Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: ygxwga97wWz2XYrcjnsT/gg8nzBnRiaYKSzh3+/cUHE=
Subject key identifier: 71:FC:F1:FD:F7:64:08:B3:07:D7:FD:F5:47:8F:49:6E:27:5D:BD:B3
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 0197B8FD9EC78649816BD07E42EFD4FE5319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 1547
Signing time: Sun 29 Jun 2025 00:01:58 +0000
Manifest this update: Sun 29 Jun 2025 00:01:58 +0000
Manifest next update: Mon 30 Jun 2025 00:01:58 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: Ie9PrjX0rR/ttFtbguta9k3SYSaBIxd1Gf+NkHdDPGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:9e:c7:86:49:81:6b:d0:7e:42:ef:d4:fe:53:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Jun 29 00:01:58 2025 GMT
Not After : Jun 30 00:01:58 2025 GMT
Subject: CN=71fcf1fdf76408b307d7fdf5478f496e275dbdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:18:01:ad:cb:57:99:fc:5c:24:ef:b2:81:
31:b4:65:56:01:b1:bd:e1:70:e9:09:dc:6e:61:7c:
ad:58:9b:60:f2:f7:b0:f8:3f:5e:66:72:55:ba:91:
00:2a:dd:17:e0:59:da:08:2f:cf:5d:a0:08:d5:0d:
f0:cb:e9:de:39:d7:9b:18:d6:0f:8b:3f:ec:79:c4:
4f:da:3c:57:f9:a2:b2:8a:f3:a0:f2:c9:29:02:a3:
b1:de:1a:1e:3a:5a:39:ef:88:f3:c9:f8:4d:c1:7c:
f0:dc:e1:13:a4:82:a2:95:6a:38:7b:b1:d2:c4:f7:
69:33:aa:5a:cf:12:3d:43:80:fc:a0:3d:75:44:48:
f9:07:f7:1a:9c:ad:74:9e:6a:f7:94:f3:e7:da:05:
be:a8:8b:a7:24:3b:fb:b4:64:00:26:86:2f:0d:7c:
fe:b9:7c:56:1f:65:56:82:7a:3e:3d:48:b8:fd:ec:
65:af:ea:1a:45:fd:70:d3:68:f5:ca:01:db:22:69:
e7:d1:17:dd:84:7f:d0:9a:9c:c9:b1:58:29:9f:08:
61:d2:03:51:9c:4e:f5:fc:40:9c:3f:07:3b:8e:94:
2e:94:35:ab:96:32:6d:1d:2b:e9:c9:13:d6:e7:b7:
34:21:d2:2b:3c:3e:f6:3f:65:de:31:39:9c:f6:2c:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:F1:FD:F7:64:08:B3:07:D7:FD:F5:47:8F:49:6E:27:5D:BD:B3
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6b:65:c8:65:04:b9:ed:c4:72:40:d7:17:66:89:34:f8:db:
43:35:e5:63:00:89:82:b5:3d:6e:60:f5:27:4f:7e:d4:18:55:
44:88:f1:bd:35:67:01:43:7f:dc:43:32:ab:c9:1c:26:02:24:
a3:be:05:6a:f3:a4:2f:16:e7:93:5f:ad:15:ad:18:e9:ce:70:
c0:97:76:f0:80:1f:c2:44:15:13:d2:ec:03:2d:ed:25:14:d3:
4c:cc:4f:8d:de:36:41:6a:07:53:01:7e:af:dc:71:1c:61:16:
5f:02:7a:3a:6e:bf:ee:a3:55:3c:21:fd:5d:d6:20:53:71:89:
6e:62:bd:e3:e4:51:32:ab:cc:92:c0:6e:5c:7b:4c:65:4b:52:
5b:09:57:96:4d:84:8c:a3:0d:0d:d9:76:0d:0c:35:0c:6a:74:
9e:76:8a:37:84:bb:cb:7d:81:7e:ab:93:6c:ee:e2:3d:a2:13:
8c:0f:37:d4:65:e5:b8:e6:34:e7:75:12:71:05:0f:21:ab:5d:
86:d5:fa:5d:07:ea:13:da:c3:3b:23:48:4d:fc:8b:f0:a6:12:
ad:6c:fb:39:69:80:28:11:89:00:91:82:1a:3f:ec:49:13:06:
66:bf:2e:94:a4:be:6b:85:c9:b1:d2:7a:65:8d:90:74:4e:5a:
a6:b0:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:12:03 2025 by rpki-client