Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: jFXy+3Jh4Dm5osS1oIzfS+nAo3O4b4cqiqKwxEJip6Q=
Subject key identifier: A4:F3:57:36:82:95:39:BE:87:B6:56:F0:8E:BF:E3:89:D4:78:1C:7E
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 0197B96AD2D5EE342D6DC21EEFF93BBAEC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 0B53
Signing time: Sun 29 Jun 2025 02:01:14 +0000
Manifest this update: Sun 29 Jun 2025 02:01:14 +0000
Manifest next update: Mon 30 Jun 2025 02:01:14 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: gq9ARoFmA/R09U3Oey7YNMMBe6gM8tnge+17zMMW7OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:d2:d5:ee:34:2d:6d:c2:1e:ef:f9:3b:ba:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: Jun 29 02:01:14 2025 GMT
Not After : Jun 30 02:01:14 2025 GMT
Subject: CN=a4f35736829539be87b656f08ebfe389d4781c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:89:7a:65:ca:85:6c:33:30:e4:64:35:45:
02:0a:7c:42:e2:8c:bd:ec:16:a1:63:4b:a0:4f:1c:
56:f9:71:3d:1e:fb:83:62:a5:86:c6:59:d0:5c:d2:
e6:f8:49:28:75:a6:79:60:c9:2d:04:64:a1:d8:75:
a8:b7:82:e0:f6:2c:ef:dd:18:f1:44:f7:77:88:14:
62:52:de:42:21:5d:de:a7:a0:3d:b1:40:2e:f3:84:
25:d2:df:70:8d:6b:0a:95:fa:e3:72:a4:ed:0b:57:
70:d1:19:61:19:5c:53:fd:73:a2:41:cb:71:1e:68:
ff:b6:ab:00:b2:03:b7:4e:2a:e1:d8:01:c6:31:e3:
c0:9d:d0:f8:2b:4f:fc:19:e9:61:9d:e3:5b:b1:a3:
9a:54:1f:d1:c7:78:83:03:ab:c3:28:1f:ee:d8:8c:
83:79:d1:e5:a8:17:9e:78:49:d6:bf:48:5f:71:f4:
52:a2:ec:e9:a9:30:f3:9b:26:1d:7f:1c:5c:45:da:
af:03:42:7a:ce:cc:c7:24:bb:2c:98:87:2a:7e:bf:
e2:7b:f4:03:ab:82:3f:df:e4:e2:d8:28:38:b1:31:
f8:39:2b:2d:32:e8:7b:13:50:bb:fa:10:86:64:38:
e7:a7:ca:da:9a:84:65:26:a1:21:98:cb:93:b5:3f:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:57:36:82:95:39:BE:87:B6:56:F0:8E:BF:E3:89:D4:78:1C:7E
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:df:b0:f8:0d:b9:33:66:f5:13:1e:35:96:98:ad:43:bd:e0:
bb:7e:2f:91:30:6b:88:62:d0:d3:6f:20:ff:3b:0f:19:b3:9b:
6f:4a:e3:bd:65:78:00:ca:c2:ef:21:4b:57:12:79:cd:f9:b0:
3c:c2:f9:58:53:f8:58:92:25:06:24:2f:55:7a:50:d5:17:a2:
6b:56:c4:ab:56:9d:f6:41:fc:51:56:f4:4e:3f:53:49:c0:83:
02:be:94:fe:3f:69:a0:d9:52:47:d0:3a:4b:32:d2:2e:e7:dd:
34:3f:b1:b0:f5:1b:c7:55:28:40:e5:9a:5e:fe:ab:2e:aa:2e:
f1:d5:a1:21:df:8e:b7:85:f5:99:6e:c7:78:f2:0f:e2:37:1b:
99:84:28:22:53:bc:f6:26:c0:fb:a4:e4:26:1e:bc:61:98:c8:
43:4d:a5:04:4c:c6:de:08:72:b8:4a:2a:06:3c:30:a5:99:d1:
aa:44:74:4c:8d:81:f4:28:4f:bb:fa:05:06:d2:9c:f1:82:8b:
46:d4:43:1b:71:19:c4:b4:27:72:43:34:0a:ab:65:42:29:cd:
96:bf:5d:b4:2b:44:11:4b:3a:f1:70:c1:c8:da:a7:23:80:06:
b7:ae:b3:6d:c5:ce:11:c7:fd:e8:28:cb:5a:5c:a2:2b:70:92:
ca:9f:b4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:31 2025 by rpki-client