Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
File: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft (raw, json)
Hash identifier: mmEJfi96k2xVLV1uKEnxCRcSKWjWWtsNV/+PpZ7f0Rw=
Subject key identifier: 72:C3:36:3B:83:91:5E:6B:7B:02:3E:4B:7F:A7:4E:0C:F0:37:04:24
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Certificate issuer: /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial: 0197B6A085B4EC53688254B7DC93F0596032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
Manifest number: 15C3
Signing time: Sat 28 Jun 2025 13:01:02 +0000
Manifest this update: Sat 28 Jun 2025 13:01:02 +0000
Manifest next update: Sun 29 Jun 2025 13:01:02 +0000
Files and hashes: 1: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl (hash: JfhZCyFQYhwWPFZIODtDkk98qBK48MwjPzlVl9/1EcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:85:b4:ec:53:68:82:54:b7:dc:93:f0:59:60:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Validity
Not Before: Jun 28 13:01:02 2025 GMT
Not After : Jun 29 13:01:02 2025 GMT
Subject: CN=72c3363b83915e6b7b023e4b7fa74e0cf0370424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:26:85:36:af:02:f9:72:35:5d:d6:1e:21:
7a:70:af:39:b2:d5:c0:92:cf:c9:db:49:0c:bf:57:
36:53:06:30:b2:55:64:d9:be:c9:5d:7f:01:46:c5:
ef:92:9d:1f:e7:11:4d:c0:21:f5:ff:05:96:aa:03:
9b:87:88:20:a3:2f:61:ab:fb:92:ef:ce:a3:84:60:
41:1b:77:f5:e5:21:ae:f5:ee:ce:36:d7:bc:8b:64:
81:f3:f8:a9:03:97:70:11:89:8a:f6:b6:4e:fe:ef:
d1:9e:fb:f8:73:19:43:3f:93:ce:b1:80:63:47:4c:
2d:43:8b:81:e8:2e:3d:d8:ba:00:6a:a7:cf:ab:07:
69:a2:59:a4:99:de:18:6a:7b:a6:38:ac:ab:8e:5a:
60:c6:10:9f:b0:6f:1f:5c:58:5b:1f:44:86:d5:3f:
21:6c:a6:1b:fe:dd:19:1f:69:5e:71:3c:6d:27:6c:
ec:68:d2:82:5e:7d:d9:80:d2:16:55:25:3e:bd:83:
7f:66:e2:e7:b6:39:e4:e4:8d:b9:64:c8:fa:9a:08:
40:6a:f4:30:51:b1:31:69:12:87:59:fc:22:a5:d7:
b9:56:84:d9:d9:b4:94:06:e4:89:8c:90:80:94:fa:
d6:33:6c:2b:0f:a2:f4:6c:ff:52:9b:9e:f0:cc:20:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:36:3B:83:91:5E:6B:7B:02:3E:4B:7F:A7:4E:0C:F0:37:04:24
X509v3 Authority Key Identifier:
keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4e:c2:f8:45:a9:1c:2c:c5:69:7b:28:d7:47:54:85:2f:60:
92:32:95:6b:82:18:50:77:b2:43:8e:30:bb:20:ad:0c:39:66:
03:0c:2b:e3:25:51:91:66:a0:60:d7:16:b4:93:58:ee:87:5d:
46:27:ca:7f:00:a0:74:a5:dd:d7:dd:8c:01:44:15:01:5a:c1:
ea:08:4e:2e:1e:26:72:bd:57:55:3a:41:68:aa:7f:40:4d:da:
be:46:d1:a7:88:02:92:ad:89:2f:e7:f3:b7:7b:ca:42:eb:c6:
20:33:c1:8b:47:28:21:1d:1e:0c:af:a6:7c:3b:81:a5:0d:5c:
4c:3e:26:67:47:41:cf:1c:d4:7d:33:ac:bd:e5:1c:79:d2:89:
9f:f1:f6:8f:eb:f4:22:80:cc:2f:a7:4a:49:8d:b6:6e:8f:65:
15:c3:9f:98:10:45:2d:9e:71:4b:73:3b:e3:2a:bd:63:dd:1b:
05:26:07:ec:d5:6a:82:86:08:cb:33:a2:97:22:7f:d6:ec:19:
d9:78:ac:4d:bd:8f:c8:c2:ef:8e:2c:40:cc:6c:90:c0:0a:92:
9b:b9:e5:6e:e4:e3:00:bc:89:bf:a1:30:be:c0:4a:3c:f8:ea:
89:70:f5:b7:0c:35:d8:35:b1:8b:d1:a1:4e:92:52:44:1b:3b:
60:f7:59:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:56 2025 by rpki-client