Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: j7QlruGkhoDJPcCwAm4SWWMbNgVeHe9laKTu08hmaoA=
Subject key identifier: 6F:3D:C3:33:50:02:A6:5D:8F:C2:48:31:CA:E0:58:5E:DD:B3:C1:F3
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 0197B88EBCA50EC06213A3D97B8BE61A2CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 0280
Signing time: Sat 28 Jun 2025 22:00:51 +0000
Manifest this update: Sat 28 Jun 2025 22:00:51 +0000
Manifest next update: Sun 29 Jun 2025 22:00:51 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: EP+xlH7XYoo0WJMIiWl5MMoX60tWjPUjWAYzWSPf5gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:bc:a5:0e:c0:62:13:a3:d9:7b:8b:e6:1a:2c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: Jun 28 22:00:51 2025 GMT
Not After : Jun 29 22:00:51 2025 GMT
Subject: CN=6f3dc3335002a65d8fc24831cae0585eddb3c1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:bc:6f:09:74:47:ae:40:3c:7a:51:2c:ab:
0b:69:45:5d:73:27:3e:c5:ce:b6:c0:15:a9:6c:c3:
d3:c3:51:cf:61:cc:b6:b4:7b:88:4f:f9:81:1d:67:
35:29:60:5f:4a:e7:50:d1:4c:43:3a:95:e6:3b:29:
21:bb:2f:b5:4d:f7:75:6d:48:b8:d6:79:19:e9:0f:
16:d1:b1:43:9e:98:1c:0b:d2:a5:02:0c:be:05:8c:
69:d7:ae:c6:42:15:fd:4f:6b:55:b7:18:f0:61:1e:
40:a3:1d:0f:ed:aa:72:61:af:e6:e6:ed:cf:0f:1c:
fd:4e:90:b3:1e:f2:94:db:7d:0d:cc:72:c2:1d:a3:
89:81:f1:39:d5:ce:d8:3e:0a:af:09:16:e8:30:2e:
e5:35:de:4b:6a:69:e1:ac:ff:25:0c:00:10:c0:8b:
06:c4:ee:cb:0d:04:a6:5d:ec:0d:53:36:52:2e:2c:
88:a2:1c:9f:1f:8c:2a:0d:c0:a7:0f:a0:9d:fa:06:
97:bb:c8:ed:73:8f:ac:be:19:30:47:0b:fa:74:af:
cd:2b:b8:f7:e3:72:98:68:81:95:93:e7:8f:0e:3d:
1b:02:f7:72:1a:22:8b:3d:35:04:94:00:af:ca:fd:
80:14:b7:4a:90:de:7f:c0:3e:57:4a:8a:57:83:14:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:C3:33:50:02:A6:5D:8F:C2:48:31:CA:E0:58:5E:DD:B3:C1:F3
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8f:a4:06:7d:53:ae:19:51:d2:85:39:db:db:48:ad:2c:3d:
44:51:ba:57:a1:65:5c:c0:37:61:49:64:3d:b2:ff:37:3e:9f:
fd:22:81:c1:8c:45:32:88:60:f8:f9:24:26:31:e8:a1:56:55:
68:36:5d:1d:48:2c:a0:ef:df:cc:ed:1d:7b:ef:f2:ea:d2:7a:
c2:46:55:65:2a:9d:30:af:d4:89:70:ce:a5:04:54:aa:58:1f:
88:13:f6:cb:48:8e:ef:a3:90:9f:10:4f:09:d9:63:2b:8a:45:
3a:a0:9c:02:b7:e9:5a:35:62:61:c5:bc:53:0e:e1:6e:0c:12:
c4:65:5e:a1:c8:66:15:95:53:44:e5:8d:53:73:b4:d4:24:dc:
de:fc:60:a1:ab:4f:4a:4a:f3:44:4a:b3:aa:b2:86:6b:a4:ae:
6f:3d:2f:9a:65:11:ef:dd:53:2c:0f:e2:4b:cc:57:f7:e3:5d:
09:a6:1d:ec:6e:9e:0a:3c:50:79:86:5f:a2:e0:48:15:91:8b:
32:d2:2a:87:59:65:87:fa:95:74:50:6e:9a:47:d9:76:9c:1a:
43:28:5f:0e:9a:12:50:f4:8f:a5:6e:8a:a6:f2:25:a4:82:89:
31:0c:d7:e3:ce:d2:b4:3a:41:85:e9:c2:8a:3e:11:df:e8:02:
3d:7c:55:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:11:02 2025 by rpki-client