Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: 2vZ9EZr+lxtg1aSPArHkv5zv7Ws7+N+eoCbuY5ZdBJQ=
Subject key identifier: C1:75:38:25:04:13:36:38:D2:88:C1:CA:26:0A:C2:B3:13:5E:5D:04
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 01976D3E3D3D66A9E011685A3C7FE3F8A11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 0259
Signing time: Sat 14 Jun 2025 07:01:24 +0000
Manifest this update: Sat 14 Jun 2025 07:01:24 +0000
Manifest next update: Sun 15 Jun 2025 07:01:24 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: iDGPAZQKFXTFhhQ+DFo4FgCt4r0AfIVYLG9xMnVX3hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3d:3d:66:a9:e0:11:68:5a:3c:7f:e3:f8:a1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: Jun 14 07:01:24 2025 GMT
Not After : Jun 15 07:01:24 2025 GMT
Subject: CN=c175382504133638d288c1ca260ac2b3135e5d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:42:2b:f1:f7:9a:96:ca:f7:e3:0c:f8:4f:
9c:88:c2:70:53:3b:6f:58:d7:68:2b:8e:86:f8:3f:
34:dd:62:42:5a:8b:96:1a:44:79:73:e2:e5:bd:89:
cb:07:c5:4f:bc:e6:13:e8:a9:e5:18:e4:35:f9:ae:
21:b6:9c:23:30:21:6c:0d:18:c7:e0:ed:ee:50:85:
5c:7c:f5:f1:3b:a5:d5:b3:12:4d:f3:9d:1b:e9:09:
31:b5:11:dd:4f:cb:d6:f7:fb:85:50:e3:d3:f1:4f:
71:75:14:cd:ac:75:73:ea:4e:50:da:34:4b:01:1b:
96:6d:0f:40:76:e0:0d:0d:ba:c1:63:81:62:26:12:
01:d7:88:e5:44:75:8b:b3:07:67:f6:02:50:84:d7:
71:ec:4a:61:8d:ef:01:f4:1a:da:90:ce:eb:f2:d3:
7c:f9:45:45:c1:d9:47:d1:37:ae:4f:0d:41:17:4f:
fc:35:d8:02:8e:86:79:b4:49:1e:78:51:fa:13:a9:
f7:8c:37:65:4a:db:c8:9a:8c:42:7a:9e:2a:66:60:
7b:e1:64:2a:bb:40:6a:79:06:62:2e:2d:e7:84:bf:
e1:7f:45:1f:3d:54:55:e3:40:13:5b:ab:ad:10:9d:
51:d1:d9:f4:eb:b9:d3:7c:10:e0:08:07:38:16:84:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:75:38:25:04:13:36:38:D2:88:C1:CA:26:0A:C2:B3:13:5E:5D:04
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:36:f5:fc:58:24:0c:82:40:27:6f:f9:86:d4:3a:b2:2e:48:
f1:b8:e0:68:f8:37:39:6c:58:95:1d:59:8e:37:ea:76:79:45:
76:33:45:ec:a1:89:48:c1:66:4e:aa:08:42:e3:05:b3:57:9d:
0b:9c:9a:ce:80:db:b5:21:f6:7e:ec:5f:ce:1f:e5:d7:9e:a5:
da:88:18:1e:a4:3e:f1:01:03:b9:a8:71:d2:72:64:75:a0:0d:
b0:47:82:4c:0d:89:83:52:90:c2:26:9d:aa:44:7b:0a:b4:7a:
47:ec:a8:c0:84:e3:05:9c:6d:ff:32:d5:9d:68:81:d2:02:32:
24:f9:8d:b1:38:a0:f7:9c:c7:e5:8e:a6:51:d5:ed:d4:da:39:
21:52:43:ca:46:8a:10:31:77:72:e0:fa:70:5e:87:20:e5:99:
8a:37:74:15:ca:e6:4f:8c:58:68:19:17:08:8d:ca:43:a9:a8:
fb:91:60:49:0a:8c:7f:ed:c7:22:1e:c4:50:4e:30:79:86:b2:
36:64:4d:31:d2:3c:55:c5:96:01:1c:9a:7a:c5:f0:87:dd:24:
33:59:9f:cb:98:9a:89:39:bd:d3:92:dc:b7:51:07:ab:d5:3f:
75:0d:49:91:3b:b4:14:1b:28:89:2e:4c:90:59:ed:51:87:fa:
18:ea:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:06:11 2025 by rpki-client