Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: CGzPyMRR4u0oF6GEywNo7tm3gHSxGi4FtW46W06rufc=
Subject key identifier: DC:DC:2F:D9:3D:06:67:F2:C4:4C:6B:C5:1F:C2:AF:F6:A0:9C:7F:97
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 019768BC01FD45295FE09BA869481CD10D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 10:00:41 +0000
Manifest this update: Fri 13 Jun 2025 10:00:41 +0000
Manifest next update: Sat 14 Jun 2025 10:00:41 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: mgWdKNaP87yWvqpDRu6iblLdN2z23yUhIw/41gEEppE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:01:fd:45:29:5f:e0:9b:a8:69:48:1c:d1:0d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Jun 13 10:00:41 2025 GMT
Not After : Jun 14 10:00:41 2025 GMT
Subject: CN=dcdc2fd93d0667f2c44c6bc51fc2aff6a09c7f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:c4:2c:6e:e7:6d:4b:73:8f:92:3e:4f:61:
73:d4:5c:38:84:3e:e3:19:c3:7e:38:74:5d:8e:04:
c6:f6:05:4a:fa:ec:02:f2:81:a2:8c:4a:3a:72:9e:
ed:c6:ed:68:c2:65:b9:55:01:f9:b1:e5:65:92:43:
62:78:57:db:c8:c3:2a:09:5c:e3:e7:d0:5c:59:f7:
30:25:a4:a9:94:3d:4c:42:c6:76:80:99:8e:99:f4:
12:1f:ad:af:61:4c:00:1d:05:77:30:91:c5:ef:b8:
cb:0e:d6:9e:64:50:9c:10:b8:e9:02:3a:23:40:89:
ec:fd:10:7d:2b:4d:85:a4:d9:d8:8a:5f:5c:44:18:
a8:52:82:68:a8:68:61:dd:55:e2:e8:34:e7:ce:e2:
92:b1:be:69:66:6c:bc:b0:03:59:80:21:71:47:15:
8f:73:ff:91:87:32:ae:45:67:71:5b:87:78:63:6c:
e5:5d:76:16:9d:40:3d:a3:4d:52:a0:f9:32:b1:37:
aa:c5:72:6a:8b:29:f5:f9:ac:6c:3d:12:11:43:84:
8a:75:96:49:78:e2:a5:67:3b:dd:ac:cb:c8:81:6b:
04:9a:d4:34:35:a9:c2:84:12:2d:bc:bd:89:c6:ad:
dd:f2:a2:6a:b5:4c:d3:73:fd:5c:f5:42:fa:7a:38:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:2F:D9:3D:06:67:F2:C4:4C:6B:C5:1F:C2:AF:F6:A0:9C:7F:97
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9f:e1:fb:f0:09:f1:5f:85:2d:86:75:f5:f6:1f:cc:c8:0d:
1b:b1:73:8d:9d:1f:0b:a0:6f:25:d1:b5:12:57:73:48:ca:73:
16:ab:7b:8d:f8:3c:92:61:82:77:01:97:21:9a:31:c9:82:3f:
a2:55:8f:32:32:20:89:c0:e6:86:a8:a3:7d:d8:f4:99:e8:0e:
08:76:50:23:5c:6b:c7:86:d0:32:64:28:3c:66:98:0d:67:2d:
e9:a2:02:44:85:9d:76:81:e0:e7:1a:d2:7f:a4:e9:6e:70:2c:
37:01:11:e6:ae:5c:e6:a9:d2:4c:07:39:ca:e7:34:19:9a:cb:
cd:bf:78:76:82:3b:5c:19:9e:ab:52:a0:2c:e2:09:57:14:e5:
76:e7:dd:23:c7:79:0d:24:60:47:c9:a2:78:f7:96:38:07:ed:
75:3c:1b:0f:29:60:76:b6:cc:32:24:7d:8a:0e:ec:ed:a2:97:
9f:b4:80:05:4d:8a:fd:2f:e6:14:c4:9f:22:e5:cc:95:b4:28:
76:49:c6:e2:8e:d6:1f:3b:bf:6b:b9:55:1f:fe:e6:73:87:74:
b6:d9:50:dd:b4:fc:e7:01:0a:cc:19:d1:9f:0b:98:5c:8e:4b:
b0:88:f7:ef:ad:48:53:0e:f5:9d:4d:d2:be:ee:8e:36:ff:77:
bf:f4:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:07 2025 by rpki-client