Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: j4/Vh6js8Ei5zPt0z0lDW9tN1aIFoduWI/1imiYeA1E=
Subject key identifier: 8F:B8:AF:BA:56:BA:55:A4:8E:BD:CE:0B:7D:A8:B9:AD:A4:C2:60:95
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 01976D069D75CFE651BC6928530BCEC5E33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 06:00:39 +0000
Manifest this update: Sat 14 Jun 2025 06:00:39 +0000
Manifest next update: Sun 15 Jun 2025 06:00:39 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: Mi4YDYigptzLB6BWnNoFcOv3zlP+7r2bSWtCzPYNhOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:9d:75:cf:e6:51:bc:69:28:53:0b:ce:c5:e3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Jun 14 06:00:39 2025 GMT
Not After : Jun 15 06:00:39 2025 GMT
Subject: CN=8fb8afba56ba55a48ebdce0b7da8b9ada4c26095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:10:cc:0b:3e:e5:d1:bc:49:73:be:32:4e:
ba:cc:a4:3c:fa:88:2f:2b:db:44:e7:14:2f:cb:11:
94:d0:0b:62:66:32:bc:cf:bf:c0:ea:35:c2:f1:cb:
e9:1a:cf:13:10:ac:52:32:b8:1c:7f:91:6a:59:42:
a6:fd:73:f4:1c:ab:96:5e:b2:e6:4d:f2:a1:92:36:
55:ac:c7:c3:a8:71:91:61:e9:2e:2d:11:dd:a0:ae:
00:ab:f3:02:2f:fb:8f:96:4e:aa:9f:ed:b6:af:36:
2a:1c:4e:f6:43:ca:50:58:b7:66:12:3a:70:31:7d:
54:74:9e:9a:20:be:61:12:79:13:19:ff:8c:12:27:
9a:f7:34:80:39:a2:96:d9:68:8a:24:68:54:ff:61:
ff:ee:a0:45:0c:e2:19:77:42:c0:f0:d3:3d:8c:10:
d8:a2:8a:2e:5b:be:55:01:e3:d6:03:1b:ce:4b:c1:
b2:86:05:f2:cd:98:7e:fd:e7:85:8c:d4:b8:55:27:
0b:04:ff:eb:5d:76:d2:28:f6:3e:8e:a1:1c:db:33:
83:c5:1a:38:74:d4:16:bf:5b:bf:1e:c2:61:71:be:
49:e3:c6:1e:c5:cc:d8:a6:01:48:74:1e:1b:09:94:
9a:1a:f1:56:a6:37:ef:f6:30:89:8f:7e:9a:a2:19:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:AF:BA:56:BA:55:A4:8E:BD:CE:0B:7D:A8:B9:AD:A4:C2:60:95
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:61:d2:48:be:c2:25:15:7f:0f:e9:b4:28:e7:c2:79:7f:82:
41:71:16:27:d2:77:21:32:9e:0e:a8:97:44:9b:7e:cd:9d:93:
42:c7:f6:13:1c:8a:89:9a:bf:1d:4f:49:b6:14:ca:6d:47:ca:
d4:bb:45:41:e2:53:0a:63:77:b1:86:fe:62:d3:80:32:8f:fb:
c6:d8:37:86:a8:4c:5e:c2:85:f7:f6:78:bd:85:f2:9c:dc:1a:
94:5c:ab:e7:af:98:a7:18:5a:ce:69:50:c9:f2:16:4a:08:fc:
50:15:0e:01:c5:b3:dc:d5:14:ef:c0:df:9a:cc:87:14:aa:dc:
94:16:a9:0d:79:4c:83:c8:30:ba:4d:20:c0:df:d5:27:5a:28:
7b:7a:44:db:6c:f4:f7:d1:28:ef:1f:1a:7a:86:7f:23:3b:56:
79:d5:fd:5c:1e:94:c6:33:46:96:99:cf:21:2b:6d:54:63:7c:
d2:50:97:ab:f1:db:98:10:90:34:6b:25:32:36:e6:59:7e:c6:
8c:56:0b:4f:68:90:51:d6:38:27:69:98:e9:c7:e7:d9:35:3d:
08:a0:1e:9e:79:a5:b0:fd:d9:32:1a:47:10:6d:a4:eb:8f:9b:
54:7d:88:6b:e5:56:37:c0:7c:1c:4e:89:54:91:80:d3:8f:fc:
0f:1c:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:15:35 2025 by rpki-client