Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: H8ONCOIgZoNCQW4TJA0zBMEa15hgAFO2qkYu+8Clvq8=
Subject key identifier: 09:6F:F1:8F:CF:BF:BC:93:E5:8C:3E:94:4D:D2:FB:68:D3:F8:02:9D
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 0196B5C6DB80AC3F51CF26AACD9D15684B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 0CC9
Signing time: Fri 09 May 2025 16:00:30 +0000
Manifest this update: Fri 09 May 2025 16:00:30 +0000
Manifest next update: Sat 10 May 2025 16:00:30 +0000
Files and hashes: 1: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: BoQxH8T1ktJBQU8rKYmBlmOWHhFaqw1dqx6Dfa6EEJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c6:db:80:ac:3f:51:cf:26:aa:cd:9d:15:68:4b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: May 9 16:00:30 2025 GMT
Not After : May 10 16:00:30 2025 GMT
Subject: CN=096ff18fcfbfbc93e58c3e944dd2fb68d3f8029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:d7:7a:06:31:61:0c:b4:f6:dc:c0:67:28:
b0:e5:dd:ad:46:b1:10:f3:2b:b0:d9:5e:58:7f:5c:
c4:5e:77:44:cc:ad:3c:a2:69:f2:d1:bf:b0:da:7c:
99:19:ad:d9:cc:b8:64:22:0f:e3:48:b4:12:14:40:
43:89:c8:8c:e1:b0:ed:0b:e2:c3:1b:49:11:6e:8b:
7d:70:25:25:fb:6e:f9:dc:24:f2:86:b6:62:75:7d:
5d:c7:5a:28:d5:b9:9c:dc:14:48:06:25:f4:e3:31:
4a:48:52:d5:c1:8a:27:45:6f:e3:3c:08:bc:c0:d9:
ae:ef:f5:45:bb:0d:bd:79:4b:bb:69:e1:50:c0:9d:
ac:e6:a8:04:b7:06:e8:80:fe:a4:a8:75:9c:df:d5:
1b:31:6e:8b:fd:92:7e:38:20:5f:41:ea:60:23:93:
e4:e0:09:6f:be:12:6d:ce:0b:d5:18:14:e7:f3:70:
b0:cc:1e:30:cf:6e:2b:b5:92:8a:dd:01:4e:5d:ca:
0c:e3:11:a1:04:56:43:f8:9d:2e:56:4c:1f:14:1f:
3f:be:80:f1:46:86:a5:a4:31:02:89:19:43:97:c7:
2f:6a:a5:7a:6b:35:de:7f:0f:54:e0:2b:75:e1:dd:
35:e7:35:b2:8b:11:6f:17:47:e1:ca:94:c3:82:ca:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:F1:8F:CF:BF:BC:93:E5:8C:3E:94:4D:D2:FB:68:D3:F8:02:9D
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6b:f5:06:25:a6:dd:2b:5d:e4:b0:7b:0e:ee:de:63:ac:9c:
5b:92:ed:ff:5e:ed:83:52:57:75:2f:dc:09:1a:71:cb:15:68:
ba:ed:b6:09:84:e6:76:d9:a0:5a:98:e7:96:57:c7:b9:4c:a5:
32:d6:73:bb:1d:bc:07:10:8c:46:68:9d:ca:df:b5:55:0d:b6:
e5:8b:cc:5b:d8:9d:76:28:b3:cf:12:6a:6e:ea:ce:2d:ac:f5:
fe:a4:99:f9:bc:86:66:ec:79:9d:d9:ab:b9:64:03:41:89:07:
96:46:5d:55:82:7e:a5:f2:04:2e:ec:ca:32:c4:36:13:8a:c1:
65:6e:4a:69:ae:50:ed:69:77:ce:ec:56:c4:94:09:a1:ec:6f:
b6:0b:99:be:15:44:f3:7f:e5:d1:d3:b1:9e:93:d5:05:81:79:
03:51:85:80:34:a1:b7:df:aa:c8:c6:4e:ba:87:7a:ed:ac:03:
c4:71:d5:ff:63:11:36:5f:26:46:d3:f7:e7:4c:b4:eb:c4:4f:
93:1a:df:12:50:ba:eb:3e:8f:50:76:15:63:58:31:70:70:c3:
95:bf:62:b6:98:4a:8d:46:ec:30:27:96:f0:11:dc:7c:78:00:
27:52:ec:d8:fe:78:c7:8a:93:f2:0c:0d:aa:f1:de:34:dd:d0:
6e:f4:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:30:23 2025 by rpki-client