Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: UXjS/JJXym/UkdavcOmzeiBW2M4hNHDe/UnFSeOcm+4=
Subject key identifier: 6F:BC:00:80:32:A0:01:42:2E:0E:2A:DD:44:4F:E9:88:E6:76:AD:2A
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 01977AC24E8F0D106807929B9F104AC533DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0CF6
Signing time: Mon 16 Jun 2025 22:00:43 +0000
Manifest this update: Mon 16 Jun 2025 22:00:43 +0000
Manifest next update: Tue 17 Jun 2025 22:00:43 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: 8X3jOFrKUV+HjP7466tgqCqO45TQ+HT7sWhAiuIs4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:4e:8f:0d:10:68:07:92:9b:9f:10:4a:c5:33:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Jun 16 22:00:43 2025 GMT
Not After : Jun 17 22:00:43 2025 GMT
Subject: CN=6fbc008032a001422e0e2add444fe988e676ad2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e2:94:f0:2e:15:17:50:e6:94:f9:bd:30:53:
f7:8f:19:bb:93:8e:bb:ae:18:3f:5f:66:6a:c0:8b:
cb:8f:7d:d9:26:0b:db:ba:94:9c:44:14:5d:56:5a:
b5:72:f2:ef:c2:6e:ae:1e:70:86:16:9e:13:08:10:
24:80:57:24:0b:19:cf:05:d8:36:6e:53:23:27:dd:
7b:cd:86:41:57:03:aa:25:c3:3b:66:45:b5:e9:b3:
8c:b8:b8:44:c3:17:de:4f:37:8f:cc:ee:ed:59:8d:
90:80:26:0c:cd:40:d2:e0:e6:ba:21:f7:20:ac:be:
a0:60:55:0a:63:2a:c7:6b:c0:a8:00:1c:83:bf:46:
a1:c6:61:f6:f4:c5:10:dc:0f:23:c7:9c:7e:aa:96:
c8:f5:22:24:2d:b1:e5:02:f1:a5:91:d2:c0:73:75:
dd:73:6b:95:8a:5f:68:b9:52:77:79:87:af:0b:54:
b8:f8:a8:0e:75:73:59:29:b1:c7:a2:fd:0e:f6:90:
fe:f0:02:9c:7e:58:32:5f:02:e0:30:23:68:a3:c9:
e6:6f:0e:99:52:69:3b:ce:28:21:e2:74:2a:a7:6d:
99:08:68:92:2c:ca:ea:7e:8b:cb:36:c1:db:07:94:
3b:f9:41:8e:e1:db:e4:0e:ca:1f:02:9b:84:4a:01:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:00:80:32:A0:01:42:2E:0E:2A:DD:44:4F:E9:88:E6:76:AD:2A
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b0:63:73:b7:69:1e:29:4d:73:58:20:e2:4f:66:f2:7c:d0:
23:0f:d7:cf:a4:25:1b:21:56:71:77:b0:a1:61:49:8f:63:a6:
5d:80:2e:19:18:3d:0c:92:fb:31:78:91:96:e3:63:85:19:ab:
1c:f4:a6:0f:19:70:92:25:9c:50:22:a5:e5:10:ec:17:7f:55:
98:de:6f:35:25:07:09:94:b8:cc:bd:c5:9b:44:75:3d:dd:9e:
1b:74:ff:af:2d:de:c6:94:e9:a4:d2:12:6e:27:7f:5d:01:41:
e6:2c:83:ab:97:99:57:cf:7b:53:6f:36:03:d1:1f:c0:67:12:
85:72:26:af:dc:ac:1d:2a:93:42:fe:13:9f:a3:5e:49:2f:95:
4f:06:1f:b3:a1:e7:f7:cd:d0:a3:6e:d2:01:b7:22:00:a3:02:
e7:15:77:e3:44:a3:41:db:de:ea:ad:d6:bc:60:4a:62:e0:43:
32:2c:53:a1:59:57:bf:77:df:10:46:b1:0f:66:88:c6:f2:1e:
41:dc:c8:e2:96:23:55:d5:5d:2c:47:85:1b:46:af:24:63:7a:
cc:e6:db:19:e2:e7:3a:44:14:f3:6a:e9:c9:15:9f:12:00:9a:
0e:dc:ed:b2:79:a4:ff:b2:64:9e:cd:89:51:e2:e8:2a:6f:93:
f2:3a:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:38:26 2025 by rpki-client