Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: szQCZ7LwLhHjIDxx4aLJT0VYj6dAv6GnwUPhpyjBbh0=
Subject key identifier: 27:5F:49:31:A3:5B:D9:6C:E4:F1:29:CE:0C:2D:FD:1D:2C:08:E3:D2
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 01976BF451464496123DC855D558992AD3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0879
Signing time: Sat 14 Jun 2025 01:01:03 +0000
Manifest this update: Sat 14 Jun 2025 01:01:03 +0000
Manifest next update: Sun 15 Jun 2025 01:01:03 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: r6ND6n7LzD16SgW7KvKYfvtfmGIkeaO3Crh4eGExCJ4=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:51:46:44:96:12:3d:c8:55:d5:58:99:2a:d3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Jun 14 01:01:03 2025 GMT
Not After : Jun 15 01:01:03 2025 GMT
Subject: CN=275f4931a35bd96ce4f129ce0c2dfd1d2c08e3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:c1:65:21:d6:d3:91:c7:d7:72:31:e9:32:
8a:18:a9:bb:f5:88:af:ee:64:ad:ad:dc:61:08:7f:
7c:0e:d4:55:cb:45:dd:c1:94:90:9b:03:b7:4a:a5:
bf:5e:30:3b:ad:b7:1b:50:a4:02:76:eb:12:01:95:
ab:85:26:e8:6e:48:07:8c:ac:0e:3c:e5:92:6f:7e:
9e:ac:7c:a0:d4:d9:c6:5a:ba:56:5d:ce:61:bf:13:
bc:9c:2c:83:2d:db:2c:bf:ed:94:74:7f:32:ed:09:
7c:f8:1a:41:be:48:85:da:e1:c6:4d:1a:bd:00:a7:
3d:82:82:98:a8:c6:c6:91:e9:1e:ea:6a:16:5d:a1:
cb:95:fc:85:4e:95:c9:12:f8:b7:20:66:3e:43:69:
52:b9:77:77:aa:fd:5f:f7:2c:d0:36:0d:ba:63:b7:
5c:20:c8:7e:8a:a2:f2:d8:ff:b6:34:41:5e:99:07:
c1:8a:ac:e7:52:40:0d:23:34:d4:7d:c0:97:74:81:
29:4d:09:e9:53:cf:f8:d5:f4:06:cd:7f:38:3a:a6:
e0:40:ca:cf:1b:94:31:8b:61:78:02:80:cc:dc:11:
96:22:e9:aa:d9:ef:63:f9:fd:72:62:9c:2b:e2:ea:
23:59:4e:0e:14:ae:c4:e3:53:d6:c3:6c:71:f9:ae:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:49:31:A3:5B:D9:6C:E4:F1:29:CE:0C:2D:FD:1D:2C:08:E3:D2
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:31:50:ef:6d:8a:ba:ce:fd:35:cf:02:ff:97:ab:d1:45:2c:
e2:0c:be:f4:9e:2b:03:22:88:f1:cc:47:0d:2c:03:6d:2d:81:
c6:63:08:d8:26:f5:c4:1a:af:2e:dd:78:a8:5a:b0:9b:ac:3c:
68:80:48:8d:dc:cb:67:d8:26:5a:48:c6:0a:ca:63:7d:e4:0c:
28:97:0b:59:2e:0f:00:41:36:59:5e:b7:79:ae:18:ae:e4:0a:
90:7c:ee:ea:dc:0d:b0:46:89:24:cc:a4:3e:ce:72:db:60:6f:
72:2b:d3:79:d2:07:02:e7:b1:88:19:8f:80:bc:d7:26:e3:62:
ef:a4:ef:97:8d:b6:32:47:1e:44:4b:ee:9b:cf:20:61:a5:5f:
c1:82:67:19:36:5a:d2:73:3e:ef:8a:06:a5:6d:dc:3b:4c:a3:
d6:30:b8:9d:f0:03:ca:0a:20:c6:90:f0:3c:18:68:f7:0b:9a:
54:75:ce:7e:02:6f:1b:11:b4:44:c7:25:99:bf:94:04:3c:30:
1c:cf:9f:a9:36:2f:d6:4d:64:24:8e:56:db:66:f9:a4:63:c3:
9a:5b:52:52:37:a6:48:20:05:88:d6:a8:d2:9a:2d:71:bc:97:
8d:bc:6a:1c:a1:30:f7:a4:85:ec:06:70:f9:81:44:c9:b5:bc:
19:d4:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:41 2025 by rpki-client