Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: J1/pA5/9PANlihEcv0lV/ByDFvqmKPantmHa271q+Fw=
Subject key identifier: 50:22:28:5F:A9:02:7F:C4:82:61:98:FF:14:48:C6:35:27:4F:57:C5
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 0197C9F14B9BFC4F9179AEFCA3F04353F2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 0371
Signing time: Wed 02 Jul 2025 07:02:03 +0000
Manifest this update: Wed 02 Jul 2025 07:02:03 +0000
Manifest next update: Thu 03 Jul 2025 07:02:03 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: NFBQ+QXPFiuFpa2JLH0vF0oin3HhcL7JjQ4/5ZSXc5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:4b:9b:fc:4f:91:79:ae:fc:a3:f0:43:53:f2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Jul 2 07:02:03 2025 GMT
Not After : Jul 3 07:02:03 2025 GMT
Subject: CN=5022285fa9027fc4826198ff1448c635274f57c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:f2:da:87:99:09:3c:96:8c:c9:84:16:60:
5b:d3:45:3d:5d:56:7d:81:54:41:d5:e6:72:b9:32:
33:dc:9a:a3:a8:f3:e3:73:12:36:e9:d6:03:56:4f:
81:a4:f3:83:02:1d:33:30:c2:e7:98:8e:d8:83:ba:
8d:38:c5:75:56:40:95:60:a1:62:69:dc:9a:63:49:
c8:94:91:57:4c:0b:cf:a0:ea:11:f4:fe:80:27:7d:
48:b5:94:e1:19:0e:4c:39:5a:7c:ca:0d:3d:f5:8d:
6d:18:58:96:5e:be:00:a6:c0:bc:df:bc:af:c1:51:
71:52:2a:99:3f:1a:1e:93:5f:3e:e3:31:52:58:9b:
38:37:45:59:22:8a:b2:9d:7b:67:18:13:f2:67:b6:
78:fe:c4:66:52:86:03:4a:1c:b0:b6:34:52:b1:b4:
43:a7:25:1d:3c:c6:fd:1e:37:29:e0:be:21:37:6c:
44:30:b1:da:e5:a0:0b:23:75:8b:09:4e:64:8b:d9:
ad:50:bf:d9:17:ac:8f:cf:58:e9:ee:f9:20:42:fd:
24:d5:98:dc:c0:30:0f:9f:8d:74:77:d5:3c:b5:ca:
78:03:27:8c:7f:ab:3d:22:e4:73:fe:43:f5:64:5d:
4c:a8:94:d4:e4:74:ba:ec:44:a9:2b:ca:e2:e7:5f:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:28:5F:A9:02:7F:C4:82:61:98:FF:14:48:C6:35:27:4F:57:C5
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a5:89:06:f6:27:d6:35:c5:cb:e5:bc:f8:f8:3b:cf:c6:4d:
c0:c7:a6:b1:5e:e6:a5:7d:71:b3:a4:c0:a2:0f:16:f2:57:1d:
6b:74:a5:5a:b8:c7:a1:5d:ca:b8:fb:0c:fc:d4:9f:c6:59:08:
c6:9c:fe:d8:20:93:3e:0f:be:1c:75:24:87:2e:01:f1:90:ed:
6a:6d:40:61:d7:b9:69:96:7b:ec:93:90:32:33:31:7e:74:f4:
2d:df:2c:24:b2:06:04:c4:3f:d8:d5:0b:bd:41:45:20:05:de:
04:97:94:ea:4a:60:1e:25:94:b1:4f:51:9c:a2:6c:bf:15:5a:
3c:8c:e9:0a:7e:50:be:3d:40:d4:48:6f:2b:74:55:97:36:47:
fb:1f:69:5d:6a:62:32:4f:ab:80:24:8e:0e:ec:92:93:17:47:
97:4c:4c:b1:7e:6a:2e:1d:ef:d7:57:24:83:5a:96:ff:71:be:
cb:fd:4b:0b:d7:19:65:5d:bf:e6:df:c8:e3:30:a1:01:ba:39:
48:c4:f2:9f:16:6b:59:b6:33:37:65:c0:76:52:dd:43:4a:45:
3f:e4:61:00:30:8a:4d:26:68:5f:93:96:9c:90:62:b5:aa:e1:
8d:4e:08:e0:e7:3c:d0:37:0c:67:3b:8e:ba:71:34:b2:87:e7:
9c:cd:0a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:41:25 2025 by rpki-client