Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft
File: G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft (raw, json)
Hash identifier: +qmRhkoIYMILAlWy3znHihrwEdWyKatPgeVjNAYmnig=
Subject key identifier: 16:74:7E:08:C9:69:7C:5A:1F:23:56:83:9C:AB:A1:32:36:94:94:82
Authority key identifier: 1B:69:30:1F:A8:D7:88:E0:2F:7E:B2:FA:88:02:10:90:74:20:6C:FE
Certificate issuer: /CN=1b69301fa8d788e02f7eb2fa8802109074206cfe
Certificate serial: 01978A3608E594D1CAD98D0869C022F38E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft
Manifest number: 0144
Signing time: Thu 19 Jun 2025 22:01:26 +0000
Manifest this update: Thu 19 Jun 2025 22:01:26 +0000
Manifest next update: Fri 20 Jun 2025 22:01:26 +0000
Files and hashes: 1: G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl (hash: xPuotIJdfgIUV058XzaShH3A3SfVGz4w8OWVv1wtaRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:36:08:e5:94:d1:ca:d9:8d:08:69:c0:22:f3:8e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69301fa8d788e02f7eb2fa8802109074206cfe
Validity
Not Before: Jun 19 22:01:26 2025 GMT
Not After : Jun 20 22:01:26 2025 GMT
Subject: CN=16747e08c9697c5a1f2356839caba13236949482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:76:9b:0e:3e:20:c9:c8:5d:bf:d3:fc:12:
9b:b0:b8:1d:db:9a:ed:58:42:11:22:6d:bb:78:e0:
c3:3a:e1:e3:2e:ff:0c:87:e1:04:4b:96:03:15:32:
d3:af:ff:1a:52:10:ac:22:79:50:3f:49:7f:0a:af:
d2:46:28:5b:78:23:42:90:ea:d6:87:8e:dc:77:0b:
25:81:ba:25:5c:7b:ca:8f:01:ca:a1:97:c9:78:ab:
66:a9:8e:c4:fb:ba:a4:3a:0d:b0:f5:d5:6b:bf:dd:
fb:82:ab:ed:e4:a5:fd:c2:f4:d0:fe:1a:49:3d:4a:
2d:1d:89:aa:87:02:1b:79:36:d7:7a:16:a2:e4:45:
ae:87:1a:3c:25:68:9f:d1:41:63:ed:91:fd:18:d0:
a3:37:03:78:0f:67:56:4a:95:d2:29:6d:78:1b:2f:
45:ee:c6:95:29:06:f2:eb:0d:fc:b0:9b:19:53:28:
5f:fb:1d:15:10:75:58:1a:b8:f1:8e:4f:3e:bb:45:
d0:86:37:ae:7c:c9:8d:e6:09:77:5c:27:7c:e7:2c:
6f:3b:16:d8:d4:2f:4b:65:e8:33:d9:7c:8a:84:30:
ad:39:88:72:e3:c3:c5:19:4e:1d:8c:cf:fd:c5:68:
67:4e:52:5b:36:f6:71:fa:6c:fa:c4:89:ea:d5:cd:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:74:7E:08:C9:69:7C:5A:1F:23:56:83:9C:AB:A1:32:36:94:94:82
X509v3 Authority Key Identifier:
keyid:1B:69:30:1F:A8:D7:88:E0:2F:7E:B2:FA:88:02:10:90:74:20:6C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2kwH6jXiOAvfrL6iAIQkHQgbP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5d728a-93da-480b-a735-416c28798fe2/1/G2kwH6jXiOAvfrL6iAIQkHQgbP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:35:48:5f:f6:74:ac:67:b4:f6:52:eb:33:c0:28:8a:4c:9c:
ed:1a:5a:66:81:9f:70:0c:84:a5:37:37:27:10:15:12:22:ad:
60:56:0f:0d:53:56:d6:f4:92:c1:44:ba:49:66:fe:ed:c1:83:
16:3c:17:38:c2:97:51:f3:27:c8:af:d2:dd:6a:30:75:95:f2:
68:32:ba:53:4a:9c:bc:94:72:a0:e5:98:e8:7c:70:88:7b:69:
3f:c2:c5:c0:17:dd:33:67:9c:8a:a7:43:c5:98:4b:94:56:3c:
de:f2:c6:da:ac:87:6f:05:c8:56:94:b8:ca:89:05:17:13:b4:
1b:27:69:32:d4:2c:4a:09:28:54:ea:69:cd:d9:de:df:b7:c4:
07:07:21:d1:c8:80:e9:ec:06:d8:34:60:bd:85:31:42:df:27:
8f:e7:97:29:99:d5:c3:e3:d6:c0:fc:2f:b2:2c:9d:c5:c4:15:
01:01:9f:0e:82:83:e1:06:1f:b9:14:75:f1:16:2d:b0:e0:c2:
01:ab:82:fa:d7:b5:a5:30:c3:d8:eb:b9:12:40:49:ac:46:cd:
c9:27:dd:43:18:1e:cf:71:3a:33:08:65:9d:e0:f8:ae:9f:c3:
ac:98:e1:6a:69:37:8f:49:18:c2:e5:9e:7f:ea:e9:f4:0b:37:
6f:fd:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:54:48 2025 by rpki-client