Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: Uycs39UUiN2n4viyBJSJoHr6naC/Aw0P7PTW+2dNVZ4=
Subject key identifier: B8:5E:99:35:D2:A1:62:60:95:25:4F:5E:5C:FF:0B:82:06:18:70:DC
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 0197B6A055F004F8087B5B4A676B47F1F84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0BE2
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: hro6IGGLgueZovFOVP8zuAS4mV+FkufTr89JFNx50GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:55:f0:04:f8:08:7b:5b:4a:67:6b:47:f1:f8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=b85e9935d2a1626095254f5e5cff0b82061870dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:cb:7b:92:26:05:1f:ce:fe:10:28:41:1a:
84:b5:a2:86:58:df:de:1b:95:93:40:a9:16:e8:f0:
eb:a6:ed:86:67:ec:93:be:2b:47:44:bf:f9:91:94:
83:44:e7:a0:7a:8e:db:9c:d9:cb:8b:ce:a7:4a:cb:
fb:82:65:d9:9b:c4:e0:8b:89:a1:76:a4:c6:86:ee:
99:c7:70:4b:7d:a5:f4:89:81:a4:ae:d7:1d:8f:ea:
f8:88:71:e6:73:c8:a7:2e:c7:a8:33:83:fa:97:d1:
0f:14:62:53:9e:73:b4:3c:1f:68:78:9f:2d:24:c0:
75:3b:28:f5:39:30:d6:6b:5b:b4:5a:84:86:d8:71:
79:6e:4e:b7:be:79:02:26:0e:d2:27:49:c6:cd:b5:
e3:f7:03:8f:75:f1:fa:56:89:96:13:92:8a:f7:f2:
49:08:cc:1d:c5:e0:4b:f1:9b:75:f7:40:36:1a:b5:
9e:64:60:ce:4e:ed:59:db:e2:cc:18:eb:9c:59:f7:
37:ee:19:a9:d0:ac:3a:c2:20:e6:e2:57:29:eb:fa:
2b:57:f0:57:7d:c5:f7:9f:dc:66:48:9a:8b:66:a5:
16:4c:1b:4c:d2:67:03:d2:1c:94:7d:6e:5e:56:a3:
1c:61:9b:7c:84:e1:b9:fe:ff:c7:28:23:65:dd:f0:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5E:99:35:D2:A1:62:60:95:25:4F:5E:5C:FF:0B:82:06:18:70:DC
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:88:57:e9:08:e5:3d:ea:ce:93:d8:80:d9:12:c1:bd:ff:8a:
5d:9a:ac:d3:ed:e9:f9:39:4c:12:ed:c7:fa:72:00:c6:e9:cc:
43:04:dd:42:af:58:eb:8f:98:d7:e7:e1:0e:96:05:ba:ca:a8:
26:40:b2:a7:6c:5e:e2:b5:bf:48:20:12:4d:78:45:fe:14:18:
42:02:4b:2f:95:f3:b3:60:fe:ac:d6:2b:34:f1:be:5b:6a:ce:
7f:41:ef:09:51:5b:da:f2:bf:88:32:5f:93:95:ee:a5:ef:10:
53:99:52:8d:58:b5:ef:8d:0d:70:d7:b4:6d:90:2c:33:dd:bc:
0d:aa:06:25:5d:7c:be:3f:39:77:28:33:ea:a1:cc:ea:31:ad:
78:c9:6b:ce:4d:e5:0c:0a:36:87:1a:0a:3a:a4:ac:b0:63:34:
2e:62:c5:57:ef:14:4d:ea:53:e7:eb:17:f5:9e:07:0a:4f:e5:
58:ad:bf:93:73:58:0c:b8:76:25:f7:b1:6f:0c:68:a6:78:d0:
25:df:49:ee:a8:01:b4:4e:49:c7:c7:d3:fb:04:0b:ec:ba:7f:
c1:58:03:6e:a2:19:bd:2a:da:cc:eb:b3:04:92:f6:d0:a0:f7:
bd:7c:ca:3e:fb:04:fd:79:15:f9:78:62:7a:70:7a:b2:a4:c6:
a6:11:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:47 2025 by rpki-client