Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File: GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier: xfa6fNWjMvwjmTsRQsihpXFJhhIe5r39REmuRV/zcbE=
Subject key identifier: 82:DF:52:71:16:59:C2:5A:7C:BE:2C:EF:3A:46:6C:F6:18:FA:C6:6D
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial: 019873E349DB9EB117A69A5710105A4C14E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number: 0E7F
Signing time: Mon 04 Aug 2025 07:02:12 +0000
Manifest this update: Mon 04 Aug 2025 07:02:12 +0000
Manifest next update: Tue 05 Aug 2025 07:02:12 +0000
Files and hashes: 1: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: oO5QjQWYv84vCcY64Ls9EY6gJw23W4yhpKNAVHzO2f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:49:db:9e:b1:17:a6:9a:57:10:10:5a:4c:14:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Validity
Not Before: Aug 4 07:02:12 2025 GMT
Not After : Aug 5 07:02:12 2025 GMT
Subject: CN=82df52711659c25a7cbe2cef3a466cf618fac66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:05:37:14:86:37:d4:9a:bf:59:3e:27:7a:
4b:7c:cb:5e:22:f4:cb:ee:05:d5:1e:6b:86:73:60:
96:79:a3:dd:d7:83:e1:6e:9d:70:8a:f5:61:9c:c9:
86:f6:c2:89:ce:cd:3c:83:d7:1e:55:9e:53:5f:e0:
cf:55:07:1f:a9:cd:83:fe:ad:df:74:0a:82:df:11:
4b:22:79:45:2a:77:dc:3b:83:bf:72:9d:a8:7e:4e:
99:9f:3e:c1:59:57:a1:fd:07:e8:ff:a1:f8:94:21:
ad:df:af:bc:f9:30:71:97:95:84:00:a3:1e:b5:d3:
ac:13:87:7b:41:24:76:b1:e3:9c:e0:f0:77:69:f3:
3e:40:bc:fd:73:3d:03:17:66:ff:59:d4:74:67:5d:
94:2d:28:f1:4e:11:fb:53:3f:17:9f:fe:21:ab:5d:
e1:df:79:95:e2:fb:4b:82:07:47:40:0d:61:a8:7a:
28:f1:a7:0e:2a:b4:03:20:53:a4:86:ba:7e:b8:d7:
8e:81:cb:4d:30:da:ad:f8:1b:e5:80:2d:18:b4:db:
9c:e6:21:96:cf:c8:15:56:ea:63:2c:a8:5b:f8:19:
8b:0b:8e:19:69:52:21:e9:6a:5d:bf:ed:e8:12:f6:
70:dc:b8:36:ba:9f:ff:36:e8:82:26:13:d4:f7:b4:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DF:52:71:16:59:C2:5A:7C:BE:2C:EF:3A:46:6C:F6:18:FA:C6:6D
X509v3 Authority Key Identifier:
keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:95:0c:ea:34:91:c8:e4:60:75:22:ed:9d:15:72:97:e8:84:
c4:ea:5f:56:05:cb:c3:e9:2e:6b:1f:8c:c8:ef:b3:3e:b9:21:
56:ec:a2:89:53:38:97:30:e5:84:31:e5:f5:ec:03:f4:f9:2b:
e3:8e:dd:06:60:63:5a:43:13:6e:7d:7b:68:dd:78:d1:56:3f:
ae:2a:d3:31:0b:88:16:a8:fd:c5:96:56:f2:97:43:7d:f0:b6:
28:1a:c7:67:bd:56:b2:20:96:64:af:7a:87:0c:a8:32:c7:1b:
13:bf:f4:01:f0:40:b0:67:7d:cc:c1:37:af:f8:da:29:ce:87:
2d:95:19:0d:1f:c6:4a:e9:d2:a9:48:3d:52:9b:32:66:7e:96:
65:70:97:fe:ae:9a:9d:28:56:39:e9:df:06:32:53:6f:27:40:
13:ff:84:3b:77:4e:cd:23:67:3a:96:f4:10:3a:2f:a1:5f:91:
98:a5:a5:1a:cd:1e:36:9c:e8:cf:8b:e9:6e:39:22:d8:e2:a3:
d0:b9:a6:5c:61:d0:f2:5e:de:06:12:53:06:ec:da:b0:9f:61:
77:6d:4b:e8:fd:e4:b9:38:fe:31:cb:53:08:f4:f2:58:04:bb:
07:03:22:27:f6:33:e5:84:93:55:f8:c1:3e:30:5b:7b:84:1f:
11:ff:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:14 2025 by rpki-client