Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: KdthmzGR9/2Qk2e3A1jGBf1J9CKP15OLK7iT4gdYvbA=
Subject key identifier: D4:29:E6:6C:77:50:F4:B5:F7:CD:3B:39:6D:F0:FE:DC:18:39:03:7A
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 01977AC25B0B518677EF21533F83EA38CA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 22:00:46 +0000
Manifest this update: Mon 16 Jun 2025 22:00:46 +0000
Manifest next update: Tue 17 Jun 2025 22:00:46 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: NMQZoCZBG0pL+WngoHh4eAiQgBHV6Skve48dRBeIpdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:5b:0b:51:86:77:ef:21:53:3f:83:ea:38:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Jun 16 22:00:46 2025 GMT
Not After : Jun 17 22:00:46 2025 GMT
Subject: CN=d429e66c7750f4b5f7cd3b396df0fedc1839037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:f2:93:fb:5c:67:70:08:2a:75:f4:d7:f5:
f5:91:6b:c8:a2:a3:76:ed:d3:52:47:cb:78:80:27:
e9:d0:98:ff:09:2b:7c:71:f8:3e:10:44:86:6f:16:
41:e8:bf:c8:5c:64:f7:f5:c1:b1:8f:74:6f:92:6d:
f4:c1:59:7e:1a:c2:bd:0d:73:1c:4b:b7:4d:30:be:
34:9c:de:7a:ca:23:c0:78:3a:8c:23:a6:06:0e:3c:
76:4b:be:fd:6a:88:32:43:7a:eb:c0:a0:84:3c:87:
09:76:88:9c:a6:54:94:c1:0e:2d:b9:12:f8:66:10:
2c:20:eb:61:54:67:f4:13:4e:b8:15:58:56:52:0c:
14:bb:db:fb:43:cf:bb:46:92:0f:04:2e:e2:c5:24:
f1:f8:21:91:77:76:d0:5e:65:28:01:f7:59:d9:2a:
ab:ef:b6:94:49:25:8b:d0:cf:b7:21:fc:42:96:51:
28:45:9a:8a:ec:21:69:f1:60:ef:e5:86:2c:2b:d7:
46:08:a3:ab:db:5d:8a:11:dd:81:6c:c4:09:39:64:
fa:87:a8:3a:9b:95:a2:d1:10:0d:00:ab:cf:68:f9:
50:f4:f1:45:51:7b:30:ee:cc:c5:a7:66:ac:9f:01:
b0:55:ce:a3:5f:c6:57:a5:8b:5b:5e:c6:65:42:6b:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:E6:6C:77:50:F4:B5:F7:CD:3B:39:6D:F0:FE:DC:18:39:03:7A
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f4:d7:8a:99:17:66:35:30:c0:73:b8:2e:87:d1:d8:e4:29:
23:ab:6e:f6:d3:90:30:97:51:71:d6:ca:c6:66:a6:9c:50:20:
55:4e:58:5b:b9:83:5f:24:78:3b:a6:ab:e5:4d:82:56:f5:07:
e6:4b:93:40:95:d4:11:8d:0a:a5:a4:47:44:f9:a8:8e:29:ca:
43:5b:3b:11:b1:01:6c:46:27:e1:30:5c:b8:0c:5e:49:d8:02:
22:8e:e4:f3:48:66:6c:6b:cd:60:7c:25:e6:e4:a3:d6:a2:52:
0f:49:84:8f:ed:c2:57:97:da:13:00:5b:5b:29:aa:5f:a0:4f:
29:67:14:ad:08:20:4b:2e:3d:e2:76:01:fe:18:69:95:1c:4a:
c1:78:95:0b:ff:70:0b:9b:b0:e4:cb:5b:de:1a:af:8f:51:30:
67:42:75:5a:dd:34:04:ef:bc:49:af:46:87:5b:91:d7:86:9e:
ae:64:d4:5c:b6:b2:ba:77:82:01:5b:25:e3:e2:11:09:21:fa:
d7:b5:89:8b:78:88:95:e8:d6:db:b9:ea:04:a9:e4:bb:dd:cb:
89:42:8e:8d:fe:4e:b0:3f:bf:79:c7:cd:1a:53:85:13:8d:fd:
9c:a2:b8:8c:f9:e5:c2:40:3e:d6:30:17:24:1a:0e:6f:b1:86:
1c:c8:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:22:56 2025 by rpki-client