Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: x1My9meLb68kBuDIV1WLyRUeR2vHvMhI+CrMnzVS9Bc=
Subject key identifier: 34:6F:C1:8F:71:20:1D:81:A8:FA:2B:3E:B2:1C:BB:8C:5A:5E:C5:BA
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 0197B77C5A5482CF56FE00EC4A1A5F8186AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 12EE
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: dNPt+98KEtX90tLh5+VeMhq2K7hG2bkoi3Y13fO8AXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5a:54:82:cf:56:fe:00:ec:4a:1a:5f:81:86:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=346fc18f71201d81a8fa2b3eb21cbb8c5a5ec5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:49:92:f8:22:f1:35:0e:16:a8:32:0f:16:21:
57:a4:fa:e6:57:d7:62:6b:9a:bb:5c:68:fc:95:96:
9e:65:ce:ac:da:8a:36:1b:ad:53:24:8c:52:ea:2e:
e3:a5:4d:84:71:23:80:69:c9:5c:66:40:d4:8b:3f:
86:56:ad:dd:43:f6:b3:0c:45:29:85:9d:4e:70:97:
1f:e0:ff:bd:7b:e1:77:20:16:6d:00:64:41:47:e1:
8c:75:f6:ce:fe:3b:50:74:a5:2c:f2:c5:77:17:34:
bc:0c:ae:7f:42:d7:27:b9:9a:58:94:54:93:92:9f:
09:4d:69:10:c2:37:09:a0:20:a3:54:8b:dd:51:58:
b0:19:fc:3b:44:46:c7:85:d4:19:7e:15:f6:41:f6:
b0:9a:99:ac:75:36:51:c8:55:84:3c:2e:03:92:52:
79:1d:59:e5:81:38:e6:d6:62:ce:c7:88:bd:7f:ac:
d0:6f:ce:35:4a:44:f0:81:59:b5:e4:bc:b1:b1:3c:
59:8d:75:06:fa:c0:d0:3c:94:cf:15:86:fa:fa:13:
4a:29:41:26:32:4e:e0:84:15:4e:97:cb:24:22:2d:
89:1a:3d:3b:a3:75:1a:79:90:d6:20:69:be:ef:25:
a2:2e:cc:0f:72:5e:79:6f:37:49:a6:3e:ac:41:a6:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6F:C1:8F:71:20:1D:81:A8:FA:2B:3E:B2:1C:BB:8C:5A:5E:C5:BA
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:54:0c:43:eb:87:c4:f6:34:a5:15:3f:33:f4:70:d7:13:ea:
e3:23:ed:e7:f6:5e:56:1e:67:c8:db:a8:67:7e:19:29:84:4d:
47:bf:da:1f:5f:d7:53:55:89:ef:84:0e:78:a2:c2:19:bb:4c:
68:30:eb:0d:bc:d1:dc:6b:c2:d6:32:86:90:04:77:c9:7b:bf:
08:6e:30:82:f0:40:df:35:0d:b0:00:87:fc:73:dd:ff:00:e8:
c8:ba:e3:36:62:2b:7f:e4:bb:3a:39:ad:86:4b:94:2b:78:0e:
6d:a0:8a:4a:3e:1e:9a:3a:04:e4:fa:ca:6c:6d:50:23:e4:a6:
9c:c4:e8:b6:07:d5:3b:80:2b:f6:89:67:d6:b8:6f:e2:b8:d5:
8a:a6:cd:fd:0d:82:ac:a6:c8:2c:3a:9a:47:5d:97:9c:f4:e8:
72:fc:2a:58:6a:3a:42:6b:25:69:50:4d:e5:53:b2:84:33:89:
d0:de:4b:6d:e6:03:82:69:dd:ee:9a:9a:1b:99:6b:76:36:0d:
c7:f9:e4:30:5c:a5:ab:fd:72:da:19:52:dd:97:0c:f9:72:4f:
5a:3f:0a:6a:a8:34:06:f7:58:3f:32:ea:2b:e2:ae:cf:17:17:
34:d4:2c:32:38:21:75:5c:b3:45:84:6f:d7:3c:25:00:91:1e:
6b:5b:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:24 2025 by rpki-client