Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: RcEuo2Zi/oweE6axY+ohhO1ozbxluxMLIZSRr9hlCXU=
Subject key identifier: C9:3B:DB:79:90:5E:11:F8:3C:FF:DE:53:DE:C5:81:8A:90:0B:6A:33
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 01976A061E72A1772E128DEEDBADFB080C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 04A4
Signing time: Fri 13 Jun 2025 16:01:15 +0000
Manifest this update: Fri 13 Jun 2025 16:01:15 +0000
Manifest next update: Sat 14 Jun 2025 16:01:15 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: uxjCqx1qEJWeGurITrDd8JeLSfrmgPAnpkm86S0oRVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:1e:72:a1:77:2e:12:8d:ee:db:ad:fb:08:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: Jun 13 16:01:15 2025 GMT
Not After : Jun 14 16:01:15 2025 GMT
Subject: CN=c93bdb79905e11f83cffde53dec5818a900b6a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:a3:4d:43:9c:14:32:f5:f2:b3:7e:29:5c:
5f:30:e9:c6:60:ce:2e:f5:a4:ce:f9:2b:fa:fe:31:
f3:f4:42:91:2c:fe:c4:e9:54:e8:45:9b:06:56:f2:
10:9e:5d:3e:e3:b7:2b:8e:7a:2b:ce:f1:85:f3:ce:
e9:b5:84:47:cd:fb:9f:e2:af:16:dd:2f:4c:61:8f:
95:4e:12:4e:2c:bb:73:89:b3:54:52:d5:0d:cc:d9:
f9:2f:27:aa:6d:86:74:ae:38:32:3e:21:5f:11:0a:
d1:01:fb:30:de:ab:38:e8:04:62:7c:5e:1a:1d:6f:
99:49:e5:1d:c1:23:51:90:1b:55:74:39:a7:fc:0b:
67:24:49:0f:3e:ce:a2:19:79:64:9d:f8:7b:79:61:
cc:8f:f5:ea:9b:56:d2:91:a8:62:8a:af:a0:3b:98:
ff:d3:42:cb:43:49:c4:62:2f:13:89:a3:7a:9c:69:
12:e2:7b:fc:a1:a2:42:f7:4d:e8:ae:9e:13:62:f5:
3a:6c:4e:fc:08:1c:7b:1b:ab:21:8f:3b:b6:ad:49:
93:bd:7b:22:09:d0:7d:17:50:ca:af:6c:3d:24:b4:
52:d1:12:2e:6c:9b:35:13:a8:d1:f2:b4:5a:e3:fc:
6f:e4:64:c5:b8:9e:9a:2e:0b:b4:48:75:86:cf:2c:
73:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:DB:79:90:5E:11:F8:3C:FF:DE:53:DE:C5:81:8A:90:0B:6A:33
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ff:ff:e9:8d:68:b5:32:af:47:48:57:48:43:de:41:09:db:
97:a2:3e:0a:a2:53:d4:a3:11:9e:ad:d8:2b:68:a2:49:1b:09:
c9:48:48:64:5e:f5:49:0d:e0:a2:19:01:bd:3d:bf:bd:8a:51:
c5:f7:1a:f7:1b:b3:9f:e8:af:5a:b0:c2:8e:49:39:59:a7:0b:
37:15:25:3b:dc:c4:3f:1e:4c:4d:67:5f:9c:37:62:bc:c8:58:
7b:09:51:6a:3e:e7:33:ac:9d:0f:f1:95:4d:a9:16:01:c2:81:
f1:da:8e:8e:b8:dd:1a:1d:83:a0:4b:f8:53:81:d7:c5:fd:ea:
b8:95:f2:f6:b5:01:a1:cc:9b:82:cf:86:66:ed:a7:33:b9:b3:
b8:6e:4a:fe:3b:64:6e:d7:e0:94:19:15:a0:ee:40:65:1e:98:
49:1d:95:fd:d0:0c:89:59:b7:a4:a7:90:2c:83:27:a8:25:37:
4f:46:44:87:a6:c7:e4:82:d9:27:59:f1:40:9e:77:56:14:12:
a1:9f:a1:2b:9f:7c:f4:47:f2:4d:80:a3:9f:c7:df:77:3f:70:
43:4e:08:6c:d6:a5:8b:38:b2:29:f0:1b:c1:da:ef:c6:47:c3:
0c:61:be:39:11:76:d0:c8:93:b7:f3:ee:52:83:6d:be:82:6e:
43:fe:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:43 2025 by rpki-client