Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: soNlHYdRvQuaX5l8ADTaBr/1CmLRwfqB4eUvq9aEN7c=
Subject key identifier: AF:BE:BE:37:5E:08:92:CC:A7:42:A0:07:48:46:08:8A:90:4A:16:80
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 0197BA7EA7E441480A09FCA295DF4F7674E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 11E6
Signing time: Sun 29 Jun 2025 07:02:32 +0000
Manifest this update: Sun 29 Jun 2025 07:02:32 +0000
Manifest next update: Mon 30 Jun 2025 07:02:32 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: hIuo5/jm17xfWxScyl9ppGDPkVP4dClu6F2l8X3EoAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:a7:e4:41:48:0a:09:fc:a2:95:df:4f:76:74:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Jun 29 07:02:32 2025 GMT
Not After : Jun 30 07:02:32 2025 GMT
Subject: CN=afbebe375e0892cca742a0074846088a904a1680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e3:3b:2d:fb:6f:5c:c3:a6:23:15:a5:a4:cd:
59:83:1b:94:60:7d:b1:2d:e9:39:fe:33:5a:dd:2d:
69:12:04:36:54:bd:e4:d6:73:90:f3:aa:5e:9c:52:
b6:bf:5a:1b:c8:71:67:fd:8e:9c:b6:4b:2b:3d:0b:
40:1b:37:10:32:72:aa:9b:d3:52:d3:70:44:77:c2:
7f:bc:e2:7f:ff:f4:96:7f:d3:a8:81:78:c7:1b:84:
90:74:49:7a:fa:01:79:a2:15:87:e9:55:fc:94:dd:
40:dc:bc:e7:de:93:df:c5:68:ba:c9:a2:99:ee:a8:
70:f1:76:4c:49:f1:60:29:0b:7b:36:1d:3d:3c:52:
bc:c4:31:fa:ae:47:ec:0b:38:e1:14:9e:9f:8f:f3:
87:62:7a:2a:72:65:89:e3:c2:80:45:ed:57:2d:a1:
7c:01:53:aa:11:7c:85:c8:66:59:0f:00:a1:79:ff:
bb:51:5c:08:45:37:59:55:97:87:58:62:9a:66:8f:
79:da:1c:30:f0:4e:ea:64:99:d9:88:a0:34:62:c2:
01:d7:6c:b8:94:22:9d:0c:9c:e1:d6:8d:5d:42:e0:
66:82:d4:40:fc:68:62:7c:66:57:df:1b:c1:12:a6:
a0:44:a6:08:5e:51:09:04:a7:84:e0:32:ce:a7:71:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BE:BE:37:5E:08:92:CC:A7:42:A0:07:48:46:08:8A:90:4A:16:80
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:10:a9:7f:e3:51:18:81:6a:5f:58:5f:84:2c:17:46:44:e4:
18:8b:4a:59:ab:79:51:a4:bc:00:9f:26:b3:90:f6:49:c8:cd:
f4:97:aa:5d:b7:86:52:66:a3:d1:4f:bb:7f:ba:3a:66:52:e2:
25:9b:45:71:50:5d:e8:ad:5b:a4:be:09:79:23:02:66:21:3b:
5c:85:9a:3c:dc:b3:78:6a:a3:75:d7:3a:5b:bd:a6:be:5c:ac:
06:3f:25:c9:93:4d:ae:9d:6f:b4:98:9a:a3:7f:96:0f:ad:67:
0f:7e:1e:a7:2b:b0:f3:bc:c3:2b:a6:45:8b:32:08:9c:00:1a:
12:79:f9:b9:0f:dc:3b:33:d4:ec:1f:0d:43:a4:f5:dd:44:5a:
9f:b6:91:96:07:c5:d4:62:a1:24:3c:2f:d3:a2:5c:4f:21:38:
ba:da:b6:be:9d:2f:f1:10:a3:5d:b3:c3:c6:c0:e1:a7:6b:83:
04:b0:e0:a1:ab:79:66:05:3d:37:a8:dc:7e:d2:c7:ce:da:a1:
57:10:32:64:99:82:d3:5f:38:ee:3e:09:ed:68:4d:6a:8a:9f:
63:47:a5:28:57:59:9c:bc:48:3d:ad:45:21:36:5c:d1:23:86:
8a:66:22:48:08:05:df:a5:93:37:f4:13:3e:e8:ce:d5:63:a8:
9a:e7:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:15:24 2025 by rpki-client