Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File: GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier: MOYhU4qJNh51m5v2H0g3xu34RBOPlAzu0jNxWec/90c=
Subject key identifier: 76:96:85:BF:0B:63:6E:5B:09:A6:88:87:1C:3C:3A:6D:42:D8:9C:DC
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer: /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial: 01976BBD7D94AC75684FB9020A2CCCA0CB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number: 0CEC
Signing time: Sat 14 Jun 2025 00:01:09 +0000
Manifest this update: Sat 14 Jun 2025 00:01:09 +0000
Manifest next update: Sun 15 Jun 2025 00:01:09 +0000
Files and hashes: 1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: fA6sxHldurH5usRL4kPOykJZolL2R+S2awQwKl9Fhe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:7d:94:ac:75:68:4f:b9:02:0a:2c:cc:a0:cb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Validity
Not Before: Jun 14 00:01:09 2025 GMT
Not After : Jun 15 00:01:09 2025 GMT
Subject: CN=769685bf0b636e5b09a688871c3c3a6d42d89cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:6c:26:bd:f0:b0:eb:16:5c:51:38:ab:d8:
57:6d:a1:99:c9:19:1b:eb:aa:0a:69:04:6e:f0:1a:
44:db:c4:19:77:08:50:76:11:4e:7b:6d:41:1c:2f:
21:0f:c6:b6:4f:0d:83:f2:c2:79:bf:1d:31:22:b8:
98:5a:8c:af:fb:f6:bd:16:25:46:73:64:94:f6:12:
91:8e:19:c4:bf:dc:39:c2:57:e0:eb:47:10:5b:78:
cb:fb:ea:24:2c:49:5a:0b:28:57:49:b5:da:16:53:
b8:f5:33:3c:d4:92:62:1d:df:3c:54:9b:58:f6:70:
ef:d1:cf:ae:ed:3b:65:42:9e:a1:17:0b:2b:77:6f:
f9:8b:35:c8:e0:8a:49:81:19:44:17:92:b6:53:85:
1c:8e:19:f1:39:ec:60:8d:e8:0c:72:4e:fa:a8:37:
cc:63:df:07:0d:21:82:6b:f7:d0:d5:a0:fc:31:d0:
84:8f:91:b9:03:78:2c:09:86:89:0f:d7:10:cc:df:
4f:cc:c6:1d:d2:cf:80:83:80:02:28:29:6e:e7:bb:
44:f2:ef:48:d8:a4:65:c0:2d:81:08:89:f9:a0:88:
67:58:82:53:cd:49:33:12:20:b2:24:c2:14:c8:14:
e7:4b:79:87:32:aa:b5:c6:f7:3e:5e:ba:a7:8e:96:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:85:BF:0B:63:6E:5B:09:A6:88:87:1C:3C:3A:6D:42:D8:9C:DC
X509v3 Authority Key Identifier:
keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2d:e5:10:ea:17:c1:5d:3f:53:42:d6:28:bd:fa:d8:49:4e:
ee:98:03:6f:e2:e7:7b:a2:37:61:80:13:07:40:68:6e:24:22:
5e:cf:d2:ee:6d:c3:7f:45:45:95:b1:35:19:0b:e3:0c:ae:4f:
3d:22:c5:51:5c:18:c1:4d:88:18:71:d7:c9:a5:4f:b8:86:0d:
41:8b:d5:c9:78:f0:b4:17:fe:ac:22:f2:f1:37:d3:bd:71:4f:
a1:58:5d:86:b0:db:61:e4:81:2d:c8:b8:a4:cd:92:d1:6c:2c:
f5:11:08:a8:6f:aa:0e:33:21:97:8f:88:b8:9d:1c:0f:ee:c0:
ad:c6:b6:a2:34:2f:be:02:c7:5f:07:a0:9f:b4:81:eb:10:97:
ef:f8:f1:75:17:18:2d:80:45:c9:8f:16:c6:8a:e4:a9:d0:1a:
e3:56:2b:c0:3c:af:1d:fe:de:ca:c4:7d:8a:d1:84:1d:1b:98:
f2:71:8e:0f:35:69:6d:57:43:7c:44:af:81:eb:6b:11:91:1f:
ec:b6:ea:4d:d5:1b:86:28:9a:c3:90:6b:c7:63:46:4b:4e:20:
d1:27:5a:f3:fa:92:9c:97:80:32:71:cf:2b:04:d5:47:d6:7a:
74:d6:5e:4b:7b:13:54:3b:06:21:af:c9:f1:91:e1:f6:ef:42:
68:5a:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:55 2025 by rpki-client