Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: er7job2APxcp6DJnI00+986lRdH6IUpeDQb9dmd8duY=
Subject key identifier: C3:F8:55:92:02:BF:E6:7D:FB:89:CA:04:E1:7D:8F:38:C7:85:7B:D2
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 01976D3E737A814A5943B8ADD62D005C2258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 0D28
Signing time: Sat 14 Jun 2025 07:01:38 +0000
Manifest this update: Sat 14 Jun 2025 07:01:38 +0000
Manifest next update: Sun 15 Jun 2025 07:01:38 +0000
Files and hashes: 1: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: DtfjuQ+aIG+N6vDkvBtZTnxtrtkhDNETsZCss+HPMAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:73:7a:81:4a:59:43:b8:ad:d6:2d:00:5c:22:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Jun 14 07:01:38 2025 GMT
Not After : Jun 15 07:01:38 2025 GMT
Subject: CN=c3f8559202bfe67dfb89ca04e17d8f38c7857bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0f:1e:2e:58:26:7b:19:e2:d3:fa:8d:da:f4:
2f:5b:03:60:ec:c0:92:38:3d:42:ca:75:d3:a3:ae:
9c:44:50:cc:3d:c2:81:46:73:ee:0d:77:59:9d:64:
e6:d2:ed:cd:41:79:db:d3:7a:5d:eb:05:d2:df:9b:
e6:a8:cf:d6:ca:65:78:7f:64:94:c3:81:50:c2:99:
c8:7a:d6:2a:1f:37:93:5e:e0:9b:87:43:4c:3d:6b:
45:eb:d2:2c:63:12:c2:9d:49:c1:ff:2a:13:75:d1:
58:c7:83:91:50:62:67:eb:7f:63:65:a8:af:90:4d:
be:4e:c2:07:8c:12:d3:b4:07:dc:a3:c9:b2:65:ae:
91:69:30:4d:53:b0:32:11:e9:5b:0f:df:86:45:6c:
03:2d:a7:c7:a5:9b:60:a7:73:5e:36:de:62:c3:f9:
fd:3a:b5:65:25:ad:e0:06:f6:de:de:68:f5:b7:ab:
d0:5f:86:a8:ca:8b:aa:9d:2f:a4:fb:88:11:c3:f3:
1f:a2:69:d0:90:d6:b9:b6:f6:33:fa:50:87:8c:0f:
5a:e1:3c:b7:7c:1d:8a:a2:89:05:75:25:f4:a4:08:
32:04:cb:4a:f1:62:6b:7f:64:e7:55:78:6d:08:bd:
90:e9:73:dc:5f:ae:02:7c:28:b4:e2:cd:ab:4c:78:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:55:92:02:BF:E6:7D:FB:89:CA:04:E1:7D:8F:38:C7:85:7B:D2
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:30:68:1c:cf:06:d8:5a:87:6e:b5:2c:95:c4:19:f7:44:
c1:4c:e5:8b:01:3a:3d:bf:b5:36:23:39:74:bf:0b:4d:c0:56:
dc:05:ad:a3:56:dc:62:78:c1:9f:eb:6b:29:47:4c:6b:9d:49:
0a:ad:8b:c0:50:d8:2e:01:a8:e3:c8:3b:e3:49:c7:10:5a:05:
03:27:cd:61:c5:7e:28:9b:6a:50:e5:96:e7:93:5b:96:87:8b:
7b:c7:33:e3:4a:74:fc:05:1c:d8:82:47:28:0a:c2:29:da:d5:
29:0b:38:28:57:8c:22:cf:1d:e2:6c:92:b2:0d:0d:c1:ea:f8:
5a:6d:2a:00:40:25:db:47:d1:a0:6e:f5:eb:33:d2:bb:0e:e2:
a2:22:20:b2:4a:c4:e5:4f:60:f3:ed:93:ae:de:e2:52:0b:f1:
2c:9b:20:b0:21:5b:6f:20:9e:98:95:cc:5b:1e:26:67:97:f5:
d8:78:5a:1b:2d:16:e1:06:9b:f7:4e:37:7f:85:85:ff:5b:e9:
b7:9f:b5:90:13:09:8c:5f:3f:b5:1a:41:d6:9a:e4:af:dc:5e:
d7:65:f1:bb:19:61:4c:70:84:1e:83:af:d6:75:12:6d:11:22:
01:a6:a1:4e:8e:31:eb:a2:02:1b:6e:59:d9:bb:42:56:4c:6f:
7c:bc:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:25:12 2025 by rpki-client