Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
File: _gG0rfO5SE6VdhmUdLIbtCXgWvI.mft (raw, json)
Hash identifier: QQD3xm8rZxi4qe09C88g0sGpRnKOxc7+xW/HwYPim9I=
Subject key identifier: F7:42:E7:9E:4C:8B:2F:67:17:D5:CD:1D:F7:CF:19:05:25:E5:B1:2E
Authority key identifier: FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
Certificate issuer: /CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Certificate serial: 0197711B282E92660B1F728967669B40000A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:01:34 +0000
Manifest this update: Sun 15 Jun 2025 01:01:34 +0000
Manifest next update: Mon 16 Jun 2025 01:01:34 +0000
Files and hashes: 1: _gG0rfO5SE6VdhmUdLIbtCXgWvI.crl (hash: vZFoXrUJ17ltUxz4ValIL2PmyUD5TEyjogpGSNX0Q28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:28:2e:92:66:0b:1f:72:89:67:66:9b:40:00:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Validity
Not Before: Jun 15 01:01:34 2025 GMT
Not After : Jun 16 01:01:34 2025 GMT
Subject: CN=f742e79e4c8b2f6717d5cd1df7cf190525e5b12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:0e:c2:61:53:e3:49:d3:ae:a1:63:f5:fb:
0b:4b:a3:a7:38:57:1e:91:55:6e:37:1a:56:7c:73:
e0:c0:e2:57:be:fa:db:7a:f4:e3:d7:c1:62:39:54:
8f:a2:64:89:22:2a:b6:af:c3:89:17:84:e1:b2:3a:
5a:f1:4e:5d:60:6f:95:5a:45:24:25:09:99:10:70:
a9:0a:e7:4c:86:db:44:46:e5:c6:e1:65:7f:d6:b6:
b7:38:92:0a:53:d0:ec:19:09:f1:54:b8:81:c6:f1:
01:86:8e:e3:67:ba:c3:81:3f:8c:85:de:a4:e0:5a:
f0:7d:41:1f:61:a0:cf:a9:86:f9:2f:b3:7f:c6:36:
aa:c3:74:58:00:e0:dc:55:b3:68:16:77:6b:a3:81:
a9:1b:95:70:1d:b6:78:b2:8d:65:50:58:01:e6:21:
dc:f2:ba:cd:0a:bf:b2:be:32:37:64:c0:fc:9d:e7:
35:b3:18:e8:f1:fb:d1:2b:d7:ea:9a:68:b3:79:f2:
1d:de:8d:b5:d8:19:64:89:12:ca:72:d8:7e:98:a3:
c7:78:98:bf:f3:59:d1:e9:57:24:70:e8:a2:b7:37:
96:7f:d9:e1:ae:70:ad:cc:49:f1:d3:f7:b1:f0:24:
77:51:2b:29:87:cd:f5:04:34:e8:15:82:48:a1:cd:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:E7:9E:4C:8B:2F:67:17:D5:CD:1D:F7:CF:19:05:25:E5:B1:2E
X509v3 Authority Key Identifier:
keyid:FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:12:07:04:cc:b1:ba:d8:24:7e:4e:9f:c8:90:28:23:c9:f5:
94:cc:ec:1d:00:fd:b1:c2:0a:50:58:da:9a:8e:15:72:3b:01:
11:57:ca:90:a6:53:3c:d7:b4:37:00:66:c6:e8:8d:ba:c9:5d:
2e:49:13:d0:30:1a:1b:20:42:33:ff:76:2c:c2:26:fe:ae:97:
57:b9:97:cb:25:99:41:00:d2:af:a3:03:05:6e:aa:8e:f8:78:
d6:58:b2:69:04:18:01:50:d8:36:7c:b5:44:aa:6c:93:46:36:
8c:eb:0f:89:de:24:03:1d:95:59:96:94:76:b0:f3:04:62:f8:
1b:45:dd:18:6e:99:f6:25:a4:7c:cc:76:ee:5e:f7:27:b2:88:
f2:a6:09:35:37:23:35:e3:57:3d:16:e5:82:f0:43:5e:bf:66:
d5:ed:d3:ed:49:a7:5e:c7:48:3d:a5:37:3f:35:0f:0e:97:f1:
3d:3b:7b:90:ae:ed:93:8b:f8:06:30:c5:03:18:e7:ed:e6:a4:
a6:5f:82:b1:68:b2:fb:69:6e:31:19:4c:7c:25:e6:bf:9a:74:
af:8a:b7:c0:51:c7:4b:13:68:8a:b9:38:72:86:67:ef:af:3a:
f2:f8:e9:da:42:38:e0:e0:5f:4e:24:94:e4:25:81:19:19:55:
ce:c6:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:09:32 2025 by rpki-client