Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File: GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier: nHhDJlTE5f08+2ygRDXhBfXG7RUsjk8NJDPESVDRhNI=
Subject key identifier: BF:68:B2:44:08:89:02:03:BC:F4:40:80:6A:D1:F8:BE:5A:D7:3A:C4
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer: /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial: 0197B745934D27857DEA0B93F16990D5FB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: 1iYMjwPIGZxG6VlOaQsASR+qc3+PU80Pbi+HERMQHG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:93:4d:27:85:7d:ea:0b:93:f1:69:90:d5:fb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=bf68b24408890203bcf440806ad1f8be5ad73ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b0:02:2a:04:9a:92:da:7e:38:1b:67:42:b5:
b5:06:46:db:f1:16:cc:76:54:ae:04:01:3d:37:ba:
ff:32:2e:5b:4a:c1:67:8f:6c:49:3c:00:26:59:1e:
57:b8:60:fa:fa:3a:09:4a:d4:e1:cb:31:40:e6:00:
54:95:af:75:0d:1d:1d:8e:a5:f5:04:e5:fd:d2:31:
a6:9a:e9:9c:cf:d2:dc:2f:6a:10:cc:3a:78:ae:c9:
38:73:f9:4d:f2:3d:1e:50:c1:00:26:ae:e7:7b:bd:
6c:25:90:22:cc:62:8e:68:57:89:2a:2e:1e:5c:c9:
40:32:e1:cc:dc:ec:31:8e:35:01:e1:ae:9d:c7:66:
36:cd:6b:6a:a9:2b:93:53:74:4d:f9:71:96:a2:dd:
46:5c:b7:96:0c:0c:2c:1b:57:a7:e7:c8:79:c7:42:
ab:67:2f:bb:3c:c9:05:fd:8f:cd:75:55:9a:9e:5b:
2b:1a:4f:47:90:81:45:98:e4:da:3e:f7:0c:05:ad:
9d:6b:ef:8a:80:14:ba:53:db:88:04:96:9f:37:b5:
b0:c2:ab:8e:1a:32:4e:d9:13:e8:5a:de:12:91:da:
cf:35:43:62:6f:87:76:33:bf:57:79:20:03:b6:6d:
dc:36:e9:29:2e:6b:bd:17:d3:ab:6f:bd:82:2d:1d:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:B2:44:08:89:02:03:BC:F4:40:80:6A:D1:F8:BE:5A:D7:3A:C4
X509v3 Authority Key Identifier:
keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:70:86:e1:61:22:d3:8c:9c:14:01:b2:6f:8b:b4:f0:62:
49:c4:98:7c:98:3c:f8:29:f7:7d:66:33:fc:88:ac:76:db:dc:
eb:b1:5f:55:b9:97:1a:b4:f6:c1:f1:ef:cc:fc:ff:f6:cc:1b:
0a:6f:b0:4a:7a:b9:eb:ce:42:d0:9e:f8:2c:86:b6:55:0c:df:
14:77:bf:17:a1:0f:55:01:6a:11:d9:33:ee:59:4f:67:77:9a:
c7:c9:0f:0a:a8:06:59:7b:02:61:6c:5d:65:bb:82:17:48:5b:
ee:1f:51:c6:f1:82:a3:ad:77:92:3c:a2:d1:fe:92:b7:63:3b:
48:13:d7:e7:49:58:96:a1:88:af:01:1c:a6:c7:d4:75:99:b1:
c9:31:20:34:b4:a4:08:7d:79:83:9d:90:46:f4:b6:5f:90:cb:
5e:6f:85:e9:d5:7b:05:5f:77:8a:1e:95:78:5a:c4:e8:30:e2:
be:b2:6d:50:73:64:72:1e:8d:bb:60:c2:2a:ba:ee:6c:90:c4:
63:2c:00:b7:7e:76:57:d3:5f:cd:3d:9d:9e:e5:14:50:c6:48:
67:ff:33:8b:85:3c:f6:b3:76:2e:70:ca:a0:dd:95:d5:86:ea:
f9:3a:a4:95:4c:7a:b3:e5:4a:9d:ee:f3:9d:45:f8:90:7a:43:
5c:7f:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:39:21 2025 by rpki-client