Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: stMd1KerRuviMrW47YlEjWZldhHKaYGNOWFAzED8e6M=
Subject key identifier: 6C:CA:D3:01:40:71:E7:E6:EB:A1:6F:C2:B0:3E:FC:48:40:80:94:16
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 0197B70ECE5748658034A44C77FABA43C3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 0522
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: HSmNP/nyZTFsOX23hqmC1xuf3O2R7MiDNljYdBvRdfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ce:57:48:65:80:34:a4:4c:77:fa:ba:43:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=6ccad3014071e7e6eba16fc2b03efc4840809416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:d7:d4:a0:3a:fb:ac:b9:e1:02:4a:a4:3b:
7e:79:2d:49:93:89:d9:c5:71:46:74:b3:7e:96:57:
ba:94:5c:66:44:fa:b3:5e:e6:22:49:f9:75:52:f5:
cd:e1:f9:f0:f1:63:9d:35:ad:bc:56:4f:32:dc:e5:
87:32:c4:0b:97:9d:27:cb:09:27:ad:b7:28:98:b2:
b2:8f:c5:25:f8:fa:5a:8b:dd:67:37:3e:9f:b8:aa:
b4:a4:d3:37:d4:dd:13:55:e2:50:e3:cd:f5:ce:29:
df:7e:cf:36:bf:ba:af:be:16:7f:be:10:f2:9e:77:
d4:44:fc:8d:c6:09:2c:b4:64:a6:bb:2d:4f:0b:c5:
b3:4e:20:6c:c4:40:85:9f:69:37:4a:60:43:8a:8e:
82:8d:c2:6a:56:44:36:82:fb:e7:73:67:f1:27:93:
1b:da:5c:04:52:28:95:7d:23:b6:8c:3d:d2:5e:8a:
a7:5c:ec:d1:81:84:2c:d8:63:81:7a:b8:a9:5f:63:
cf:77:00:29:ec:18:55:28:70:e6:7a:28:14:09:26:
50:69:45:62:26:80:fa:7e:01:5a:44:fb:be:03:48:
07:22:5b:36:c1:21:95:41:c6:9c:bd:5d:a9:26:23:
64:58:37:ca:44:db:d9:d1:3e:04:1d:46:c3:b0:bb:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CA:D3:01:40:71:E7:E6:EB:A1:6F:C2:B0:3E:FC:48:40:80:94:16
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:80:0f:a7:db:a5:14:3b:f9:4d:e5:43:24:50:7f:30:ab:ac:
cb:0a:99:c7:80:53:4d:40:88:fe:1e:61:dd:87:a4:bf:96:d1:
73:a8:ff:0c:d9:b0:08:86:e4:77:26:b7:ce:fa:af:ff:5b:b8:
57:9c:85:00:8f:73:fe:09:ae:e7:39:05:d8:ca:4b:12:7c:6a:
06:23:25:65:3b:9c:fd:01:b8:fe:b9:52:b1:05:4c:76:c6:47:
d6:87:ca:27:9e:66:14:05:13:01:3a:e3:23:ce:f7:34:c6:f0:
59:87:7c:f1:52:71:bd:c0:ae:30:30:35:39:94:1b:c9:3b:84:
2c:c9:e5:1d:c5:e0:e2:f1:52:b0:e1:09:ea:1c:5f:13:69:cc:
95:e0:03:4f:d7:fa:42:cf:14:7d:d5:ab:5f:ca:1c:5a:50:21:
a5:54:56:af:10:c2:31:43:ef:bb:71:23:91:ca:05:85:1d:cf:
11:5c:be:d1:e7:32:d0:58:06:60:50:20:dd:ae:58:db:c3:77:
ad:00:78:e2:02:f5:61:08:5a:d9:bc:9c:2b:4a:84:f3:49:ea:
2a:2c:f7:9e:f1:95:b8:cd:fc:c4:b5:7f:fe:e0:61:52:b9:a2:
89:ee:9e:30:6b:0c:52:7f:66:44:35:df:30:58:33:38:e1:52:
9a:7c:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:20:29 2025 by rpki-client