Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
File: gXS2uiCeYit5ihT86qlEdi-nYpo.mft (raw, json)
Hash identifier: /RLER59S7bEXTrWn081ZYmbMMOJyx+9SRy6jt70ThkI=
Subject key identifier: 88:57:B8:93:86:68:90:FB:BC:A2:3D:C7:E9:FF:9E:64:2A:2C:B1:F4
Authority key identifier: 81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
Certificate issuer: /CN=8174b6ba209e622b798a14fceaa944762fa7629a
Certificate serial: 01976A05EDA7C9F9FB0C1DF73BACE7AC7145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
Manifest number: 4C
Signing time: Fri 13 Jun 2025 16:01:02 +0000
Manifest this update: Fri 13 Jun 2025 16:01:02 +0000
Manifest next update: Sat 14 Jun 2025 16:01:02 +0000
Files and hashes: 1: gXS2uiCeYit5ihT86qlEdi-nYpo.crl (hash: ZAsWh2voRzm17aGJXwfGeujFhNVTuTqyFG1escFIC7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ed:a7:c9:f9:fb:0c:1d:f7:3b:ac:e7:ac:71:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174b6ba209e622b798a14fceaa944762fa7629a
Validity
Not Before: Jun 13 16:01:02 2025 GMT
Not After : Jun 14 16:01:02 2025 GMT
Subject: CN=8857b893866890fbbca23dc7e9ff9e642a2cb1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:8d:ea:af:74:4e:8a:e8:d3:b8:39:dc:f9:
4b:92:29:55:ae:b4:a6:d1:eb:4b:59:fc:e5:6d:e7:
7a:11:fd:03:9a:e1:26:23:96:24:73:48:1d:16:88:
95:43:bb:e3:fd:b5:c8:11:a9:a8:18:13:b6:0f:49:
3e:b0:4f:8c:8e:8e:bb:f3:75:86:a7:6e:26:ca:56:
ba:ee:95:72:57:6a:56:93:9a:cc:3d:2b:34:b9:5b:
5f:41:e4:67:66:31:fb:d6:34:49:85:a8:2d:b7:0d:
5c:fc:4b:5f:79:8b:54:94:08:16:29:73:f3:87:df:
29:da:25:02:9b:3b:42:39:d5:b8:be:a8:56:b2:40:
65:57:01:fa:7e:75:17:34:f3:08:b3:27:a1:55:42:
3c:c5:fe:ba:d0:60:26:d3:91:95:60:20:b1:d0:79:
21:d7:62:f9:91:c5:db:ff:18:f8:8b:a6:87:3d:b2:
ef:04:d7:78:30:8d:0c:19:2d:a8:3e:5e:8a:eb:9c:
ba:87:ab:6d:e8:42:ed:d1:6f:a2:de:0a:d6:7e:6c:
56:a0:27:17:1e:67:74:dc:23:c7:5d:70:c4:5f:02:
57:67:a1:67:14:03:66:0d:d1:f3:6b:fb:7c:e6:c0:
17:4f:51:44:71:72:e0:23:f0:af:25:64:05:ed:93:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:B8:93:86:68:90:FB:BC:A2:3D:C7:E9:FF:9E:64:2A:2C:B1:F4
X509v3 Authority Key Identifier:
keyid:81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:e1:8e:a9:5d:81:7e:fe:0c:17:07:3a:d4:a7:f5:89:d1:
c9:32:b9:26:e6:3d:2b:6b:6f:44:21:71:8b:b7:49:12:00:73:
84:97:78:04:a8:61:36:61:66:1a:bc:d8:66:11:4e:ba:5d:57:
cb:ee:d5:e8:a4:c1:b8:f9:7c:c4:be:d0:85:0f:2b:1d:2f:2b:
96:65:ca:90:ce:0b:bc:c8:3a:10:c5:22:f6:53:6e:a2:7a:20:
77:84:4f:29:38:dd:b8:5f:b3:57:49:26:16:a1:be:16:f1:54:
ec:17:08:ee:28:41:16:a7:8d:1a:02:c3:66:1a:4c:bf:23:70:
2a:56:c7:82:1a:56:39:6e:76:30:37:32:20:79:57:8c:79:75:
a3:57:4b:3d:3e:93:dc:6e:c2:0b:a2:82:36:c9:82:8a:b5:a5:
5b:f2:1e:78:eb:4a:69:82:eb:ba:ff:0e:b6:a8:87:8b:e4:9e:
f4:d5:16:f1:7c:a6:8b:fa:ce:bf:e5:ce:76:f3:ed:f5:42:7a:
09:cf:3e:83:ce:cb:5b:52:bf:91:0a:4c:14:bd:a3:9f:a7:a2:
77:9f:05:91:ef:64:b1:8c:15:55:23:42:84:02:56:50:55:43:
3c:6c:01:14:3e:3e:b9:51:c4:77:bf:42:81:21:a5:bc:cb:75:
c4:43:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:53 2025 by rpki-client