Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: DFvrL9m8x2/HV2s5TP800n4J1e9md8D8Sv/af83w7sc=
Subject key identifier: 51:93:5D:D3:EC:5B:20:DF:7A:EF:B3:C2:79:52:44:C7:98:73:1A:8B
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 019783C574FC687A967C4A76873F4C53C318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 0ED1
Signing time: Wed 18 Jun 2025 16:00:45 +0000
Manifest this update: Wed 18 Jun 2025 16:00:45 +0000
Manifest next update: Thu 19 Jun 2025 16:00:45 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: 1+N6Xmz0yMlusBWpfNUjr69Q/nJnys8a+nReUtKGAdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c5:74:fc:68:7a:96:7c:4a:76:87:3f:4c:53:c3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Jun 18 16:00:45 2025 GMT
Not After : Jun 19 16:00:45 2025 GMT
Subject: CN=51935dd3ec5b20df7aefb3c2795244c798731a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:b8:84:5d:15:ab:30:35:18:40:32:6d:27:
c6:f8:52:02:62:ed:52:7e:3d:18:eb:8e:a1:d9:76:
4e:06:af:d0:e8:ef:33:33:18:2d:92:ae:f0:2a:c8:
c1:a2:27:17:c7:90:a5:91:62:99:12:28:bc:d2:46:
08:e6:96:d5:7d:07:86:21:0f:9b:d1:7b:11:1e:f3:
94:c0:7b:b8:84:34:c3:4f:31:6b:06:d8:29:cb:76:
f2:2b:8c:f0:ab:05:0e:1e:30:4f:8a:d1:fa:27:32:
2f:e4:92:2b:9a:aa:60:b2:89:27:ef:85:56:a2:fb:
d1:a2:74:97:af:b7:25:71:fd:f7:c1:92:1f:c4:4a:
77:c1:bf:4d:6e:54:a5:53:27:3c:09:d9:29:07:a1:
4f:bc:27:d4:a3:67:0e:cb:8c:fc:fa:ea:c4:0b:eb:
ef:c2:f1:cc:7d:52:b3:08:cb:9c:5d:47:c6:fd:eb:
d3:44:34:70:96:3e:e2:1f:24:d1:fb:99:61:ec:ef:
e7:c4:47:c3:df:24:a6:c8:55:c9:a2:3e:a2:3f:fd:
29:73:5e:27:e5:28:b5:7f:b4:32:59:f8:be:47:6a:
30:28:fa:0d:11:d0:35:ff:79:c1:b4:1f:82:0c:ef:
ee:5b:72:0f:40:00:7c:b0:17:ae:85:26:86:fb:b2:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:5D:D3:EC:5B:20:DF:7A:EF:B3:C2:79:52:44:C7:98:73:1A:8B
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8d:0c:1b:a7:9e:be:9c:a5:b4:d9:c7:85:ef:9b:f5:b4:3e:
82:f7:27:53:7a:7f:90:3f:89:49:ac:66:e9:4d:f3:c6:3d:ed:
a6:5b:bd:ce:f6:52:b7:3d:1a:1d:7a:a4:58:29:a1:9a:b2:70:
76:23:10:fa:1a:42:0f:14:32:7c:28:4c:58:35:4b:00:45:dd:
40:d2:7d:53:bc:61:27:bf:b6:37:af:78:a4:72:bd:05:13:58:
c2:cf:ba:40:c8:f0:cf:bf:ef:b8:d2:ff:91:4f:dc:7f:90:8b:
76:e4:42:e5:0d:07:57:57:e2:0c:f3:10:47:49:1b:87:4c:63:
02:86:de:1a:5c:cf:9b:80:76:b4:29:1e:18:72:e1:c5:fe:d8:
8d:d4:05:6a:5e:f7:2b:a4:45:ea:36:e8:ac:8e:c1:39:cb:90:
1f:d3:f5:78:ce:00:8e:bf:bf:48:5f:d6:69:35:6d:66:04:91:
9a:11:7a:9a:76:4f:5f:02:a9:eb:00:e6:95:22:0d:80:86:8e:
22:53:59:87:74:a8:17:de:94:31:42:52:c9:34:d9:8f:00:52:
82:7c:9f:89:f2:6d:18:94:d8:dc:71:fe:4c:82:fd:d4:4f:ee:
e6:30:f7:eb:f4:e5:d6:90:e4:60:c7:cf:f1:63:52:8a:bf:78:
a8:ba:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:53:05 2025 by rpki-client