Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: pPbK1wkCEnV38Zitjmm+qOHIRIHOZidnaF2qvJJ5Moc=
Subject key identifier: 6E:C8:85:AD:FC:ED:CD:CE:F7:1A:79:7A:51:54:EF:57:F0:4D:E8:DC
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019768BC1FE28498F5AAC65572E4E48441E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 04D4
Signing time: Fri 13 Jun 2025 10:00:48 +0000
Manifest this update: Fri 13 Jun 2025 10:00:48 +0000
Manifest next update: Sat 14 Jun 2025 10:00:48 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: 55T08DHkKYZuP9PoW2FchM7t4m9S4PPHuLDOR5PJGj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:1f:e2:84:98:f5:aa:c6:55:72:e4:e4:84:41:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Jun 13 10:00:48 2025 GMT
Not After : Jun 14 10:00:48 2025 GMT
Subject: CN=6ec885adfcedcdcef71a797a5154ef57f04de8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:dd:ba:00:bd:7d:14:18:e7:f1:cf:c4:aa:
54:bc:28:d7:88:9a:bb:08:4d:f3:79:5f:83:e0:2c:
62:be:bb:72:7a:ab:41:65:9c:fa:d7:28:50:86:9f:
39:06:cf:86:57:de:e4:ec:90:a1:b6:87:3b:dd:a6:
0b:38:63:7f:58:64:65:e2:a8:4f:bc:94:c1:6c:93:
30:e9:9c:9f:2e:ef:40:b5:eb:20:be:99:8b:2f:28:
08:af:26:4a:a0:68:39:07:ce:b3:4f:7f:62:e0:a2:
64:e0:f6:81:e7:24:88:03:03:b8:8c:a7:8a:82:7e:
63:1f:d1:07:7c:2a:ce:9b:c2:f7:6d:04:d3:b7:84:
23:30:6c:ab:88:32:55:37:86:f6:9a:76:63:52:75:
fe:19:20:15:56:ef:07:ed:5b:f3:38:cf:16:a2:1c:
fc:bf:1d:18:17:97:48:b3:09:6e:22:04:77:79:5b:
1a:88:b4:ba:8d:b7:3f:48:9f:43:66:69:cf:be:04:
df:db:c4:40:f8:89:2f:11:dc:3f:9a:fa:0c:a8:97:
63:de:cb:5f:e5:9d:c4:55:1a:f9:72:9f:ca:c6:24:
b5:da:7b:fb:70:21:af:79:f1:09:90:99:af:1a:4f:
e9:27:82:26:8f:40:16:ee:5c:e7:6f:90:b8:6d:0d:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:85:AD:FC:ED:CD:CE:F7:1A:79:7A:51:54:EF:57:F0:4D:E8:DC
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:5e:a9:1a:7d:01:87:39:5a:b6:10:f0:fe:1d:b4:f4:74:24:
38:95:1e:a2:2b:42:da:de:1f:8d:29:7d:da:64:8e:de:54:67:
54:cc:e3:cd:0b:4a:cc:cc:21:c6:ce:77:7d:b2:39:dc:98:47:
31:53:ba:33:10:f8:75:21:5e:a6:13:ac:54:08:ae:0c:d9:a7:
c6:18:be:c1:fb:4f:02:b7:6e:2e:ec:5c:db:8b:3d:98:3e:8c:
75:d9:3f:f9:c5:77:28:d8:7c:6b:71:db:ec:09:4a:b7:58:cc:
a0:69:86:3e:51:61:06:a1:ee:83:da:1d:b7:9f:a7:9a:3b:9d:
01:9f:a3:0c:a9:da:a3:47:fd:cb:43:47:91:ad:3b:42:d3:ae:
c3:37:da:c3:66:57:f3:1a:d3:95:47:23:c5:51:a0:c6:0f:35:
9e:5e:75:5a:c7:92:c1:04:76:60:d3:fc:ca:5c:85:df:47:59:
db:c0:d9:79:f7:9f:d0:91:7d:dc:52:f7:84:9f:75:01:06:f7:
45:9e:e2:c3:8e:39:16:ef:62:2d:3f:ec:70:7e:c9:43:59:dc:
23:b4:23:01:c9:8b:d4:28:18:ab:41:09:c3:e6:15:c9:e6:07:
58:09:79:0b:03:bb:3d:20:85:bb:1b:b1:e7:6d:85:ec:81:74:
0b:9a:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:34 2025 by rpki-client