Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json)
Hash identifier: oTU8J5EbK5aV9X58m5JT8P+qXPDpiQ3aeRbExRJ9trg=
Subject key identifier: D2:62:75:C5:0A:7A:EF:7D:E5:D0:9D:45:FB:3A:04:C7:30:26:26:EC
Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Certificate serial: 0197B6A0762C5CFE70EBB44D5F9392FC8EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: FCAyXs0FTiBMeqtvSw0Aee2CcBojJGMtX8wXYMTfUnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:76:2c:5c:fe:70:eb:b4:4d:5f:93:92:fc:8e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=d26275c50a7aef7de5d09d45fb3a04c7302626ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2c:d6:f2:ad:87:17:9e:e7:e8:16:ec:50:6c:
90:29:bb:10:a6:d4:a6:fc:47:78:0a:ee:a8:9c:65:
20:af:8e:58:a5:c9:75:d8:8d:f6:d4:a3:bf:e5:65:
3b:87:88:63:11:ba:5a:7b:0b:9c:50:e4:2a:ca:57:
d4:c5:4d:83:f7:d3:82:19:a1:65:cf:fa:15:6b:a7:
10:be:e3:0d:6e:9a:c8:be:65:23:a7:85:7d:6a:ee:
9a:a8:33:21:33:50:3c:21:d3:55:a2:ff:bb:ee:27:
62:17:a0:da:1b:77:31:57:ea:27:91:9b:33:c2:65:
3e:e6:cf:96:33:48:db:4b:cc:b1:00:04:c9:a0:62:
f2:95:06:02:1e:a5:a3:06:aa:28:10:8f:8e:d5:df:
f8:36:4d:06:2b:c7:a2:a3:90:e7:0a:58:59:6d:d5:
39:d9:87:aa:69:03:d0:d4:1f:ab:9f:51:ac:47:8b:
13:d9:f5:ad:36:b2:89:07:b2:6c:1c:64:4b:9a:12:
58:07:0d:77:a4:21:8c:f9:51:e7:82:14:a2:f7:11:
a8:8a:1c:c6:98:64:f9:00:55:ae:8e:3b:a5:f8:73:
a0:15:f7:3a:34:83:67:30:61:c9:65:d6:94:c4:71:
43:be:36:ff:80:2b:50:6a:0f:f7:fd:ac:14:17:cd:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:75:C5:0A:7A:EF:7D:E5:D0:9D:45:FB:3A:04:C7:30:26:26:EC
X509v3 Authority Key Identifier:
keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:c4:7e:20:dd:ad:34:4a:78:d9:7e:e2:83:72:07:94:94:bd:
ed:33:f9:a1:41:ba:ce:16:e8:8d:2e:56:ab:1a:0a:d4:4c:07:
7c:0c:bc:61:32:28:7b:da:26:d2:54:f9:d2:77:f9:0e:06:63:
f4:75:25:f5:56:4d:b0:ae:23:1e:c7:e7:b8:13:97:dc:30:61:
54:7e:8b:08:4f:85:e5:4a:09:67:56:e5:2e:82:d3:d1:fc:41:
73:77:a2:45:33:4d:ea:b1:9c:45:a8:9b:8e:96:42:93:34:7d:
d0:08:2e:0e:c2:e9:93:72:10:5a:9c:f4:f7:8f:6f:b0:c2:2c:
db:ca:fb:01:61:dc:c4:40:a4:93:97:47:19:1d:55:7d:b3:fd:
04:1b:c4:17:57:97:a5:16:93:77:87:28:4e:34:86:7c:30:05:
8d:46:e3:b9:7d:a6:85:b3:27:17:d7:3e:fa:ad:16:1b:a9:45:
29:10:92:1a:bd:54:26:d6:ec:48:ba:54:0b:5c:30:3b:de:78:
d0:7b:41:29:25:1e:6c:e9:74:85:14:d6:fd:99:11:db:a1:01:
24:a2:e5:36:ee:c6:0c:83:f2:8a:be:b3:43:75:d6:b6:f8:b0:
91:3a:00:a6:ff:4c:aa:90:59:28:76:fd:74:67:26:fb:ef:1c:
75:98:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:17 2025 by rpki-client