Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: PD8U8802+E36IjKLgFi9EdgrZkxlv3LWY0f8Nf90wmo=
Subject key identifier: 6C:5F:1A:60:8E:79:EE:E1:17:40:A2:B6:E7:A7:BC:75:AE:A8:B3:F6
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 0197B77CBAB262520731667132B28466826E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 03EC
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: wWY6NOxvmFizllKz3QBxiUgf5hLQxf7Q7jThUztqMtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ba:b2:62:52:07:31:66:71:32:b2:84:66:82:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=6c5f1a608e79eee11740a2b6e7a7bc75aea8b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:c7:76:b5:ac:63:e1:e6:04:cc:38:5e:c8:
fa:1e:bf:40:dd:79:c5:55:8b:a9:8a:e2:b5:93:37:
83:45:bb:7e:be:6f:bf:21:55:ee:2c:c9:02:8b:5e:
77:d0:2a:0b:f6:8d:ef:82:88:77:43:4c:84:2a:b1:
da:6a:98:18:f0:8f:56:57:bd:64:ec:3c:20:22:e5:
19:d2:68:1c:7c:d1:93:dd:69:33:c7:c1:10:48:3c:
7e:c3:3c:c4:b1:0f:77:f2:ab:97:29:c0:fb:b2:8b:
cd:fb:49:e8:82:ee:70:00:7a:4e:92:28:03:da:4b:
7c:be:cd:63:1e:67:f9:9d:d5:de:cf:e1:4e:06:f6:
d8:17:fa:37:29:32:83:92:c4:42:4d:38:03:2f:5b:
52:fa:48:e1:41:bc:89:26:85:03:39:5c:10:e4:b3:
0f:44:ca:e1:7b:0f:19:d4:6e:02:18:f4:80:76:22:
23:32:a6:26:a0:9d:42:c0:02:63:8c:f9:39:de:06:
92:49:a7:9a:86:a8:29:b0:e0:8a:64:b9:c8:74:41:
08:26:a3:c3:08:43:37:a0:8d:ff:5e:06:c6:b8:8b:
6e:09:46:9e:d0:27:d7:54:ee:00:69:89:07:5e:60:
b9:10:05:fe:ae:05:f2:de:da:0f:10:98:f6:db:93:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5F:1A:60:8E:79:EE:E1:17:40:A2:B6:E7:A7:BC:75:AE:A8:B3:F6
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f6:8d:b3:84:4d:e9:76:52:66:4c:25:15:50:95:b7:01:9a:
d1:52:e1:b4:d3:34:8b:f2:66:9b:20:48:dd:4b:6d:1f:35:c7:
71:ba:6d:47:40:e4:78:61:f7:84:1a:1b:63:92:30:9a:94:67:
36:e8:c5:d1:92:f2:04:2c:e3:c2:c7:bb:46:e8:26:11:22:8e:
ad:ae:ae:ee:28:b3:76:70:a6:d9:c6:af:9f:43:72:74:e8:ec:
71:7e:17:72:3c:16:74:6d:87:f7:87:68:da:35:79:09:cd:3a:
89:b6:7e:c4:60:54:1b:8f:88:76:92:d5:28:7b:a3:8b:25:4f:
e4:34:12:7a:6a:93:ff:cb:48:ce:38:83:39:c3:9d:92:ec:f7:
8b:97:7c:2d:54:8e:92:bf:ca:3a:71:d5:8b:78:4a:a2:f1:9f:
1c:42:11:1f:43:55:bf:d2:9b:2d:ca:4a:12:00:7d:88:26:b3:
f6:26:2b:bd:2f:c9:98:ac:87:9b:d4:34:ad:69:13:b8:9b:7c:
74:e6:a9:74:50:04:eb:0e:8d:47:2f:95:11:a5:42:b4:d5:16:
3c:0d:d9:e9:aa:9a:f6:4d:9a:c0:61:cf:1c:bd:e9:51:b1:ad:
51:2b:d9:34:6d:e1:6a:de:ec:55:6a:2c:2a:83:c5:89:22:95:
a8:1b:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:48:16 2025 by rpki-client