Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File: G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier: y7c5yxmMQ5Osw7nSswJwPFNpv+PHuiSoWog8xtndtZ0=
Subject key identifier: 2F:E2:21:00:5D:FF:79:39:0F:FC:3A:6F:ED:62:98:AE:7F:D0:37:F9
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer: /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial: 0197B5C4C15A9008FA5FF50B4D23CF2BCB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number: 0453
Signing time: Sat 28 Jun 2025 09:00:59 +0000
Manifest this update: Sat 28 Jun 2025 09:00:59 +0000
Manifest next update: Sun 29 Jun 2025 09:00:59 +0000
Files and hashes: 1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: 19cZg09oat9qWJVvJpZ7EWhdBaDpY3phxB77f1S7T70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:c1:5a:90:08:fa:5f:f5:0b:4d:23:cf:2b:cb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Validity
Not Before: Jun 28 09:00:59 2025 GMT
Not After : Jun 29 09:00:59 2025 GMT
Subject: CN=2fe221005dff79390ffc3a6fed6298ae7fd037f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:ae:cb:19:3a:09:1f:5b:c2:b8:b9:f7:97:
03:5c:e3:5f:4b:bc:a8:bb:3b:c8:a6:d8:08:7a:a7:
62:0d:f7:ea:91:c8:f4:12:57:41:69:25:ed:70:5b:
5a:77:1a:a7:4d:db:e4:41:9b:73:75:2b:2e:01:c5:
51:12:73:a1:48:39:2c:a9:34:6a:0f:1e:b3:3f:b7:
46:c0:5b:13:f8:ec:de:6d:ba:ed:de:96:4c:72:e7:
f0:0e:8a:03:d6:42:b4:5d:7a:3e:d7:72:e1:16:8c:
7f:2a:56:33:29:fe:f5:60:75:5d:a1:ee:e9:39:67:
e7:7d:48:9f:f7:e5:09:57:71:9d:fa:bb:11:69:a8:
32:43:9c:8b:b4:4f:bf:50:53:4a:e3:67:87:33:55:
c3:f4:aa:13:d9:7b:61:8d:19:f4:07:f3:27:ef:a2:
68:f1:4f:c1:1e:b9:c1:89:c1:c2:04:f7:75:ee:9d:
83:bf:10:93:8e:c4:a0:a3:a1:f0:9a:57:a5:28:aa:
ad:7d:84:db:3a:a9:71:c8:b7:41:86:a1:33:32:a9:
1f:57:d0:fc:ce:9a:95:bf:53:ba:bb:de:0f:4c:d5:
9f:3e:7b:e9:dc:26:6d:1b:4b:fe:96:d6:43:89:fd:
a9:7f:a2:87:9d:3e:71:09:69:cf:4e:80:ac:73:64:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:21:00:5D:FF:79:39:0F:FC:3A:6F:ED:62:98:AE:7F:D0:37:F9
X509v3 Authority Key Identifier:
keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:cd:f0:b0:c7:e2:9a:4a:9d:2b:d1:19:48:43:b1:b9:6b:
0c:c8:af:93:64:42:80:d3:97:a2:9d:2a:63:99:26:d0:f9:b7:
36:3b:30:0e:1f:de:dc:fc:a1:c9:ca:ed:9e:3f:8b:00:b1:15:
52:6c:6f:ca:55:c2:e2:05:d6:1e:39:a8:86:a9:5a:10:ad:2d:
8e:ef:41:44:59:df:db:3b:60:e0:ec:0b:9b:ec:0a:19:51:a0:
c7:80:e1:3c:eb:ee:f1:25:46:19:b1:29:b0:8c:4e:d8:b8:56:
70:51:90:10:5e:c8:17:c7:ae:e5:b9:81:d9:2e:77:26:18:c9:
f9:f6:5e:77:f0:8a:4b:d6:0f:b7:f9:a7:ed:78:36:a5:85:68:
9a:a2:d0:22:1d:e2:7d:5a:23:19:0d:4c:5b:9e:42:11:a0:76:
ab:41:04:f7:86:45:21:65:d7:8a:fe:bf:4a:a3:4e:28:03:61:
cb:75:ff:8c:91:2b:f9:04:2a:dc:42:1a:94:50:4a:30:11:9b:
68:57:c8:0e:3a:fe:19:d5:f0:10:7c:fa:16:f6:4b:57:54:12:
5e:70:2c:25:4e:79:50:2a:8f:b1:9e:12:1b:d3:29:da:7a:c2:
b6:b3:8a:47:17:09:3a:b6:40:d6:ea:e1:79:cc:f1:82:31:a4:
db:43:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:48 2025 by rpki-client