Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier: o/pHIyzhdxmRzzAihbQ9bfyHeH63DiyBmNM+qEA7EjI=
Subject key identifier: FD:96:F3:26:34:27:F9:0A:99:63:A6:0D:AF:98:67:5B:AD:63:4E:32
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer: /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial: 0197B6A253E48D604FB4197C817C3A9985F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number: 1285
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: RISfjuguxzPWm0FfMheRZHao5rYIRrFBUsq1f8e6Q9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:53:e4:8d:60:4f:b4:19:7c:81:7c:3a:99:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=fd96f3263427f90a9963a60daf98675bad634e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:35:1b:e9:ab:09:54:81:38:a2:3e:70:33:
69:80:07:52:c8:e1:07:58:c4:c8:dc:92:ee:94:f0:
b1:16:93:82:8d:08:b0:f0:d0:8d:49:af:37:e8:99:
b7:07:31:dc:e4:e8:84:e3:fd:3b:19:59:fd:87:23:
06:a4:dc:6d:e0:f5:23:d0:e8:c9:5b:fa:a5:c8:93:
d1:fa:08:f9:f0:0d:48:3f:b6:bb:de:b0:2a:d9:7e:
95:9e:42:93:38:07:67:39:e3:03:4d:2b:c3:98:25:
22:cb:1c:9e:01:0b:29:26:17:92:10:51:94:8a:45:
fa:1f:fc:89:17:df:d0:be:b1:0f:51:13:e9:5d:50:
82:74:0b:47:63:10:7c:79:30:84:90:26:ab:4e:20:
03:e6:a7:ab:03:e2:dc:8b:94:bf:0e:a5:67:c6:7a:
a5:67:47:d2:f2:76:33:d6:cc:2f:7d:ac:19:ff:e7:
99:7d:7d:75:e6:de:76:5a:21:6c:85:8d:b5:f7:6f:
dd:dd:7c:c6:5b:c0:f4:ed:de:e1:89:b2:fa:fd:75:
57:02:b0:d7:7c:1d:4c:be:ef:4b:56:56:dc:87:54:
6b:84:b5:17:de:95:5e:e4:8f:14:b3:2a:2f:be:e2:
50:dc:63:62:8b:cb:cf:e5:7b:4b:74:2e:a0:a3:ce:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:96:F3:26:34:27:F9:0A:99:63:A6:0D:AF:98:67:5B:AD:63:4E:32
X509v3 Authority Key Identifier:
keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a7:6c:e8:dc:4f:37:64:43:75:49:e2:e2:d2:1b:11:72:28:
6b:14:33:3d:ba:c7:90:4f:84:f0:04:2b:9e:0c:05:bd:a7:53:
85:a7:d0:b9:fe:e3:75:2e:8d:1a:b9:12:e0:32:a1:f6:1e:a4:
6f:63:49:a0:aa:fd:79:33:9b:9e:05:aa:10:58:a5:d5:eb:08:
23:62:1e:a0:09:7b:17:7e:f8:46:72:c0:5a:7d:21:d1:c2:07:
6c:f1:3a:81:7f:ff:5e:3a:bf:dd:af:22:0f:21:8b:7e:b5:a8:
cf:d8:9f:84:4d:62:5a:d0:70:f1:4b:91:a4:09:fd:cc:d0:b3:
ac:ba:93:68:34:72:67:7e:45:82:ab:f5:1f:bc:a4:a5:0b:68:
47:5b:48:f2:c7:3f:63:7d:ac:f5:c0:b1:f4:35:40:e3:c4:10:
3f:89:01:41:8d:dd:b8:f5:6f:e7:7d:5c:4c:21:86:c7:28:f7:
1d:10:b2:5e:f6:95:d9:cd:1d:01:cb:1a:04:4d:b7:d9:9a:68:
08:a4:9b:de:b3:e8:1d:e1:08:8e:8e:d1:90:e8:4b:fe:2b:f8:
79:58:a2:30:ed:9c:c6:a7:57:70:a6:23:db:d7:73:eb:c0:83:
9f:f2:c1:9b:da:93:ee:da:bd:83:39:7a:f7:a4:5d:ba:b6:47:
dd:2c:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:29 2025 by rpki-client