Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File: gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier: gc6LqEvH/EK4xzEtmG45kR4Amvb4tE8V5k5jrjdJvhY=
Subject key identifier: 19:70:C1:7A:EE:7A:37:AA:9C:5C:37:EA:0F:6D:90:2B:98:2A:14:58
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer: /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial: 0197B6A18F7A25AAD481A2127E2910EE0FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: XCjFliwItl6f4aGPZLbVgBqg0MiTy5fA/+rDs36fz20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8f:7a:25:aa:d4:81:a2:12:7e:29:10:ee:0f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81689572b200ba4879381c8574274265592a14ab
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=1970c17aee7a37aa9c5c37ea0f6d902b982a1458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:0c:79:de:44:db:3b:dd:c7:5c:9e:3c:5b:
cd:3e:bb:44:67:fc:43:96:c9:43:5f:43:6e:15:6d:
09:6a:0e:4c:85:5a:de:94:3c:3a:54:c2:14:dd:f7:
c8:bd:59:0f:bc:9d:87:de:04:85:5e:a0:7a:33:1d:
b0:8a:f9:49:9e:18:e1:8d:6f:96:64:0f:f4:00:9c:
12:ad:c8:17:9d:c2:38:b3:a8:5b:45:ad:b7:e4:ac:
13:7b:fd:1b:7e:cb:56:ad:c6:02:80:8d:1e:f8:a4:
74:e4:8a:e4:36:21:a4:ff:63:fc:1f:05:b0:96:82:
92:f4:5b:18:7c:3c:c2:58:62:03:33:ff:9c:b6:3b:
80:58:6d:fb:83:d8:96:63:d6:88:f5:b2:03:7c:4f:
f2:34:d4:6b:21:dd:d9:a8:dd:ab:b0:34:96:09:e1:
35:b2:c8:06:15:3c:8a:3c:0c:60:97:c2:14:09:15:
fe:69:97:b2:01:e5:3b:09:b8:ba:42:69:07:8d:8f:
e0:e2:26:53:21:8a:55:ad:e9:a9:57:24:e1:6a:20:
0a:93:7b:bf:80:da:e3:c1:02:81:fd:a8:19:c1:d0:
68:bb:14:44:7c:30:28:26:cc:2e:a8:ff:43:01:76:
81:c1:fc:e6:f9:7e:82:9c:49:a2:b2:10:ad:38:2e:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:C1:7A:EE:7A:37:AA:9C:5C:37:EA:0F:6D:90:2B:98:2A:14:58
X509v3 Authority Key Identifier:
keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:59:b4:9c:2d:f3:17:94:aa:89:be:dd:e3:3d:da:4a:61:49:
3d:aa:c3:14:ac:5d:28:8d:00:40:cc:07:0c:dd:13:8a:26:4d:
5a:44:7a:34:84:5d:ab:e4:5b:21:24:af:b8:0c:ea:3f:68:55:
39:e4:f9:df:8b:6a:e4:74:ae:02:d3:9e:d1:38:20:6a:2c:f0:
b5:9e:ca:8d:13:dc:60:2a:64:0f:fd:78:3f:3d:60:a9:ed:4c:
e2:83:1d:ab:fe:9f:e4:70:0a:02:0e:95:82:0b:bb:41:63:fa:
39:2a:3d:2b:df:25:be:02:c5:19:3b:fb:30:db:11:65:1e:f7:
a4:e0:c7:c9:3d:7a:8c:c4:54:c7:2d:09:7d:a8:e7:70:db:a1:
cd:a9:0e:56:1c:37:03:7e:87:48:a3:8c:4b:d4:e7:ca:9a:fc:
ab:50:5a:b0:84:a0:8c:b0:42:af:fa:2f:c8:f1:30:b5:3b:c0:
73:c0:a9:e1:aa:65:d7:a4:79:43:da:4d:1c:cf:55:47:cd:eb:
c7:b6:3f:af:96:16:10:76:47:21:07:47:96:76:7e:ed:2f:6e:
17:a6:ca:5d:6d:ff:35:cb:f6:ed:83:a8:7b:2f:bc:d9:4c:68:
61:1e:ba:94:02:c9:f8:b2:9a:20:9c:21:4c:c2:c2:63:17:2a:
3e:ca:4c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:07 2025 by rpki-client