Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: xmHSb9xqSdoZdwVfyGRc2Yu+5Mww2C+WVaoXCSV/d+Q=
Subject key identifier: 85:AA:0C:DF:B5:6E:25:B6:94:06:66:F0:3C:19:DB:FD:17:49:A1:90
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 0197B6A0F30816804613B95042B98DE3EB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0CF8
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: VIzeV0Q6ogiCgu3BwJBxuJK6ZcVRrSzqK7bN28yunpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f3:08:16:80:46:13:b9:50:42:b9:8d:e3:eb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=85aa0cdfb56e25b6940666f03c19dbfd1749a190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:50:62:40:79:6b:03:72:c8:8e:55:d0:a3:
0e:80:f7:21:f3:f7:df:41:25:de:47:f4:12:98:2b:
f9:13:f9:36:d7:ed:b8:0b:15:00:05:e4:c2:c0:a8:
de:65:2a:31:8d:9d:ff:ef:e1:da:22:01:d5:53:93:
ab:ac:cc:39:e2:4d:17:3e:70:17:37:58:4b:68:31:
65:2e:1e:80:b4:b6:52:a8:c6:b9:e9:c4:d0:71:e5:
1f:f6:d3:13:de:5e:e5:30:67:f6:e8:0d:b7:58:7a:
1a:f7:b1:ab:d8:49:78:1a:da:99:4d:3d:de:1a:3d:
78:6d:8c:4e:78:66:8b:ed:5f:79:4a:e9:b2:98:dc:
de:b1:b3:a1:11:a0:8a:e6:aa:9a:0f:64:41:68:d7:
08:36:b8:77:f0:8c:66:91:d4:28:e1:ef:af:64:77:
39:9f:30:67:f6:6e:c0:f8:a9:79:b3:d8:4b:d3:8c:
df:3e:52:d1:f8:8d:e4:ca:8f:a7:bb:42:26:60:70:
b4:da:c9:00:02:d0:b4:ae:fe:58:07:12:2e:81:91:
43:19:18:22:11:82:5b:13:f8:b0:09:bc:74:a3:a5:
ac:9d:a8:95:7c:be:16:01:67:83:d8:58:07:02:24:
2f:d9:6c:c4:35:01:de:a1:a2:21:d5:58:14:fd:97:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AA:0C:DF:B5:6E:25:B6:94:06:66:F0:3C:19:DB:FD:17:49:A1:90
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c8:8e:dc:e5:7f:5b:2c:e4:81:4d:c8:a0:3c:cb:55:ba:e9:
3e:1a:87:f0:ee:dc:7f:5d:bb:96:d4:ac:0f:05:f9:a5:87:1b:
24:c8:4d:76:80:9e:e3:89:5c:cd:70:24:f6:7c:05:69:b5:8a:
c1:ed:ec:c4:fb:e0:22:90:9d:47:cf:3d:d2:2e:97:cd:f1:b4:
a1:53:83:41:03:48:d2:b4:10:32:c9:fc:9a:42:dc:10:f8:f2:
9e:fa:0a:65:3d:93:b8:75:d9:80:c6:44:6d:51:0b:8a:e1:7a:
08:e9:91:68:8b:27:ad:2c:2f:0e:0d:7c:ef:4b:3e:d5:b6:21:
5e:4d:dd:12:10:6e:53:1b:68:80:02:ab:c4:a3:f8:d2:36:b0:
13:45:3a:88:f8:ef:d0:04:a8:76:ab:a0:da:0b:ec:16:97:3f:
0e:1e:8d:89:8e:f6:69:55:e7:69:c5:99:17:72:83:2a:cb:92:
3e:4d:6b:9a:64:7f:ea:fc:66:23:6e:7f:65:4b:fb:70:04:26:
d2:be:6c:88:53:35:93:39:ac:f8:0e:a6:c2:5f:0e:2a:83:ce:
70:61:0f:4e:a3:74:c6:21:a1:45:40:cc:94:df:2b:25:25:7a:
a8:39:e7:d0:de:ca:3d:a3:f7:ec:7c:c7:23:f4:eb:55:82:a4:
03:87:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:50 2025 by rpki-client