Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier: a7SqAXP0HtPbTlC3y7Wt1LsXli9YktBCgPDyao/Fias=
Subject key identifier: 33:ED:F9:3F:73:CC:9A:79:41:DA:68:40:74:D9:42:33:30:E6:26:35
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial: 0197B745ADBCF59D6034C51095F0C6E1D54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number: 12F4
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: 8rlZWff2ny3VG33OkL7bWkURx7gLAljIpFe+HUDs6Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:ad:bc:f5:9d:60:34:c5:10:95:f0:c6:e1:d5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=33edf93f73cc9a7941da684074d9423330e62635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:83:5e:0a:5e:5c:77:7e:04:fd:54:09:fb:
a5:87:76:8b:f3:66:4a:f1:5f:14:43:bf:38:06:ae:
66:b7:d4:f1:06:fe:1e:7d:3b:38:67:c6:e6:ac:d3:
6b:35:92:eb:80:c9:f4:03:66:c7:f4:97:fc:6b:0d:
60:ae:61:45:bb:df:56:0a:be:d4:23:bf:e3:1b:0a:
bd:8b:d0:81:1a:6c:62:cc:7e:35:e6:81:d6:fb:e2:
3f:1b:a0:ee:ee:36:d1:77:8b:02:36:34:67:30:cc:
7f:81:62:6c:c0:9d:31:90:67:c7:01:f4:8a:2f:5a:
3b:61:a5:e3:a5:7a:30:84:49:37:e6:24:57:41:52:
7d:65:b9:92:8d:1d:be:af:49:b5:d2:03:bf:3b:23:
91:f9:46:04:20:5e:79:63:7d:a3:4f:c5:66:98:a8:
7f:8c:94:2d:20:40:7d:fe:bc:f9:25:15:b2:43:ca:
e2:26:49:48:35:67:46:3f:21:64:12:84:f8:86:fc:
80:d6:ce:4b:f0:33:2e:36:a9:14:3f:94:54:52:eb:
dc:a5:38:88:99:67:1c:ae:56:40:fe:b3:0f:47:16:
99:51:db:1f:72:6a:2f:57:40:a1:5e:ad:4a:b9:a4:
3f:d6:d2:fd:f7:e1:bc:db:7f:bc:ce:7f:0a:6e:8f:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:F9:3F:73:CC:9A:79:41:DA:68:40:74:D9:42:33:30:E6:26:35
X509v3 Authority Key Identifier:
keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a8:94:e0:72:a0:89:5a:71:dc:71:22:71:12:50:c9:fb:2a:
d8:87:6a:2f:07:fe:a8:91:b9:cc:2b:04:8c:02:01:88:54:6f:
54:63:30:2b:84:56:50:d9:92:d5:02:28:73:51:ab:5c:bf:f3:
a8:11:06:5c:c8:62:a8:be:77:21:59:12:67:72:9d:17:ac:61:
d0:fb:19:d8:e4:69:1b:cc:7f:80:b9:a8:17:8d:67:0e:01:07:
ab:40:9e:cf:eb:90:f4:79:3c:fc:f5:96:8d:77:2b:18:32:e8:
cd:16:0d:09:95:f2:0c:75:be:6a:86:84:b5:cd:f8:70:f5:71:
a4:c8:ce:6b:1c:a2:75:4e:41:95:eb:77:93:33:02:9a:e9:c9:
c7:f6:da:cc:16:93:b5:32:dc:53:e2:70:1a:8d:b9:5a:7f:bd:
53:40:1f:12:b8:7f:c5:d7:43:84:3c:97:29:e9:f7:04:f9:a8:
e1:b8:5c:2d:b1:e8:3a:15:72:70:c1:e6:d9:c1:90:8c:ca:4d:
ad:da:70:2c:69:de:aa:d0:0c:05:16:7b:81:8b:d2:ff:ea:cf:
2e:51:b4:ac:ad:ce:fa:c4:ed:9c:90:95:ed:13:a1:03:0e:c0:
39:67:bf:b2:19:61:25:e2:46:99:15:29:e1:74:c0:3d:74:23:
f3:21:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:14 2025 by rpki-client