Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
File: G6IBGTlu61biTNCpsu4l-i2kteY.mft (raw, json)
Hash identifier: GyQ46M3xX1V7eNYUVcXcAoPC4BJCTlx6BlxqKRSuuVM=
Subject key identifier: 37:E7:50:F0:C9:BE:1C:CD:8C:45:AC:70:18:F3:EA:F5:E9:F5:EB:9F
Authority key identifier: 1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
Certificate issuer: /CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Certificate serial: 0197BA7D47919AADCF4B7FB603AD95AE4449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
Manifest number: 091E
Signing time: Sun 29 Jun 2025 07:01:01 +0000
Manifest this update: Sun 29 Jun 2025 07:01:01 +0000
Manifest next update: Mon 30 Jun 2025 07:01:01 +0000
Files and hashes: 1: G6IBGTlu61biTNCpsu4l-i2kteY.crl (hash: Csi1vyCQ1YsKrbayMew2QuF7x6I/5mqq9zfksrZaLFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:47:91:9a:ad:cf:4b:7f:b6:03:ad:95:ae:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba20119396eeb56e24cd0a9b2ee25fa2da4b5e6
Validity
Not Before: Jun 29 07:01:01 2025 GMT
Not After : Jun 30 07:01:01 2025 GMT
Subject: CN=37e750f0c9be1ccd8c45ac7018f3eaf5e9f5eb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:d5:97:87:43:1d:f3:0f:e9:e2:7e:ff:91:
fc:49:37:fe:84:89:bd:c5:ff:87:81:ba:7e:1a:42:
c9:4c:5d:12:e6:cf:9a:3c:bb:51:9a:96:19:d4:7e:
a7:d0:e6:17:0e:89:52:af:0a:ee:63:1f:5a:cd:dc:
9d:2c:01:77:da:92:30:07:24:ee:c8:bf:a2:95:4a:
b6:33:86:cc:6c:35:70:68:2e:d8:90:dd:ff:2b:b8:
c6:66:03:67:e3:34:ee:02:8c:36:24:87:8b:62:34:
57:de:50:96:0b:28:7d:c6:e1:1a:bb:b4:bc:46:35:
36:59:5e:56:33:6d:9b:fc:f0:6c:e3:0d:32:53:e6:
ea:ee:b8:99:21:27:cb:27:87:08:90:16:3c:2b:38:
a3:80:d8:bc:f4:8b:84:0b:7d:ff:ae:39:c3:4f:a9:
18:e7:a4:d7:e1:2d:50:0c:ac:7e:d5:a2:40:2b:81:
03:bf:0c:6b:a0:6d:96:23:27:0c:5b:39:69:c5:68:
ee:a7:b1:92:36:28:74:b0:42:ee:49:2b:25:b7:31:
67:ab:0c:32:44:18:7d:b7:72:34:3a:db:80:ab:96:
cc:23:fc:0b:1c:7b:2b:ba:7e:a2:f8:e9:9a:8f:22:
3a:94:4c:b4:cf:38:fe:e5:4c:e6:19:8d:ee:30:04:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E7:50:F0:C9:BE:1C:CD:8C:45:AC:70:18:F3:EA:F5:E9:F5:EB:9F
X509v3 Authority Key Identifier:
keyid:1B:A2:01:19:39:6E:EB:56:E2:4C:D0:A9:B2:EE:25:FA:2D:A4:B5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6IBGTlu61biTNCpsu4l-i2kteY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c77160-4a85-478d-a540-55ac2026653b/1/G6IBGTlu61biTNCpsu4l-i2kteY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:66:cb:d3:d7:27:f3:67:17:16:72:16:d7:5a:65:7e:46:5b:
2a:0a:62:f3:42:a8:4f:0f:58:73:2d:d4:17:20:8b:d9:ab:19:
38:a5:04:a3:60:66:db:b8:c7:61:5a:6b:42:e5:14:60:54:b3:
3c:ba:85:fa:ae:8a:bb:a3:11:f5:36:fd:3d:36:a6:4f:0e:75:
c0:0d:91:40:8f:0b:44:37:ed:ab:3e:8b:c7:d7:40:10:da:6e:
74:af:c6:77:0a:ed:9b:bb:92:a4:92:9b:75:7c:65:ea:8f:e1:
d6:79:e7:1b:c2:b9:e3:0f:d8:54:ac:73:d7:26:5d:6c:1a:98:
7a:c9:1e:c9:77:e7:e2:8e:89:fe:ff:8b:5e:24:f9:d0:c1:f3:
4e:51:7d:af:63:34:3a:cc:cf:c0:b0:a8:03:30:f6:1c:01:38:
8f:0a:79:40:b7:16:00:15:5a:96:cb:aa:e7:a5:4c:dd:a6:84:
95:64:6b:f3:66:e5:91:ed:58:47:4f:26:c3:20:72:06:83:4a:
a3:fe:58:39:65:cd:8b:86:60:f6:9a:cb:73:23:67:99:08:42:
be:1b:29:7d:ae:c5:25:c5:e6:a5:14:74:ba:44:49:f6:1d:3e:
ec:e5:04:28:a3:6f:a9:80:65:11:3c:41:90:86:a2:7b:61:cd:
cb:3d:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:35 2025 by rpki-client