Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: 7Hrf9Ulf6YCvcVQ0ukNnRfo7Tg4sZlUCYrtjSkk9lto=
Subject key identifier: D8:CF:1E:E6:29:67:2B:C0:49:7B:11:37:75:15:A9:87:0D:33:1F:42
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 0197B745609AE2F4EC541EE82B141E1C90F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 1321
Signing time: Sat 28 Jun 2025 16:01:06 +0000
Manifest this update: Sat 28 Jun 2025 16:01:06 +0000
Manifest next update: Sun 29 Jun 2025 16:01:06 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: 2hSt/KQ5d7VN6WPDdFbG+bnK4nSjOn3nrP/aPHu51Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:60:9a:e2:f4:ec:54:1e:e8:2b:14:1e:1c:90:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: Jun 28 16:01:06 2025 GMT
Not After : Jun 29 16:01:06 2025 GMT
Subject: CN=d8cf1ee629672bc0497b11377515a9870d331f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:1d:25:2e:ad:d5:30:55:9e:db:40:85:db:
d4:c7:b9:ca:bf:10:a6:43:ed:cb:e7:9d:80:01:e4:
7a:eb:13:5f:0c:8a:c1:d2:70:8a:c0:87:e7:4c:68:
31:0d:5b:6f:58:97:94:88:e2:77:80:b6:83:d8:f3:
46:84:7c:27:3b:c4:95:c4:ad:a5:02:98:40:0a:11:
2c:42:11:67:46:5b:92:1c:6d:e7:56:81:3e:5f:07:
22:27:4f:23:0e:34:90:54:51:ef:02:11:9e:ed:d9:
50:42:d2:92:59:7c:dd:5e:99:fd:be:7c:06:b7:ee:
da:9f:e6:5a:17:3a:2c:3f:c3:aa:43:f9:9d:fb:a4:
44:85:e1:b4:6d:90:77:cb:c7:e9:d3:f1:a6:59:47:
fa:2e:3f:1a:c6:64:4c:6b:bb:80:9d:21:22:2d:71:
fd:87:70:22:dc:79:a6:bb:ec:8f:71:62:7e:34:e4:
1c:35:72:74:50:75:19:9d:ff:7d:41:23:cd:89:1f:
a0:6a:69:e9:15:c1:cb:9a:e3:46:a0:97:d2:cc:0e:
5a:f1:d9:56:72:e8:af:47:bf:cb:41:29:43:5e:df:
07:08:02:b2:5a:ec:96:df:96:cf:52:d8:8a:97:8d:
9e:29:7b:39:64:50:62:28:47:4d:6a:cf:87:7c:c9:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:1E:E6:29:67:2B:C0:49:7B:11:37:75:15:A9:87:0D:33:1F:42
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bf:57:a4:86:2d:27:ac:86:1b:6a:11:f6:69:cb:7b:75:5b:
a4:73:4e:dc:4f:ee:6a:3a:a0:3d:61:1b:5f:f6:5d:36:06:78:
0f:43:15:0b:01:be:b3:41:7f:0f:cd:ad:cc:4c:4c:c4:a4:5a:
6a:e4:17:75:58:10:62:06:96:e6:83:8b:52:01:fc:25:ba:4f:
cc:fd:34:ff:76:fd:f0:6b:a7:01:60:b3:b4:19:28:b9:14:ad:
f4:87:84:d1:cc:a4:6e:fe:46:8d:74:40:cc:87:56:cc:ab:f3:
f8:c1:bf:bd:df:f4:da:b1:78:4f:33:97:8f:2d:84:de:0b:fd:
5c:6c:bd:75:59:30:76:c8:af:96:c3:62:31:e1:ff:75:c1:ad:
7b:32:45:3f:69:70:2d:b6:b9:5a:ec:58:27:cc:62:ed:71:0f:
a4:bd:89:ec:ba:0f:45:ba:7d:b4:33:a9:e3:c8:a0:61:aa:24:
54:3e:95:13:c1:2c:70:7e:4d:d6:b2:64:03:41:f7:34:0f:1f:
8b:7b:71:35:09:7a:c2:22:e5:ce:0a:70:0e:ae:0e:a8:b0:73:
9c:1a:55:af:d7:94:b7:1c:2b:a9:9a:97:64:98:2f:71:84:de:
98:1b:d4:f4:05:8c:b8:f8:38:24:e3:d5:30:62:a8:90:5d:00:
26:f7:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:55 2025 by rpki-client