Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: 8f5xWphv1WuAa/Z8d9j5yTdpsMT79ueOu5aJb87Cz4c=
Subject key identifier: 06:57:72:37:91:19:34:51:C8:35:E4:B1:99:D6:53:9A:4B:94:32:BA
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 0197B6A235810154FE56F5F85C5F2B42751E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:53 +0000
Manifest this update: Sat 28 Jun 2025 13:02:53 +0000
Manifest next update: Sun 29 Jun 2025 13:02:53 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: A5JyipZE+JFrbQZtchOnTLFuPkBxozss1i+MsVWnvck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:35:81:01:54:fe:56:f5:f8:5c:5f:2b:42:75:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Jun 28 13:02:53 2025 GMT
Not After : Jun 29 13:02:53 2025 GMT
Subject: CN=0657723791193451c835e4b199d6539a4b9432ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:9f:96:1c:60:b1:16:bd:0f:66:c6:53:be:
27:48:8c:27:c3:d1:d9:20:82:cb:e8:e9:cb:35:ba:
da:d0:c9:a8:e6:c1:9c:7b:39:ee:be:63:f9:2b:15:
8c:71:e9:85:e4:c5:39:aa:34:52:53:e0:d3:23:2a:
11:d3:0f:2d:47:0d:c6:1d:56:1e:05:5b:45:01:b1:
72:f8:3c:6b:71:1f:31:2e:01:2e:60:4f:35:c8:ac:
08:5f:55:d6:82:b0:3f:59:f1:39:b9:a5:e2:dc:2a:
52:87:29:d5:59:4f:41:0c:26:99:76:59:b4:7f:34:
ee:51:1e:db:77:46:23:e0:84:b9:55:59:29:2f:da:
d1:af:07:bd:24:81:45:fb:01:26:f8:59:70:09:ef:
9c:7c:ae:38:7e:23:5e:88:76:56:e6:67:f1:46:57:
a7:aa:cb:49:87:e5:64:12:55:41:f1:24:a0:5e:7c:
ee:18:4c:4e:17:21:e6:71:18:d1:09:47:07:60:c4:
c2:71:f2:1b:6e:2c:69:59:a4:7c:cc:61:c4:22:e7:
05:92:20:6f:77:bb:e1:87:05:95:f3:4a:31:b4:ec:
c0:9b:bf:2e:95:35:cc:b7:f7:6d:d3:bd:a7:5b:b8:
5d:52:32:a9:37:e6:8c:06:35:f2:85:0a:4d:6f:a6:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:72:37:91:19:34:51:C8:35:E4:B1:99:D6:53:9A:4B:94:32:BA
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:47:ab:d7:fe:8b:74:88:fa:d8:65:27:bb:79:41:f8:7b:16:
fb:3d:83:6b:6f:c0:62:c1:c8:49:87:e7:d7:3b:29:85:49:58:
7e:ca:2f:62:43:44:90:8d:1d:73:eb:23:1e:68:80:7f:d8:52:
08:8a:65:60:c8:56:a6:fb:b1:af:af:e0:80:69:60:ce:c1:cc:
17:fe:21:86:ab:b9:e1:80:cc:85:2b:c8:18:bb:5b:87:39:bd:
99:e4:5d:70:46:9d:41:0a:75:70:cf:da:7c:70:34:34:f1:72:
df:81:0e:7b:42:fc:28:65:7d:5e:3c:3d:25:1d:54:1c:27:d2:
ea:c8:2e:f9:78:cf:5e:21:09:d0:94:4c:81:86:7d:1d:c4:90:
df:1f:90:99:bf:17:b2:95:fa:e3:5e:0b:f2:fa:6a:e9:e0:81:
01:d3:41:42:34:6f:ad:e1:0d:f8:ad:7a:d7:d3:08:d0:28:4f:
67:7a:16:e8:ab:42:3e:82:55:e3:a5:f0:e1:41:c8:35:d9:17:
8c:68:e8:f7:57:60:28:ac:08:5e:13:37:6d:28:86:4d:96:4a:
36:45:97:13:cd:54:73:86:62:b3:ac:a6:f2:48:40:e7:62:b6:
31:61:7f:7a:c3:c1:0e:a0:61:a1:6f:7a:b5:be:77:70:b9:56:
78:48:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:49 2025 by rpki-client