Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: 0CjJG6ZAsSAK3UwYuE+M5fj3cVURttBPu1oNzZNVt+o=
Subject key identifier: 80:9F:E6:27:BC:AB:8B:AB:F0:D7:BE:DD:86:BC:16:3F:3D:BB:A2:54
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 01976C986CE7E7EA024495DEE22BFAF34433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 14CD
Signing time: Sat 14 Jun 2025 04:00:18 +0000
Manifest this update: Sat 14 Jun 2025 04:00:18 +0000
Manifest next update: Sun 15 Jun 2025 04:00:18 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: vJzmGXUUPx3to4rMV/NF0gaC0T9WzMbhapXCXL8xoe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:6c:e7:e7:ea:02:44:95:de:e2:2b:fa:f3:44:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Jun 14 04:00:18 2025 GMT
Not After : Jun 15 04:00:18 2025 GMT
Subject: CN=809fe627bcab8babf0d7bedd86bc163f3dbba254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:c0:7f:21:a7:5a:54:b9:d1:29:64:da:83:
32:7e:8f:25:bd:dd:c6:5c:86:c7:93:df:62:b4:9d:
df:ec:89:c7:97:22:08:9b:ed:e9:35:12:ff:2a:bf:
54:d0:79:a4:7f:1a:fb:6e:9d:21:4e:f0:21:8c:6e:
61:ce:a0:6b:c4:ea:53:e6:26:07:78:84:30:41:81:
d7:74:7d:d2:72:f0:f8:b3:38:44:bc:10:0d:fd:c3:
bd:1a:2f:1b:6f:3a:46:f7:c8:23:05:bb:9d:ee:42:
0e:cf:5b:6e:51:07:9f:f5:78:97:54:0d:dc:bf:66:
be:17:c3:42:28:39:c6:eb:78:e9:ad:d7:41:4a:72:
7c:f2:5b:00:6b:9d:69:41:dc:30:6c:d2:29:8f:e8:
a5:39:d5:33:ea:24:54:87:48:13:89:95:29:98:e0:
5c:a3:19:43:f9:c5:1e:e8:3b:c0:26:37:75:cd:d9:
02:fc:3a:55:d0:3e:53:04:b5:b4:7a:eb:0d:6b:7e:
37:70:be:07:32:89:c7:f4:2e:dd:a0:ce:17:75:08:
81:a8:b2:9b:40:5f:02:2b:1e:99:07:ff:92:8a:55:
69:dc:11:12:4a:3d:24:45:fc:46:15:f3:14:60:a8:
25:45:be:52:8e:ba:7c:e0:fe:87:23:f2:fe:46:ed:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9F:E6:27:BC:AB:8B:AB:F0:D7:BE:DD:86:BC:16:3F:3D:BB:A2:54
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5b:21:61:ae:da:54:3a:77:41:03:3d:91:4c:5e:1e:fa:19:
d5:cc:7a:36:19:b6:e8:3a:7d:f0:ec:cf:4f:b0:a3:e3:67:d4:
b6:d8:df:e4:dd:30:f8:96:51:2c:75:94:a8:cd:f8:a2:54:28:
ea:57:dc:74:46:6e:67:88:1d:87:90:93:bf:19:f4:d1:b0:f9:
fc:35:e0:2d:12:01:ea:e9:2a:ce:91:53:bd:9e:e2:b8:f5:c0:
d3:08:e3:fc:f7:1c:6e:ba:70:ec:9b:bf:26:4f:f4:35:a4:cc:
fd:bd:33:cf:5a:73:08:6d:e8:2b:ed:0b:d9:db:85:52:4d:0b:
5f:a7:59:25:12:4c:87:1a:06:c2:03:9a:59:ad:b7:23:76:4a:
bf:7d:51:5b:b1:02:f9:02:fa:5c:b5:dd:71:19:86:ea:09:57:
08:8b:5a:7f:37:26:65:f3:6c:61:10:a7:1b:20:02:63:2b:86:
5a:69:28:86:3b:6f:73:9f:30:89:60:fe:0e:00:ca:c6:fd:14:
ce:41:51:cb:b8:9e:9c:1e:5b:08:53:78:ce:c9:22:35:a8:fb:
d9:54:ad:92:69:23:8f:11:b0:a3:bb:e7:d5:50:44:63:e8:37:
60:ed:b9:83:49:f3:21:15:4e:0e:a7:8f:af:9e:aa:c1:e9:c9:
5d:e3:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:47 2025 by rpki-client