Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File: GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier: vv1ypI0QVDALOJcLMo6JYd+y3KWpw5cwZe1kZba1LBs=
Subject key identifier: 9C:50:D2:BC:02:D7:02:6F:AB:B5:8A:AE:31:51:76:A9:BB:B5:A1:70
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial: 019769611E81602C96D5C653DBE3DDB1A2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number: 0DF5
Signing time: Fri 13 Jun 2025 13:01:01 +0000
Manifest this update: Fri 13 Jun 2025 13:01:01 +0000
Manifest next update: Sat 14 Jun 2025 13:01:01 +0000
Files and hashes: 1: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: CoX5aRhAEz/AeTA7nSVemHgIO0fK3CwgnMmf/yi6Kkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:1e:81:60:2c:96:d5:c6:53:db:e3:dd:b1:a2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Validity
Not Before: Jun 13 13:01:01 2025 GMT
Not After : Jun 14 13:01:01 2025 GMT
Subject: CN=9c50d2bc02d7026fabb58aae315176a9bbb5a170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:55:b4:25:f3:8e:c7:ad:de:b9:54:2d:26:
a6:72:66:93:19:61:23:42:f2:23:75:c0:8e:58:99:
cc:01:ee:ae:20:f5:b4:07:e3:ab:a9:fe:43:ee:d5:
fa:97:3e:4d:8f:80:f3:84:1f:9f:4e:18:e1:a7:ff:
08:4a:f1:74:ce:c8:df:80:c9:b0:c2:b8:28:35:fb:
f3:30:a2:5e:2f:a4:11:f9:ff:3e:d8:e7:97:8b:7b:
3e:3e:cc:82:a1:d1:a6:41:96:cc:d2:88:f4:85:df:
df:d4:07:d5:1d:c2:5c:d1:09:bb:ff:ee:82:fa:ce:
05:52:d8:08:4c:b7:9f:8b:da:0f:df:28:cf:bd:d9:
3e:38:e2:a6:0d:d2:e7:78:b2:ca:09:66:70:6d:55:
bf:86:b6:18:89:0b:d5:5f:f8:7a:ae:f5:59:2c:a6:
f5:ba:93:49:cd:91:38:d3:21:a1:ae:5f:72:10:0f:
2f:c4:80:65:55:5a:8a:cb:8d:08:b8:1e:65:cf:d7:
a0:80:b0:69:c5:0f:40:7c:a2:0e:ac:a8:bb:fc:60:
4d:4e:1c:98:23:3c:d4:b6:56:cf:90:a6:75:c0:bf:
9e:d7:c6:85:ee:14:71:8e:df:15:fb:5b:c1:a6:67:
8b:3c:0d:66:ef:a8:5e:a6:c4:d8:33:33:cb:8c:c8:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:50:D2:BC:02:D7:02:6F:AB:B5:8A:AE:31:51:76:A9:BB:B5:A1:70
X509v3 Authority Key Identifier:
keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:4d:95:22:b0:7c:65:a1:09:d5:6d:f3:7b:9f:43:54:e2:
2c:e2:b0:d9:20:06:db:81:5d:d1:cb:a9:bf:87:d5:be:20:8d:
b5:fd:31:11:5b:8e:ef:28:b9:0b:ac:4a:62:85:99:b9:1b:ea:
d2:f5:e1:6c:d8:6b:55:28:18:cb:32:4c:a4:69:29:6b:4b:ac:
3a:80:29:fa:2d:4c:4f:9e:8e:9b:df:b9:7d:18:72:46:2f:f1:
4f:05:29:11:d8:75:c9:42:70:a9:d4:06:47:8c:bc:15:1c:42:
47:d3:5e:1c:f7:35:a2:47:cf:68:de:70:6a:4e:ea:82:45:c6:
ce:aa:97:1a:ad:c0:f3:4c:11:3b:50:eb:16:2c:96:d0:5f:01:
fd:dc:cc:59:94:90:90:02:96:14:38:49:d7:cc:0c:ff:b5:84:
71:d8:50:89:47:f7:b9:04:5b:da:69:b9:a8:19:fe:4d:1f:e6:
87:2b:36:3c:19:2b:10:3d:23:79:3a:33:b9:8f:71:d7:e5:32:
24:79:a1:01:2d:e2:dd:a1:4c:95:04:9f:a7:fa:33:0c:62:b7:
6d:80:fd:d9:15:78:a3:88:cf:fb:d7:99:73:fd:e2:29:15:d0:
67:9e:d5:9c:90:25:05:95:54:18:b8:23:ef:95:a8:82:24:21:
42:75:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:39 2025 by rpki-client