Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: vM/HMpp7ZNnR0/pSqbdEWBaBXbsyX5G7FV/h+v/oi2I=
Subject key identifier: 61:60:6B:4F:BF:DF:E1:A0:F4:A6:BA:3E:A7:24:18:FC:BB:40:B0:94
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 0197B5C51175047C62C85BAC325848FC48C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 0FAC
Signing time: Sat 28 Jun 2025 09:01:20 +0000
Manifest this update: Sat 28 Jun 2025 09:01:20 +0000
Manifest next update: Sun 29 Jun 2025 09:01:20 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: jNpf3a9ze0KkDQa8YVGBiFKUHhqVSAa7HcmUCPZHwUU=)
2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:11:75:04:7c:62:c8:5b:ac:32:58:48:fc:48:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Jun 28 09:01:20 2025 GMT
Not After : Jun 29 09:01:20 2025 GMT
Subject: CN=61606b4fbfdfe1a0f4a6ba3ea72418fcbb40b094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:9b:7a:2a:54:f3:1c:30:ec:14:f9:5c:42:
70:0c:82:c4:cc:9a:6f:b4:d8:b3:6d:f0:c6:ea:6e:
17:60:81:00:6f:40:9b:aa:3d:ae:28:14:5a:92:e0:
78:66:06:4f:1f:20:12:51:c7:39:56:3a:7d:96:3e:
89:b4:33:3a:d0:e2:0d:e4:57:aa:96:52:07:3b:d2:
6d:5b:19:2d:35:ad:f9:d5:16:8e:91:d2:c5:d5:fe:
37:c2:35:53:6a:56:08:5a:b4:91:7e:56:f2:da:43:
00:15:75:8b:84:ab:a0:7c:e2:3b:13:57:8c:25:30:
03:0f:89:3b:ba:6e:3f:85:a1:b2:6e:cf:7b:68:94:
2d:c5:0c:e2:8a:fe:44:ec:84:65:64:f9:2f:3f:49:
93:6c:b1:57:87:6d:7b:9a:c9:74:7d:75:99:a1:c6:
8f:2f:b0:ad:90:06:67:82:ed:41:21:2b:05:71:64:
3f:f5:30:3d:cc:c9:f0:e7:35:81:8c:34:60:f8:e3:
36:fd:71:0f:2a:53:7f:70:d2:4f:e1:75:03:84:5d:
4e:11:1d:61:96:22:e8:64:f1:5c:c4:16:7f:9c:97:
e9:5d:dc:c4:99:2e:6c:4a:f8:a0:df:e5:cb:67:a0:
06:49:7d:12:eb:4c:6f:13:ab:10:5d:23:96:10:5b:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:60:6B:4F:BF:DF:E1:A0:F4:A6:BA:3E:A7:24:18:FC:BB:40:B0:94
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9a:3d:05:47:25:e2:06:c3:6d:e3:fc:9d:c7:bb:77:a0:42:
f1:9a:ca:02:a8:14:ac:dd:54:ab:d1:65:9d:c7:2b:5c:c9:27:
29:ea:c1:97:5d:a8:92:bf:f1:61:c9:60:a8:1f:83:db:60:c3:
e3:2e:86:4a:17:a8:b4:ba:91:a2:d0:15:a5:41:46:b8:b0:98:
c3:b0:0c:4b:51:a1:25:15:86:9e:7c:9c:fe:c1:2b:3f:89:20:
99:47:20:af:14:e4:42:d3:77:c1:e0:36:d1:d7:c9:b8:bf:55:
fa:5e:13:67:a7:34:a9:69:b6:a4:bb:4c:78:d9:89:9a:4f:02:
78:69:5d:9a:ce:9e:13:ff:7f:b7:bb:df:26:fe:35:8f:b6:a9:
98:3f:fb:94:01:06:10:25:d2:21:a8:ce:36:0e:98:de:a3:72:
42:cd:91:6f:80:56:ab:2e:63:02:93:df:59:a0:f1:df:2b:11:
f7:6e:14:5b:20:8d:ab:d4:16:99:85:5b:1b:63:c8:c1:43:e1:
3f:75:31:f4:aa:7b:62:34:2e:ec:da:cd:14:a7:00:c8:2d:07:
12:7a:5f:69:63:3c:09:f1:b9:88:cf:86:c7:b0:6d:0c:aa:3b:
38:14:71:7c:95:44:43:50:be:b1:20:5f:97:73:4f:06:d3:fd:
1b:fc:6f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:55 2025 by rpki-client