Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: 1CpFFRipe+A5ec8mGJ657fc51FuiFwzvIiZkJ0/vfuY=
Subject key identifier: 49:F9:5E:34:DD:D5:29:0A:43:93:98:12:41:54:12:8C:BD:9A:1C:0D
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 01976D3E6BEA24E1293F715487F64E5A3E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 12C7
Signing time: Sat 14 Jun 2025 07:01:36 +0000
Manifest this update: Sat 14 Jun 2025 07:01:36 +0000
Manifest next update: Sun 15 Jun 2025 07:01:36 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: mnxg4rkthY+X0ixZOPsvgiGyl9geVl/9T2/t7EVtFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:6b:ea:24:e1:29:3f:71:54:87:f6:4e:5a:3e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Jun 14 07:01:36 2025 GMT
Not After : Jun 15 07:01:36 2025 GMT
Subject: CN=49f95e34ddd5290a439398124154128cbd9a1c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:e2:2a:19:0f:2f:cd:49:e0:31:e3:e1:71:
77:71:88:fc:0d:78:2c:c3:c7:2a:06:9d:50:2d:c3:
2a:56:49:21:6c:28:5b:6f:ec:12:83:ae:11:4f:47:
72:12:cc:13:f6:d5:eb:3f:89:10:ff:09:5e:c4:5d:
bb:98:ec:96:fe:26:1c:09:84:34:e8:40:04:f6:f0:
09:8c:e2:bf:2b:b4:da:8b:ba:b0:36:39:e9:d8:69:
74:12:73:52:65:29:6b:34:cc:c5:8d:b2:97:06:f8:
28:30:31:39:56:e0:79:a3:25:7f:6b:c6:59:f2:98:
a3:4d:17:6e:9b:01:15:aa:9d:6d:2c:a4:d2:60:37:
53:df:d6:e8:a0:d9:5f:ad:ef:bb:50:b7:22:20:64:
1f:ea:7b:6f:85:29:c2:ba:57:8d:5c:c5:2d:be:10:
81:f1:54:d9:4a:07:a8:dd:81:c4:93:6f:94:be:af:
fe:b1:a0:87:bb:3d:3d:82:4a:9a:a5:8f:66:0b:2c:
18:94:16:75:9c:ff:9a:34:27:4b:ff:0e:0a:d1:9d:
1b:7a:9c:68:e7:b1:f7:91:c6:85:3e:2b:63:d6:59:
5a:01:44:8e:df:e7:4b:eb:05:e0:77:a4:8a:06:47:
df:c4:92:3d:32:6b:6e:3e:22:74:f5:53:f8:c3:14:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:5E:34:DD:D5:29:0A:43:93:98:12:41:54:12:8C:BD:9A:1C:0D
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8f:2a:ce:e5:10:13:c1:cd:83:26:6b:e5:9c:28:9c:ba:c7:
bd:fe:7c:4e:c9:2a:7d:fa:03:31:0e:73:25:a3:3c:c6:09:7e:
aa:29:67:61:ce:c8:37:48:92:68:b8:1c:d7:0a:8d:3b:2e:a1:
8f:1b:33:ec:4e:4f:65:80:50:be:b4:66:e3:f9:ca:cc:8b:6d:
c5:99:71:61:e3:9e:be:bf:36:77:d7:96:d9:60:a6:c2:21:e8:
78:ca:b5:4f:7b:7a:7b:2a:5c:a4:84:29:aa:97:f4:2e:28:c1:
14:0d:da:d3:47:a2:e2:af:7a:33:41:c5:ed:05:66:ac:a0:fd:
5f:43:11:5e:9e:90:80:3d:bf:12:0f:73:90:23:24:9d:09:c8:
b1:2e:47:11:e7:44:30:ea:1a:ea:38:ee:dc:95:2e:13:fd:12:
55:12:b8:ed:66:a2:9e:10:a2:75:93:88:60:7d:eb:6b:00:28:
3b:63:fc:86:8b:67:2b:24:79:0b:d4:37:cf:0b:da:ab:5a:62:
18:29:42:7e:59:39:3b:eb:3b:5b:06:fc:50:8d:e6:11:bf:d3:
bd:3d:f4:c8:a4:0f:0e:22:ff:82:9f:df:ad:07:a4:97:bc:f7:
34:69:99:f7:c1:fe:22:65:4f:a9:25:77:c7:07:34:4d:9b:41:
ad:f7:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:13:14 2025 by rpki-client