Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: 1WZfYbpDbvDdc117c0cR6DNrAfig8qmEcgJCprQYi3c=
Subject key identifier: AC:E1:B0:A6:E6:F8:E9:94:04:B6:16:C2:26:72:15:36:27:31:A7:40
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 0197B9A16134DF09A490E7A6272ACF8D893F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: C2
Signing time: Sun 29 Jun 2025 03:00:50 +0000
Manifest this update: Sun 29 Jun 2025 03:00:50 +0000
Manifest next update: Mon 30 Jun 2025 03:00:50 +0000
Files and hashes: 1: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: H3ro4Dm5zvP/apq465eMCR/bl4n88KRoRksZqIBtJsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:61:34:df:09:a4:90:e7:a6:27:2a:cf:8d:89:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Jun 29 03:00:50 2025 GMT
Not After : Jun 30 03:00:50 2025 GMT
Subject: CN=ace1b0a6e6f8e99404b616c2267215362731a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:ed:cc:e0:50:09:c2:68:b1:dc:bf:f2:b9:
78:48:8e:0f:82:19:a3:05:31:6d:b1:21:49:6c:95:
a7:95:73:cb:be:fe:ba:6c:2a:5f:16:38:83:0d:8b:
64:09:33:eb:29:74:a9:90:ca:43:f4:d6:a5:63:5b:
d8:4e:78:51:bc:05:4b:43:a5:3f:24:04:17:e2:5b:
b1:c6:93:3b:ea:72:d3:1f:1d:fa:7e:31:c8:2e:af:
c9:12:b4:39:0b:20:a4:a3:c0:27:6c:8a:90:b9:ef:
81:12:89:3d:a3:3c:91:9d:7e:71:08:e2:c6:b7:7c:
8d:ef:c2:6d:f4:c1:51:78:50:fa:e2:03:4b:f8:e4:
12:57:35:68:b4:10:bd:4e:31:82:84:7c:00:c4:1b:
3c:be:47:01:32:4a:cd:6a:92:8f:28:aa:1c:c4:fa:
92:da:4a:ed:f1:ab:07:76:c7:bb:9f:7c:bc:1b:bc:
20:81:5e:da:f8:fe:df:e6:2c:f7:6b:13:3b:ec:d9:
00:e0:c0:14:53:08:ee:de:2e:ba:d3:d2:ae:b1:ce:
6c:e2:b3:3a:b1:91:a6:ba:17:88:fa:ab:07:f3:e8:
eb:70:32:b6:ac:37:99:af:7f:0c:2e:0e:83:01:0a:
a7:9b:07:90:11:c2:3d:83:a7:ec:01:bf:91:e1:b2:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:B0:A6:E6:F8:E9:94:04:B6:16:C2:26:72:15:36:27:31:A7:40
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bf:c0:43:08:c4:68:af:d0:5d:85:16:bf:e1:47:b7:bc:46:
18:cb:16:ea:92:65:bc:1b:7c:91:3b:25:93:6a:1d:7c:5e:b3:
64:76:1d:0c:d2:94:3c:cf:a4:ff:d7:8f:91:fa:1d:66:51:8a:
b2:8b:a1:ea:d8:35:5a:b3:a7:f6:b5:96:b5:d9:8c:4b:5c:f5:
55:45:9c:13:7a:bc:7f:d6:72:f2:84:40:57:39:a9:3d:dd:37:
b8:50:91:f6:60:94:17:4e:79:c0:3d:d1:c6:0d:1f:24:b2:90:
bf:69:cc:e0:8e:c1:86:a0:d0:0b:79:c4:dd:eb:9c:61:69:7c:
82:0b:11:d2:80:f4:6c:d5:44:5e:f4:6d:0e:6f:2f:32:e7:a2:
3e:ba:d7:90:6f:5c:7b:8a:13:17:11:e4:8d:0d:fa:b8:88:10:
c9:bc:63:a3:c5:f3:81:10:e2:34:1f:a2:40:fc:8b:fb:d2:10:
63:59:a7:70:35:62:ab:b3:de:2b:a8:98:62:60:11:38:0e:db:
d7:01:05:40:6f:d8:35:5c:82:42:b8:3c:68:5c:80:c6:e5:a2:
2f:a8:2c:59:ab:c3:1a:e9:1d:47:da:87:93:c9:26:e3:76:4c:
cc:cd:dc:3a:92:a3:c3:0c:53:65:ca:dd:16:96:1f:6b:f3:10:
f4:ad:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:53 2025 by rpki-client