Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File: gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier: kybQ56R1k+3fh+x02OV36Qu3YoYvkFTY7TM8g0scRW8=
Subject key identifier: 33:D8:7B:63:F9:97:86:BB:9A:5E:B4:86:71:50:AC:CE:3A:E4:93:71
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer: /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial: 019890DB514FF5C269AEE75788BFAE5C184E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number: 0EEB
Signing time: Sat 09 Aug 2025 22:02:28 +0000
Manifest this update: Sat 09 Aug 2025 22:02:28 +0000
Manifest next update: Sun 10 Aug 2025 22:02:28 +0000
Files and hashes: 1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: RMgm9+diUWGLn2ANMXruK/YDjwj6CV+RRoEz89UEqpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:db:51:4f:f5:c2:69:ae:e7:57:88:bf:ae:5c:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Validity
Not Before: Aug 9 22:02:28 2025 GMT
Not After : Aug 10 22:02:28 2025 GMT
Subject: CN=33d87b63f99786bb9a5eb4867150acce3ae49371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:2d:1f:2d:57:f4:d7:e1:19:b7:a6:45:13:
9c:66:2f:d3:c4:d2:73:13:d9:31:c4:cd:e2:70:70:
1b:22:a6:f7:10:50:82:02:e8:42:b4:59:75:45:7a:
83:27:14:de:6f:3c:3f:f2:19:ea:fa:a3:df:9e:6b:
b0:64:57:08:cd:16:6f:fe:83:02:b4:96:7f:94:e9:
fd:39:68:47:84:5c:70:e9:6b:62:b0:f9:7b:f1:61:
f7:a6:01:55:b0:ae:f7:67:ea:51:a0:71:88:f3:46:
59:bc:8f:58:5a:f9:05:2f:d7:ce:65:3c:25:cf:ef:
b8:8e:58:fd:36:70:1e:bf:cf:6c:27:98:3b:89:c9:
4e:cf:fe:7f:3b:3f:c0:69:15:00:8f:e6:29:ae:b6:
59:c1:e1:2c:54:e6:82:04:ed:41:80:e7:5a:3c:a4:
4d:8f:fd:fe:9a:3f:b7:ab:bc:bf:f9:f0:ea:51:5e:
3a:a7:29:7f:a5:1b:00:c3:e4:af:32:84:7c:ab:fc:
60:03:87:39:63:16:49:ec:49:2f:5e:1a:3d:f9:6c:
17:92:bf:3b:79:04:43:a1:c3:9a:cf:0a:29:83:93:
16:ae:58:18:92:29:98:2f:0a:fc:d4:c0:fb:ba:1c:
b9:0e:e1:fb:36:0b:6d:1d:3f:9e:7b:45:5c:7d:19:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:7B:63:F9:97:86:BB:9A:5E:B4:86:71:50:AC:CE:3A:E4:93:71
X509v3 Authority Key Identifier:
keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:c0:a4:15:0c:b5:64:ab:56:67:fc:dc:d5:fe:25:1a:9a:
1b:27:3c:17:80:9e:43:bf:bf:92:ad:81:a7:b5:29:35:bd:58:
9f:2c:56:a5:1a:ef:ef:59:7d:88:d1:2e:10:ab:32:5d:dd:14:
8a:8b:4c:d1:ca:57:23:c0:94:f8:a7:b6:4d:83:ff:04:8e:84:
8a:c1:b0:04:8c:41:95:34:aa:e0:4a:31:bb:15:76:6a:e8:d3:
93:56:7d:f0:0f:22:2e:ec:75:d8:ef:93:f1:3f:03:0d:a5:4c:
c7:e4:db:49:fe:bf:c4:60:89:db:97:df:90:15:44:16:79:27:
6d:4c:d7:5d:e5:41:54:8c:03:29:15:77:64:47:c1:9f:c0:8e:
82:29:be:b2:bb:50:1f:58:81:a3:cc:c4:6c:31:5d:8c:9c:f8:
0c:89:cd:2f:05:42:5a:37:97:b1:9b:6f:80:fc:1b:bc:20:6a:
22:0c:3f:a8:c2:dd:e2:2a:ec:25:c1:73:b9:58:23:88:c9:e8:
ac:4d:41:fa:07:20:f3:87:59:37:22:76:f7:10:4d:10:4a:c8:
50:17:76:b6:90:7d:33:4c:77:87:bd:bc:ca:96:b7:4b:7f:aa:
77:4e:56:37:30:56:32:61:36:72:86:5c:34:16:ea:27:65:5e:
eb:4f:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:51 2025 by rpki-client