48:11:
c7:c0:50:32:ce:0c:64:d0:8f:1f:3b:de:06:27:69:
94:04:16:71:1d:98:0a:90:28:fc:34:51:33:a4:71:
71:62:5c:91:cb:03:f3:ab:3e:90:2f:88:1b:a1:72:
f7:32:7c:a4:31:03:71:11:31:a7:45:68:ac:fe:e8:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6A:FA:77:15:48:38:06:F3:A7:ED:35:4F:02:9E:46:B0:43:B4:C9
X509v3 Authority Key Identifier:
keyid:80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:b6:c1:28:db:9b:12:45:a6:fe:95:ac:1d:95:da:4d:e9:
9b:22:8f:37:b8:8b:20:c5:29:d8:fd:81:70:45:0d:e0:d3:06:
72:35:d7:31:95:41:d8:57:de:65:d9:30:d2:23:55:58:49:db:
1f:65:ea:cb:90:86:db:13:21:c0:bd:1f:fb:27:a7:6e:08:43:
b3:77:86:81:23:ce:fe:cf:a5:3d:e9:12:88:67:f8:a3:7c:81:
96:27:fa:58:bd:cd:9d:55:69:62:91:71:ae:23:39:b8:bf:ef:
68:49:86:99:76:66:c0:2b:c8:a0:8d:8c:aa:fa:b5:2c:16:49:
82:0a:81:3d:23:b4:f7:6b:f7:bd:e4:65:3d:3d:18:b9:05:1d:
d0:88:03:b9:82:f5:cc:95:9c:52:53:9e:c0:79:3b:11:2b:bf:
4f:eb:01:98:c5:5f:09:64:3b:8b:c2:bf:dd:ae:39:f6:8e:28:
46:82:3d:63:df:a7:aa:80:82:e2:4d:07:26:c2:d2:38:60:10:
1c:82:e5:fa:a8:75:0c:82:ad:99:9c:6d:67:a3:f8:78:ca:89:
27:6e:95:43:7e:25:96:05:6a:6d:f5:66:6f:68:38:1d:72:53:
9e:22:5a:b8:6f:9b:d6:87:db:74:d8:a8:c7:6a:56:af:38:bb:
75:cd:33:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:14:41 2025 by rpki-client