Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: qpWfnZ8cG3SO9QpGWHDVGhMr/PY7/w/XHXRwQ2pqvnY=
Subject key identifier: 4C:31:3B:A7:3D:B8:5C:02:1D:FA:24:DE:C1:E4:07:57:5B:AA:6C:45
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 0197BA7D5B973060971DB65AC4F82A1CDC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0D17
Signing time: Sun 29 Jun 2025 07:01:06 +0000
Manifest this update: Sun 29 Jun 2025 07:01:06 +0000
Manifest next update: Mon 30 Jun 2025 07:01:06 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: ovTJ+9lAWd1xYqRPnWrIiz+90CC0ZIEDUjjpL7OGYe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:5b:97:30:60:97:1d:b6:5a:c4:f8:2a:1c:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Jun 29 07:01:06 2025 GMT
Not After : Jun 30 07:01:06 2025 GMT
Subject: CN=4c313ba73db85c021dfa24dec1e407575baa6c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:45:5e:61:77:b1:ab:32:23:5b:82:ed:44:
e5:3f:de:50:41:f6:c0:67:0e:6c:c9:1c:19:ea:5e:
68:e8:17:c4:a3:bd:b2:0d:14:47:1c:f0:03:ee:ce:
81:26:14:4c:22:32:17:03:21:89:23:db:06:35:3f:
58:ab:19:51:11:0f:20:e1:f8:9f:50:e2:08:de:c6:
7b:88:d2:f9:37:32:be:f5:3e:32:07:81:e0:88:f5:
17:7e:63:56:6c:fb:b6:48:a9:c8:db:7c:36:54:f6:
c9:f3:40:e5:87:5e:4d:4d:20:c6:8e:70:13:2e:e1:
bb:9f:46:57:de:4a:ab:1b:d8:4d:c5:b6:82:e6:26:
10:34:50:b0:81:fc:b8:d3:ba:d4:08:a9:54:8b:39:
0c:2a:75:43:a1:67:e8:bb:80:7e:4d:1a:e2:86:de:
05:e4:a7:17:ab:87:0b:ce:d7:2b:2b:2d:82:6d:5a:
44:97:fa:07:84:91:f6:23:e8:a5:ea:a2:43:72:1f:
af:7c:ed:bf:65:74:8e:2e:16:ea:6f:b3:08:1b:42:
87:d2:ac:3f:78:c4:bc:dd:11:71:1b:6e:2b:8b:9c:
fc:67:1e:95:7b:6e:2a:85:70:9f:e7:c9:9f:b1:32:
52:ab:53:21:f0:d0:d5:c3:e5:92:31:07:0e:eb:7f:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:31:3B:A7:3D:B8:5C:02:1D:FA:24:DE:C1:E4:07:57:5B:AA:6C:45
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b8:c2:69:af:8c:eb:8d:82:a4:d8:73:db:f4:6d:2a:ec:a6:
b9:c1:31:8e:1a:f2:73:21:22:2a:0f:69:d4:0d:48:a4:aa:40:
27:c4:9a:5c:ad:2f:0e:f4:90:af:92:42:c8:32:28:16:d4:f6:
90:80:e0:e3:cc:73:10:48:7a:e5:74:6d:ef:96:2b:4e:f3:ce:
50:3f:80:3d:68:57:62:1f:d6:48:56:af:ca:df:e8:93:6d:ca:
b0:3c:f2:14:20:c5:a3:21:1f:d3:75:4b:e3:6b:e9:e8:a4:6f:
e6:79:2d:31:78:33:d7:26:3d:53:d6:78:f0:98:d5:09:aa:6d:
c8:f7:63:e7:63:e9:55:0a:8c:3e:9b:f8:37:10:97:18:ac:9e:
8f:55:35:a7:19:92:b3:66:90:1d:00:bb:65:f5:06:19:b6:c3:
50:1f:fd:d5:99:b6:45:52:fe:07:b0:ad:e0:90:84:02:68:20:
7d:b6:23:90:3a:e0:4c:d2:92:23:4d:b6:ca:5c:5a:48:bf:c8:
a4:93:42:7a:eb:cc:ca:f1:16:0e:8f:e5:53:02:43:6c:f8:e0:
12:6f:62:cc:76:45:23:47:1b:77:bb:9c:43:2a:47:f9:7e:a8:
50:44:f8:e7:02:13:0a:94:a9:cf:23:da:96:0e:83:18:61:43:
9c:0c:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:36:35 2025 by rpki-client