Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier: 5vKs9rLmCxN8f4qick40YRUHFdA/KyDHbNsXu9U0kLw=
Subject key identifier: 6F:EC:68:FE:01:D3:EB:9F:A6:99:48:FB:47:6C:25:68:BC:0C:5A:A6
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial: 019895252B1653B46AF6686C040F71BB713F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number: 1517
Signing time: Sun 10 Aug 2025 18:01:37 +0000
Manifest this update: Sun 10 Aug 2025 18:01:37 +0000
Manifest next update: Mon 11 Aug 2025 18:01:37 +0000
Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: OrhmX0kUUxAZOkZrloRUuQ6YOI4C4Aw3aF3SPVE8/b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:2b:16:53:b4:6a:f6:68:6c:04:0f:71:bb:71:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Validity
Not Before: Aug 10 18:01:37 2025 GMT
Not After : Aug 11 18:01:37 2025 GMT
Subject: CN=6fec68fe01d3eb9fa69948fb476c2568bc0c5aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:b9:da:3c:64:5b:92:e5:22:d7:f5:f4:1c:
fb:c4:db:0e:d9:7d:e8:5c:aa:a0:4b:6b:e6:46:c7:
fa:cb:8c:fa:c9:af:1a:dd:d2:b2:61:0e:f6:50:35:
76:0c:eb:83:6f:48:79:4e:dc:cb:62:e8:f3:88:0c:
df:9a:80:7f:8a:f7:33:95:fb:ea:0d:49:63:67:53:
53:53:2b:3a:aa:24:2e:77:1d:05:0a:a7:2c:84:26:
3b:e2:0e:55:ed:d3:c9:68:a4:6a:a9:f1:30:7b:05:
9b:86:cd:a3:4c:54:24:ef:36:99:93:78:02:cd:0a:
0b:33:dc:de:40:40:19:2e:3f:e0:99:4f:c6:5c:de:
c2:e9:23:a0:e6:d8:34:0d:bb:51:7a:2b:4a:1d:3f:
74:c2:d3:65:e3:cd:1f:68:a6:c0:b7:90:85:4d:f5:
06:e0:eb:c8:5e:d5:2e:f2:cb:ab:a9:68:a4:ea:b5:
d0:e7:f7:a0:dd:50:c4:b0:d4:ce:51:d0:e8:64:10:
bf:e7:40:33:46:98:88:ad:48:b0:44:9d:f3:66:9b:
09:f9:e7:c4:13:75:d4:84:23:86:c6:cb:4b:48:07:
d5:1d:6f:47:18:b4:6c:f0:df:53:83:09:1b:f4:f3:
5c:ce:f6:7f:0e:fe:f7:cd:c0:b2:b1:34:e1:be:cd:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:68:FE:01:D3:EB:9F:A6:99:48:FB:47:6C:25:68:BC:0C:5A:A6
X509v3 Authority Key Identifier:
keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9d:40:6f:e1:44:4f:8f:cc:36:75:b2:b6:57:88:83:8f:6a:
79:02:3a:9f:8a:58:2e:27:e7:ff:fb:56:f9:18:49:17:47:e4:
14:92:93:2d:27:fe:8e:05:59:69:d3:86:5f:48:07:8c:a6:d1:
76:6a:c1:96:8b:cc:fd:9b:25:fb:05:69:6f:8e:c1:67:9d:43:
b3:85:74:02:ce:27:10:25:c9:b1:e0:d0:2f:74:5b:7f:c1:57:
c0:86:ac:8c:f4:cf:bc:f5:ec:72:19:a0:68:9c:a7:24:4f:93:
2e:c5:7b:90:93:29:eb:a5:79:4d:e6:39:d4:dd:54:9a:11:f8:
7a:b8:7f:c9:e4:bf:5d:86:db:72:da:a7:93:ee:cc:5d:73:b8:
8a:f7:76:e3:dd:a2:ea:da:ec:3e:db:dd:33:f1:80:48:1c:90:
77:08:ef:9c:71:85:0c:bd:c8:59:8e:06:c9:21:e1:e1:2f:36:
e1:a3:5f:90:d4:1b:87:53:00:34:2d:95:da:92:e7:fc:14:5c:
d3:f3:15:4b:0e:71:65:84:6b:25:a2:4b:dc:8c:11:2a:96:a7:
4d:1f:52:ce:69:cc:fe:9c:a1:0f:49:cf:41:31:67:39:61:f7:
8a:d2:b5:0c:bc:98:db:bb:5f:64:49:c6:f7:15:4a:06:03:f3:
46:1a:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:41 2025 by rpki-client