Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
File: gbv0m8K-YG6m9Ivb-WJX3natfMA.mft (raw, json)
Hash identifier: R63vi7Q0P+MOR1RRHldJgySarSw5pIdDLlok0mHdg48=
Subject key identifier: 44:79:A8:FB:61:00:6E:55:09:F4:E6:FF:3A:A7:02:85:3C:F4:D0:65
Authority key identifier: 81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
Certificate issuer: /CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Certificate serial: 0197CDCD5E413B2AB79394B26D1498DE8363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
Manifest number: 15BE
Signing time: Thu 03 Jul 2025 01:01:17 +0000
Manifest this update: Thu 03 Jul 2025 01:01:17 +0000
Manifest next update: Fri 04 Jul 2025 01:01:17 +0000
Files and hashes: 1: gbv0m8K-YG6m9Ivb-WJX3natfMA.crl (hash: Pzf19/+HAboWjym3bNaYHPByJYl2MUDOJTelzGd0FKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:5e:41:3b:2a:b7:93:94:b2:6d:14:98:de:83:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Validity
Not Before: Jul 3 01:01:17 2025 GMT
Not After : Jul 4 01:01:17 2025 GMT
Subject: CN=4479a8fb61006e5509f4e6ff3aa702853cf4d065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:ae:e6:cd:53:eb:1c:95:f8:e7:3e:12:b5:
f8:ff:99:ad:e0:a1:5e:c1:31:21:4a:37:ab:63:ee:
5a:a2:9d:44:96:e4:b0:6d:b7:c9:c6:d4:96:25:99:
a9:8b:fd:af:29:49:4c:7f:74:c9:f5:b7:fa:65:c3:
66:75:06:55:25:8d:a6:11:7a:c1:4c:f2:cb:4d:a8:
48:1b:1e:bb:4f:2a:79:3a:09:b4:89:29:b7:30:3a:
9c:94:60:8d:dc:70:f4:e4:b2:d0:e5:e4:ff:1c:52:
05:7a:d5:47:de:1a:ee:f2:90:c8:41:60:b4:ff:56:
26:25:31:39:ef:90:bd:82:d2:2b:50:28:a9:d9:4d:
49:ba:cc:bd:78:a6:08:67:7b:22:f5:74:29:1c:0a:
ab:53:47:05:a9:46:cd:c6:87:be:9d:fb:8e:e5:f8:
5b:b3:2b:cf:2c:7f:23:88:a2:a2:6c:79:1f:65:69:
07:1b:69:05:ed:6d:a0:08:f5:29:5e:5a:96:94:2e:
2b:f6:4e:44:7e:08:84:a0:a3:e9:30:20:38:86:7d:
23:ba:d3:b5:e2:75:c5:12:47:0b:17:90:6e:52:f7:
05:98:6d:69:51:38:36:50:61:7e:79:c4:b6:2d:61:
d7:78:0e:8d:bc:b1:f3:12:a8:88:13:71:cb:ce:03:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:A8:FB:61:00:6E:55:09:F4:E6:FF:3A:A7:02:85:3C:F4:D0:65
X509v3 Authority Key Identifier:
keyid:81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f5:bb:10:51:54:c4:92:84:56:d7:79:17:14:65:5c:fb:7d:
5e:f4:cf:31:2a:7a:c4:63:84:6d:c3:0d:6e:8e:2c:d4:22:3a:
e6:02:ec:73:7b:3a:d0:55:1b:fc:dc:3f:8b:89:50:88:ea:03:
32:c4:3a:01:c6:b5:51:a4:28:99:5f:a5:f0:a0:a9:9f:a4:4e:
7d:d8:9a:fb:be:ec:89:ab:be:6f:65:ea:aa:2e:aa:f9:5c:99:
b6:ba:7a:00:a8:9e:ef:da:5e:15:0e:b9:bf:cf:8d:6a:79:68:
e4:93:5b:59:b5:c9:61:0e:e6:37:96:0e:d3:be:81:10:47:88:
dd:ea:10:26:a6:8f:5e:c6:66:3c:d5:84:60:09:7d:72:08:1a:
f6:e0:f4:72:0b:8c:fc:78:0d:3a:7e:09:a0:1a:05:32:fb:64:
37:2e:61:09:17:02:5f:1c:d6:9c:ce:53:c1:aa:9e:7e:00:32:
5e:49:ff:1f:7b:e5:2b:0b:59:7a:f5:7d:88:92:de:a0:fb:b8:
41:01:f3:86:84:a0:2d:dc:04:de:72:ac:3d:9b:4b:e9:fa:f8:
38:66:f1:5e:66:08:b6:75:85:21:3d:97:c3:b8:63:6e:93:05:
2f:92:72:ad:b9:91:a9:22:06:45:a1:e0:86:f3:08:58:26:b0:
24:94:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:53:01 2025 by rpki-client