Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: KU/+oRvM/2baDI+tGNoXByLSOysOUwusni3WrdKiie4=
Subject key identifier: 59:3A:BB:1F:1C:26:1B:CF:75:4D:BD:43:7A:4B:BC:B2:2A:F7:74:4C
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 0197BA7DAED8B8A373A6B298D0F0207D6114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 12EF
Signing time: Sun 29 Jun 2025 07:01:28 +0000
Manifest this update: Sun 29 Jun 2025 07:01:28 +0000
Manifest next update: Mon 30 Jun 2025 07:01:28 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: CWOmVvs7tYS+i8+LFeJXL0RzakpPcTZVcd+zovgZ/pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:ae:d8:b8:a3:73:a6:b2:98:d0:f0:20:7d:61:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Jun 29 07:01:28 2025 GMT
Not After : Jun 30 07:01:28 2025 GMT
Subject: CN=593abb1f1c261bcf754dbd437a4bbcb22af7744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:56:25:97:17:ee:86:2d:6d:8c:9b:a7:cc:
59:ce:ac:be:ca:7a:94:f9:c6:c1:0a:29:36:1a:15:
6d:37:d5:fd:a2:41:fb:6d:cd:f0:ff:62:43:38:8a:
31:8b:21:ea:1b:e6:89:28:c6:fe:fb:13:a9:04:17:
3b:f4:5a:5a:27:67:5e:0b:97:ff:3f:65:a5:24:f8:
68:67:d6:50:20:49:2b:88:20:5d:85:05:36:1f:a3:
cd:84:58:f1:05:b6:10:e6:5b:5d:26:ae:ac:5c:2c:
a8:e7:08:db:94:da:92:f8:0c:e4:01:bc:f9:ae:99:
4e:df:43:f2:ce:6b:1c:71:7f:34:b9:c2:42:e7:23:
cb:ce:d2:ab:10:38:33:44:29:4b:2f:df:ac:5a:3d:
0a:bf:bd:0e:cc:93:0f:9c:66:35:d5:ce:07:6d:6f:
e4:23:b4:49:33:59:29:3b:5c:dd:87:45:6f:71:dc:
04:bc:c1:01:c2:1e:a6:18:de:49:4b:5b:45:60:e5:
4c:1e:01:52:d5:85:c6:a4:6f:c4:aa:2c:3b:ec:b5:
9f:f4:4b:dc:ed:e0:c3:33:3b:d9:9a:6f:a0:f9:09:
f3:80:ac:dc:b8:e7:27:ec:b6:c3:14:2c:47:f0:ff:
9e:ed:98:50:84:2f:ca:86:3f:ef:90:cc:f3:7e:19:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:BB:1F:1C:26:1B:CF:75:4D:BD:43:7A:4B:BC:B2:2A:F7:74:4C
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:18:ae:67:a1:81:8a:f8:d9:89:44:a8:ac:c6:77:70:d6:99:
24:e6:17:ee:dd:76:21:fd:69:2c:1a:21:e2:16:4c:63:fb:1b:
a2:16:ad:e3:fc:e6:7d:18:dd:07:68:3b:3e:e9:d1:6a:a3:2f:
0b:20:d8:b3:c4:42:1a:1e:d4:41:3d:d4:79:b6:f2:d1:5c:6a:
c3:3c:bb:ea:c1:de:e5:5b:fa:b1:48:1f:a5:96:a8:00:fe:5b:
92:cc:a5:33:21:f1:74:31:61:24:0d:ff:9a:05:c0:95:85:b8:
8f:fe:c9:08:0f:3f:53:87:d9:ce:76:1a:0d:1d:7c:6a:81:2b:
64:4f:7f:42:69:38:69:87:28:f7:e4:e3:0b:a5:e3:8c:2c:2c:
40:d3:3e:7d:5b:79:ee:7c:9b:4f:11:47:2b:b5:fa:90:a7:21:
ce:54:fd:2b:64:f9:bb:57:63:a7:72:fc:4e:37:a4:88:39:21:
00:fa:16:51:71:43:4d:e5:6d:4e:28:7e:e0:a8:0d:ac:8a:b8:
11:0c:cc:24:fa:7d:98:9d:4b:89:01:f5:ad:8c:a4:b8:ad:df:
b9:f9:cf:36:f2:0c:b9:b2:33:80:70:47:e0:2a:9b:12:34:2a:
90:d5:1c:c1:cf:ec:2f:2f:b1:0d:85:a3:1f:e2:99:39:03:d3:
94:1d:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:55:29 2025 by rpki-client