Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json)
Hash identifier: Ju9mx9qew26mwvc8RY2DUtPcHSToeidn5yoovvQEyB0=
Subject key identifier: 26:FA:D2:69:8D:52:49:B2:B0:6B:BC:DB:7B:74:78:E1:44:D3:D1:44
Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Certificate serial: 0197B6D7B3FAC20725842C467F56D8573897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
Manifest number: 0344
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: 1ZHYzJHmGvR6CCyB6lUyELKyYkeeDo+/IgZaLTn85Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b3:fa:c2:07:25:84:2c:46:7f:56:d8:57:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=26fad2698d5249b2b06bbcdb7b7478e144d3d144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:e1:71:40:56:5e:4b:4b:94:7a:41:fd:60:
86:ec:c3:f4:a8:79:44:3c:37:cc:df:6c:7d:26:e2:
22:f3:62:4a:63:83:24:55:d5:68:c3:ce:84:33:46:
fa:09:8b:a1:37:3e:dd:df:1b:84:d1:d6:70:09:1d:
79:94:53:09:1d:08:d0:60:84:8f:9a:c5:aa:90:de:
94:31:b4:d4:8a:f6:b6:7c:53:c7:79:20:12:da:e1:
86:7f:b9:d1:d0:93:58:62:f6:08:ec:08:4a:d2:7f:
eb:71:90:c4:e2:47:49:94:ef:5e:be:e1:8e:94:49:
70:71:ba:a6:c4:93:c6:34:ef:0b:a4:7d:0b:f4:65:
4e:e6:81:dc:eb:00:08:1d:11:60:09:8f:b5:1e:88:
6e:67:6e:0f:8c:50:ef:7e:5f:7c:e1:45:30:0a:05:
23:64:c3:6b:05:ba:2f:0f:e1:0c:7b:93:82:13:59:
4f:f7:c7:9c:77:b9:1a:98:d9:de:1a:66:ba:68:da:
0b:c9:19:23:8c:06:3e:4e:48:f3:b6:b3:c7:f4:ed:
7d:f9:78:b5:a7:b9:de:9a:d8:e2:cf:45:f6:37:20:
ce:d7:e0:59:d5:3f:9d:53:a2:44:ec:52:76:3f:5e:
6a:d5:ba:9d:02:2e:f9:b2:a9:4c:29:2c:41:17:a9:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:D2:69:8D:52:49:B2:B0:6B:BC:DB:7B:74:78:E1:44:D3:D1:44
X509v3 Authority Key Identifier:
keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9e:84:67:11:68:d8:79:bc:44:82:7f:a6:41:46:3b:22:ba:
74:a9:8b:4f:b7:c6:78:66:0c:74:a3:bb:ec:fd:ae:5d:7d:87:
15:11:16:62:af:9b:78:f5:05:f7:7d:df:63:a6:7b:d0:a1:3b:
78:a7:42:b8:34:e0:d8:ee:de:4d:28:a6:58:1a:32:ef:c5:5a:
c7:2a:8b:b9:2e:18:7d:d4:c0:65:6b:28:b6:ba:c9:f8:df:e7:
7a:d2:7e:6f:ec:fb:e7:54:90:63:9a:89:35:18:b0:53:5e:b5:
4e:ac:23:bf:8e:a8:35:1c:e3:e9:7a:77:40:90:3e:37:27:a0:
e4:af:bf:b0:cb:f5:d5:c2:3e:46:5e:58:1d:a6:ee:d4:2f:b9:
9e:39:9f:27:86:e6:17:e8:10:dd:c9:87:f6:13:bb:fb:25:c3:
e5:8e:0f:77:94:e4:04:99:74:61:41:a8:d9:68:1a:c3:06:98:
fd:00:fd:78:9b:4f:5a:72:e5:81:61:5c:ff:51:19:6d:f8:d7:
cf:51:8a:ae:f3:b7:27:5c:65:37:0c:14:53:13:a1:e5:7f:ca:
3e:a1:a1:6b:9c:67:5d:40:ab:41:9f:67:e3:f0:57:b3:94:25:
e1:6e:f1:8a:07:7e:d7:b3:4c:89:51:7a:db:4d:af:17:91:6b:
73:41:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:57 2025 by rpki-client