Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
File: gU3w5sDcpazuCDqMcwTUXz0z1W0.mft (raw, json)
Hash identifier: ApraPh0rwq8gFkfBeqqG47sYZnCPH7bOQiE/0d7o0TM=
Subject key identifier: EB:00:44:38:19:05:4D:83:DD:8F:13:81:62:90:04:A0:93:73:E5:E1
Authority key identifier: 81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
Certificate issuer: /CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Certificate serial: 0197BA7DC1A25962F794B8B9101007A242F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
Manifest number: 0C97
Signing time: Sun 29 Jun 2025 07:01:33 +0000
Manifest this update: Sun 29 Jun 2025 07:01:33 +0000
Manifest next update: Mon 30 Jun 2025 07:01:33 +0000
Files and hashes: 1: gU3w5sDcpazuCDqMcwTUXz0z1W0.crl (hash: t2O5JcX7F0Gv2uyfM3EP4D8RGcQF5C9i8TmwAZzUNsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:c1:a2:59:62:f7:94:b8:b9:10:10:07:a2:42:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814df0e6c0dca5acee083a8c7304d45f3d33d56d
Validity
Not Before: Jun 29 07:01:33 2025 GMT
Not After : Jun 30 07:01:33 2025 GMT
Subject: CN=eb00443819054d83dd8f1381629004a09373e5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:e0:2b:fa:4b:cc:18:9e:74:e2:73:3b:e6:
2a:7a:51:dd:68:1b:2e:4e:c8:a7:23:d0:1e:1c:ce:
89:ed:a7:2e:e3:ed:f3:c3:0a:f5:ba:10:d1:a9:0e:
e3:12:51:a5:7d:13:40:09:a7:f6:a1:f5:b2:b6:f0:
09:d6:f9:31:f4:f6:64:d5:2e:88:ad:9f:33:8b:45:
28:37:f0:7f:09:30:83:73:a5:d6:c4:c8:54:60:d8:
1e:14:37:73:27:a8:2c:42:20:29:0d:2b:b2:35:bd:
e8:58:cf:67:59:b4:2e:3a:59:81:a4:5f:7e:4b:9b:
be:bb:51:87:e2:d2:30:6a:36:b7:d6:b0:29:cd:b0:
6b:4f:e0:ec:3a:ad:b8:f6:83:ef:e2:42:5e:3f:58:
2b:ec:d5:97:ea:bb:51:a4:d3:83:e1:b9:6f:d7:01:
97:e1:0e:8d:73:0c:f9:38:aa:2f:a4:47:fe:74:c4:
2e:3e:95:33:c2:59:c6:14:40:e5:9f:90:7f:72:18:
68:b2:83:01:cc:41:e7:87:19:fd:9f:f3:68:9e:65:
12:bf:54:2d:71:48:de:52:56:97:2e:03:c0:33:99:
7f:5a:cd:e3:42:70:00:86:28:d1:a1:f6:36:54:7b:
fc:01:d8:24:89:88:59:ba:91:90:3f:3d:f8:5e:15:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:00:44:38:19:05:4D:83:DD:8F:13:81:62:90:04:A0:93:73:E5:E1
X509v3 Authority Key Identifier:
keyid:81:4D:F0:E6:C0:DC:A5:AC:EE:08:3A:8C:73:04:D4:5F:3D:33:D5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU3w5sDcpazuCDqMcwTUXz0z1W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5140ee-6fef-46ac-be32-d0d2f2ca8cbc/1/gU3w5sDcpazuCDqMcwTUXz0z1W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6d:45:ca:03:aa:3e:a1:f0:60:9a:2f:46:48:7d:33:82:6e:
f9:84:3f:72:8f:ab:a4:2f:6b:47:4e:0c:a3:d5:59:c6:42:bb:
f5:90:8e:94:7f:ec:67:4d:20:eb:a6:fc:a8:9e:d3:ea:88:d2:
11:4d:07:73:cd:dd:fe:05:1e:d0:cf:fb:42:dc:64:b8:81:17:
b7:d3:fc:30:24:7e:bc:29:3e:da:ee:05:39:e8:e7:cf:22:f2:
29:05:32:9d:9c:ac:37:bd:05:01:73:47:7e:4b:91:11:be:74:
46:e7:cc:aa:09:c3:b4:60:b2:74:f8:9b:4c:6c:0c:d2:2c:15:
e5:cb:1e:88:f4:7d:0f:f5:ae:d2:94:f6:d4:b4:0f:8d:57:1f:
74:74:9d:27:fc:ee:f6:c5:32:97:6d:59:40:64:c8:74:2c:49:
69:66:4f:3b:27:fd:76:63:87:a5:1a:8e:31:71:90:b6:fe:cb:
bd:ef:51:de:cf:98:c5:14:36:0e:1e:5c:49:0b:ad:a6:3c:e6:
df:1f:d9:c5:86:1a:62:51:18:92:30:b1:3c:13:06:12:d0:08:
ad:2e:b9:32:c8:e4:bb:59:da:43:5d:8d:61:4b:51:64:ca:10:
37:04:dc:29:51:93:a7:dd:5e:79:60:10:31:10:85:bb:83:4d:
0a:da:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:52:59 2025 by rpki-client