Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File: gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier: RpdQsKBcdQFnGZ0EgUtkmxW2VLNCY/hO7FocxT2dRnk=
Subject key identifier: 5B:05:9D:47:4C:CD:DA:B3:5F:DA:F0:6E:56:D5:D9:9B:D7:D4:45:DC
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer: /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial: 0197B6A1C7565C835560E00B108CDF5FCD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number: 0F23
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: bX2CePd9nT1LoWLLUzFIC1AtL2fAFIUf5NGTx7x7iNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c7:56:5c:83:55:60:e0:0b:10:8c:df:5f:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=5b059d474ccddab35fdaf06e56d5d99bd7d445dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:85:d2:6b:47:de:1d:31:24:79:3b:75:2d:
44:60:59:f0:cf:5d:36:34:7b:ac:03:10:bf:2b:58:
81:aa:82:d6:37:5a:77:1e:fc:34:4a:d3:b3:93:93:
63:0c:f7:ed:c1:e7:96:6e:f0:b2:cb:36:e4:ba:07:
35:1e:57:65:3d:55:36:cd:59:bf:9b:08:95:e2:7d:
83:17:9b:84:bc:43:b2:f3:44:83:9a:e9:66:24:22:
20:91:08:3c:42:43:e9:b7:74:42:79:28:c8:3b:25:
04:4a:7d:f6:f2:9a:82:4d:28:13:3d:c6:08:f6:d9:
19:38:14:17:00:af:78:f0:42:d4:aa:79:c1:98:fa:
7b:1f:f0:07:33:87:32:cc:cf:78:d1:1b:87:03:9d:
5d:3d:81:86:3c:46:61:0a:83:f1:c5:e7:84:be:01:
88:89:a1:75:97:6b:15:f8:af:de:61:b2:71:05:34:
4c:3c:2f:84:2c:84:14:bc:01:28:32:29:73:e4:65:
4c:a0:a5:aa:0a:cc:2b:a8:63:b3:62:d5:92:64:8a:
f9:bf:01:4a:57:81:73:31:43:85:1a:68:4f:b1:d6:
c3:f7:b8:78:0b:5c:61:95:04:25:39:30:a7:6c:b5:
51:3d:c7:6b:41:db:b7:56:f8:2d:39:76:fb:be:d2:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:9D:47:4C:CD:DA:B3:5F:DA:F0:6E:56:D5:D9:9B:D7:D4:45:DC
X509v3 Authority Key Identifier:
keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2b:e3:1d:bc:25:43:25:b9:a4:08:73:84:75:d1:13:19:53:
e5:f8:f3:b1:2d:64:1a:32:b1:fb:a6:ad:f2:b6:82:68:ab:b0:
87:46:73:c9:92:e6:cd:49:5a:04:7d:dc:fe:83:0f:a4:56:1c:
2f:28:fc:be:ca:f8:71:aa:bf:f3:fe:a2:71:c9:c4:71:76:3b:
c4:e0:e3:1b:82:ca:ed:15:89:a4:b1:fd:ec:8d:3c:ae:7a:b6:
80:0d:d4:88:22:66:83:2a:2d:c9:17:f4:66:03:0b:fc:82:fc:
c6:a1:a1:b4:d7:0f:ef:11:49:a6:2d:19:c7:57:47:89:71:e1:
6b:b0:99:3f:74:43:64:59:91:ad:02:e4:0c:37:ef:b5:cd:bf:
97:c3:53:33:56:6b:83:32:20:94:fb:d7:00:0a:8b:ed:27:c1:
c1:e5:74:27:e0:ee:79:af:ce:84:ca:35:1a:39:fd:79:ba:52:
e0:03:cc:8c:3c:23:de:b2:12:dc:0c:8b:8e:99:62:a0:cc:4c:
78:8d:2e:b9:41:7e:92:5b:6e:7b:e0:2c:76:b3:2d:d1:af:b9:
6b:47:28:47:54:e0:f5:a1:d0:2b:49:2b:04:f0:5c:66:0b:36:
b4:df:65:e8:e2:f4:e5:54:4a:19:f1:ba:59:d4:e2:e8:83:75:
34:94:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:30 2025 by rpki-client