Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: EByu4RLqwa0kLX660tQEu1tzLm4TQUoP4yxxlKZk8jg=
Subject key identifier: 90:4C:BA:A9:54:11:CE:13:CB:9A:79:D9:03:8B:32:C5:F1:4B:0B:DF
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 0197B88F53E60CEE2697011D269E715E033D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 13CF
Signing time: Sat 28 Jun 2025 22:01:30 +0000
Manifest this update: Sat 28 Jun 2025 22:01:30 +0000
Manifest next update: Sun 29 Jun 2025 22:01:30 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: fnQtSGuDVCmGFNFNBgStTXREnJUc43lqghZw1MR7VNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:53:e6:0c:ee:26:97:01:1d:26:9e:71:5e:03:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Jun 28 22:01:30 2025 GMT
Not After : Jun 29 22:01:30 2025 GMT
Subject: CN=904cbaa95411ce13cb9a79d9038b32c5f14b0bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:c6:62:ce:38:dd:a5:ed:a3:90:7b:f7:35:
75:7b:09:5b:b2:e7:dc:df:fd:1c:5d:51:be:fd:20:
a3:cb:33:a7:b5:49:62:60:05:a7:6e:a7:75:67:c0:
5d:d2:70:27:19:7f:38:6e:81:45:94:48:33:92:a2:
e3:f4:f0:87:3e:c4:bb:9f:08:a8:e8:e2:11:e8:88:
53:1c:03:14:9e:d1:76:b8:92:53:da:39:96:2f:64:
50:2c:5a:07:72:ae:93:10:9e:9d:76:2b:58:1c:43:
12:eb:2f:32:13:cc:78:c1:49:d1:cc:f2:2a:e6:e5:
cb:63:4c:27:e1:59:c6:90:a7:3e:11:14:49:e1:98:
71:f6:f5:44:20:8f:85:1d:55:9d:29:e6:3e:fb:6f:
ec:63:cd:5b:be:b5:da:80:77:35:aa:c3:d9:1d:77:
78:50:02:56:ea:59:07:77:04:ec:39:6d:ac:d0:f7:
59:26:3b:dc:fe:bf:a7:9e:96:7d:b0:14:63:a6:38:
ff:71:90:9e:a4:44:d7:86:70:95:07:0e:34:d0:d7:
2a:ea:ae:dd:1c:8a:60:3b:cc:eb:c8:38:15:de:95:
2b:67:91:c9:c1:cf:4e:92:7c:26:9c:2a:00:5a:70:
3c:87:53:79:89:d6:82:a6:38:49:f0:cf:8e:78:55:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4C:BA:A9:54:11:CE:13:CB:9A:79:D9:03:8B:32:C5:F1:4B:0B:DF
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:32:2f:9b:c1:89:95:db:83:98:f9:45:ec:64:29:99:e2:
05:d0:73:cb:bd:2f:7e:a6:63:65:0c:73:a7:e0:f7:4f:00:0a:
0c:c8:02:1c:4d:4f:2d:9d:7c:0f:50:49:29:ac:64:c5:1a:6f:
c4:5c:0c:23:f1:83:3f:ad:59:b9:ff:d8:1d:62:cf:52:59:13:
cb:8a:a0:13:db:bb:dc:27:e2:be:f8:a3:d3:9d:d7:ba:f8:4e:
43:c6:9f:ef:36:82:b6:b1:47:a2:90:b8:43:47:2a:e3:92:e8:
3f:75:02:93:40:d2:19:f2:38:ea:d0:88:40:4c:a4:d9:e0:44:
1e:41:61:b3:c8:36:35:a0:7e:97:0f:35:32:fe:23:ed:a9:c8:
2e:1d:3f:f3:41:38:4a:5a:59:e8:89:c4:f7:78:e1:08:ff:58:
93:67:ff:58:ee:df:53:88:51:ab:e9:77:64:61:3b:cd:bc:92:
19:b4:29:c4:e6:0d:9f:16:2f:d0:65:6a:7b:d0:cc:2d:69:a3:
bf:90:d7:c1:27:22:5c:32:c2:d6:21:94:99:b4:26:4d:67:cc:
d0:1f:86:36:fe:70:b4:29:bc:e9:b1:63:d0:ce:32:a6:38:17:
a4:57:23:b5:95:ad:bf:27:9e:41:c0:c9:99:80:44:2c:fb:99:
af:a8:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:36 2025 by rpki-client