Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: 3V9E28rYTXR4VSNfTXAMnt9VHTDzCRuLFI1HVTVT2sY=
Subject key identifier: E0:A8:28:CF:5B:51:87:54:B9:38:B8:E2:2A:A1:04:F7:22:54:52:EB
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 0197B6A0EF56F90B7BADDC47B9964E8EF26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 1246
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: cdKSOfNh1CrAwqViGKTftVE7mZBi4OsdfnIqV+T5q3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ef:56:f9:0b:7b:ad:dc:47:b9:96:4e:8e:f2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=e0a828cf5b518754b938b8e22aa104f7225452eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:b9:48:43:44:ab:f2:82:d8:f3:93:ae:15:
61:96:86:e1:77:97:8c:ae:87:a9:dd:02:d0:02:06:
53:ae:06:7f:0b:b6:50:f9:5f:0d:59:d0:58:f3:85:
ee:b1:c2:8f:be:7d:58:35:4a:43:32:35:07:ae:ee:
e9:46:66:9b:07:36:38:9d:ce:60:aa:c4:25:1d:ae:
44:af:a1:56:b3:6f:00:44:23:84:5b:4d:af:8f:0c:
2b:e8:3e:06:4c:ff:6e:9f:f9:19:ac:41:8d:c1:84:
a1:17:36:6c:d7:e0:7c:d3:ac:c7:8e:fe:cd:86:77:
43:e1:9d:3b:54:22:80:74:96:b5:24:77:de:e2:ae:
ec:c7:63:5a:61:09:fe:b2:25:d4:2a:53:7d:29:7f:
3e:d7:47:59:26:01:fd:98:11:1b:be:21:d5:94:15:
4d:31:7e:96:37:1f:ea:91:89:77:9c:35:9a:28:1a:
2f:d9:0e:b1:f7:f9:98:a1:ba:27:ac:de:37:71:69:
91:ef:a4:ba:0e:b9:40:8c:a9:af:88:13:1c:37:5a:
8b:8a:b9:fa:31:1c:40:a8:19:b0:de:54:1d:45:e8:
b3:88:d3:ed:3c:a3:b0:92:08:1f:c2:11:60:ae:fa:
a8:b0:17:08:7a:ac:46:b1:09:b9:c4:0f:e8:e9:7a:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A8:28:CF:5B:51:87:54:B9:38:B8:E2:2A:A1:04:F7:22:54:52:EB
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:58:03:37:41:06:69:23:93:e0:73:a0:68:ed:4f:01:0a:73:
78:2e:94:86:1a:36:8b:07:ce:8a:d2:2d:ec:c2:75:70:c1:7c:
aa:65:b1:b3:d9:f3:89:fd:12:79:6e:52:d0:a4:85:e5:df:37:
c7:61:7a:3a:91:e0:66:c7:46:e4:56:24:8c:bd:0d:7d:4c:c7:
ce:33:84:35:b5:8d:a2:76:c5:4c:55:fb:25:e2:ea:b3:1d:6c:
7b:3f:ba:50:9c:b1:d4:c4:db:a2:f9:28:06:e3:73:dd:08:57:
ec:da:3a:7f:b0:64:c9:00:b9:f9:ff:b6:40:58:97:ab:9d:15:
3f:f8:a2:35:19:a6:70:e4:70:5b:cc:75:20:4f:89:01:f5:a8:
c9:cb:f4:87:4e:1f:39:1c:ff:87:68:78:09:8d:26:ef:48:a5:
71:86:c2:9f:cb:3d:7e:cb:a7:b6:86:94:80:03:0b:73:7f:9a:
b0:c0:b9:c9:7d:03:1f:f1:cd:75:51:70:3c:f2:54:53:f1:5e:
7b:2e:7c:c3:0d:0a:85:9f:e3:17:8a:b9:5a:ac:66:4a:0c:dc:
63:05:96:63:5b:bf:0e:27:8e:5c:ff:32:af:7c:79:3c:34:2f:
e1:40:60:91:21:a1:af:91:29:11:4d:ae:b3:21:1d:c9:ec:e3:
33:42:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:52 2025 by rpki-client