Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: R2WBDb0B38W3JoaEyNG78LCNnUoakYEPWxzfCNr/DZ8=
Subject key identifier: 91:78:FB:73:06:D8:27:EA:D7:84:40:4A:70:95:3C:4E:16:0B:B3:92
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 0197B632906A186BD4AB4466436700AEA0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 018C
Signing time: Sat 28 Jun 2025 11:00:56 +0000
Manifest this update: Sat 28 Jun 2025 11:00:56 +0000
Manifest next update: Sun 29 Jun 2025 11:00:56 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 9D5FphPkcl90pV9cyO9jMVouw63DxbPqtDglK8BeZYg=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:90:6a:18:6b:d4:ab:44:66:43:67:00:ae:a0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Jun 28 11:00:56 2025 GMT
Not After : Jun 29 11:00:56 2025 GMT
Subject: CN=9178fb7306d827ead784404a70953c4e160bb392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:27:b8:f2:9a:89:67:94:71:47:91:d2:b5:
c1:19:f8:40:c6:36:10:99:bc:3d:21:0c:cc:6c:79:
ba:58:1a:f7:5d:4c:37:3d:4d:b7:01:5c:1e:25:2e:
cd:82:f7:1e:99:58:35:8e:5c:b8:f4:f9:2f:67:11:
b2:0a:1e:a6:03:0b:79:6f:d3:ed:f6:c8:0d:4f:b8:
e7:ce:7b:1d:de:e0:ba:e5:33:45:42:4f:3c:86:e4:
62:cf:51:7c:64:9e:80:a4:80:cd:57:d2:bb:da:d4:
9d:21:9d:c0:ee:75:93:77:88:0f:41:18:d1:e6:c0:
99:61:8a:1b:ea:b3:ff:58:87:3f:60:1f:de:5f:52:
cf:1f:67:39:43:b3:48:e2:f8:d2:48:b4:10:ab:d5:
de:8c:3f:fb:80:fe:41:87:15:4b:d3:91:90:21:b4:
99:07:65:c6:c4:a6:35:07:f6:bb:62:13:3d:f4:6f:
1a:53:05:d9:2d:f6:41:15:48:7f:35:0c:6f:14:a2:
21:14:98:af:1a:b3:67:41:30:18:37:70:bc:7e:19:
65:20:19:57:fe:05:ef:4c:aa:72:f5:7e:01:01:a2:
ba:40:e1:f4:7e:a5:b6:8e:6f:ab:6b:e2:62:fd:df:
7b:1d:86:dd:d4:5b:70:68:3a:ac:f9:bf:9b:74:21:
5a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:FB:73:06:D8:27:EA:D7:84:40:4A:70:95:3C:4E:16:0B:B3:92
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:08:e9:81:8b:82:2a:ee:43:0b:6b:8f:a9:a8:bd:5d:0b:bc:
97:01:57:5d:ad:3d:14:c1:a7:0c:f9:3a:d9:23:27:d3:12:e2:
a6:cc:2e:75:0e:f8:80:cf:6a:ae:4d:7a:01:35:9c:52:aa:56:
bf:fe:3a:0a:20:3f:2e:33:70:8e:89:f6:49:d5:d7:9a:fd:0a:
d7:ab:62:b2:dc:9f:9e:1a:a6:a3:d6:f5:fd:e5:2f:b8:e5:6e:
3b:c9:1f:72:b8:9c:6d:68:a0:49:4e:9b:20:df:6d:e7:a8:97:
e3:66:90:c2:59:05:1c:4d:15:31:ed:ea:34:57:43:b2:a3:58:
52:64:59:b6:48:d7:c2:d1:20:2a:88:3a:65:29:5a:81:50:c6:
e2:a6:de:8c:ba:13:0f:16:88:c1:b3:a4:a8:e5:2c:4f:3b:91:
74:94:52:cb:53:89:94:7b:1b:c7:15:6c:b2:48:47:c5:5b:b1:
c6:cd:7f:16:e2:be:e2:3a:b0:0f:a2:8d:14:a3:1b:3b:12:d3:
16:87:11:19:c1:f6:eb:e0:93:3f:45:b8:99:86:3e:77:d9:03:
de:58:81:0d:7b:d9:0e:8c:05:1c:67:c4:4b:db:5c:b9:37:ac:
f8:9b:9e:a3:b1:93:0f:fb:da:fe:1d:dc:f4:20:7e:15:2c:33:
27:01:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:45 2025 by rpki-client