Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier: 2bHv4N4vsMxtzRYmlsCBhMRkNFkx+KbOC850ohD93cU=
Subject key identifier: 57:13:5C:3A:64:06:AB:D4:40:B1:F1:76:B5:93:0D:FD:EE:3B:4B:8E
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial: 01976C99135F8D54F6F3A59C57647D553325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number: 0FBF
Signing time: Sat 14 Jun 2025 04:01:00 +0000
Manifest this update: Sat 14 Jun 2025 04:01:00 +0000
Manifest next update: Sun 15 Jun 2025 04:01:00 +0000
Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: HHOeIjEsjSQjMvj9g2Paaiv040Ssgo6s5CqSaELLf3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:13:5f:8d:54:f6:f3:a5:9c:57:64:7d:55:33:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Validity
Not Before: Jun 14 04:01:00 2025 GMT
Not After : Jun 15 04:01:00 2025 GMT
Subject: CN=57135c3a6406abd440b1f176b5930dfdee3b4b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:1d:b3:fb:c1:e4:bd:70:21:9f:4d:7e:00:
b5:32:e0:da:3e:83:43:71:8c:c5:8b:c5:6c:5c:5d:
28:c6:e7:e9:53:c4:fc:b7:93:38:3d:a6:38:2e:2f:
94:6f:f4:ed:15:36:c3:ae:40:21:36:30:0f:69:e0:
03:0a:d2:6c:f4:b1:8f:a9:9a:cd:96:dc:f1:2e:f6:
5c:53:21:11:fd:ef:e3:e2:04:12:f1:b2:0a:c3:2b:
89:7e:b5:37:cc:e9:64:aa:a6:b9:92:46:da:b7:2b:
94:b8:d2:eb:4e:46:f1:31:26:63:50:c4:1e:db:26:
59:8f:09:5e:7e:d8:ec:96:d1:7e:46:59:06:5f:8c:
0d:d3:00:ec:53:59:0b:6b:9b:ba:c6:b7:c5:2f:81:
81:f2:09:31:4e:c9:86:a4:c9:91:89:d2:b7:84:56:
da:79:e5:a4:25:69:8c:ba:f2:08:21:e2:96:3a:bb:
f2:e5:ea:24:7d:e3:98:35:4b:f6:9b:ec:9d:f9:cc:
8e:fe:68:cd:f3:da:76:7f:96:dc:5f:17:30:ae:74:
cb:cd:e4:7a:86:b3:29:f2:f9:b0:0a:c4:a4:62:24:
34:98:a3:96:43:c6:80:3d:04:75:b5:24:27:58:0e:
fb:66:80:43:20:e2:a7:05:14:e3:4d:d8:07:d6:cb:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:13:5C:3A:64:06:AB:D4:40:B1:F1:76:B5:93:0D:FD:EE:3B:4B:8E
X509v3 Authority Key Identifier:
keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9b:3a:b4:8a:61:ba:4c:e7:df:e7:c7:8d:28:e6:28:d5:95:
02:8e:7e:47:e4:9b:72:74:99:6c:74:f4:97:45:b7:5d:84:bc:
2f:33:59:35:85:78:57:f0:18:3c:a7:7f:17:1e:a0:a3:76:72:
dc:50:8a:a4:83:e0:c8:a4:95:fc:e7:a9:9d:ce:b4:18:41:27:
5b:e6:fa:8a:59:0d:5a:31:e3:3c:75:8d:87:a5:b8:28:75:18:
66:ca:a0:ac:8b:11:71:f6:4c:9d:3d:23:98:76:fe:3b:c7:82:
59:5a:2c:e5:d7:83:f4:96:fa:96:eb:78:ab:a7:29:69:2a:90:
b9:2b:43:02:2e:3b:0f:db:5f:7d:41:c2:2f:bd:f3:6a:68:c3:
56:1e:76:b5:0f:20:ca:8e:28:fb:2b:06:c2:61:c2:09:34:68:
17:7d:ae:e5:be:cb:05:86:b7:d2:a5:b0:38:90:03:81:5c:c8:
32:8f:09:3d:b4:b1:bb:1c:71:8e:bc:78:29:6d:6a:8f:17:86:
fe:6a:1a:1d:c0:c4:c4:8b:26:e2:bd:b2:a2:be:f2:28:cd:ef:
b6:a2:d8:cf:0b:f1:74:33:41:0d:ca:17:6b:47:f8:24:4f:d2:
69:43:17:5e:73:e3:a5:3a:f0:8a:80:b3:fe:45:22:90:83:a6:
c4:95:5c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:28 2025 by rpki-client