Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
File: GGr6K4fO01gj1aLMCghE56FRa_M.mft (raw, json)
Hash identifier: FNcpx4yHP9w1IHnkZEplwmqRxMy5Gb0is9eXsqVnDRU=
Subject key identifier: AA:17:B2:A9:04:2B:88:52:B2:13:3D:17:81:BA:65:CE:AD:5D:12:21
Authority key identifier: 18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
Certificate issuer: /CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
Certificate serial: 0197827CA69763F7DFEEEEA4DA3DDF5D2E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
Manifest number: 0CFA
Signing time: Wed 18 Jun 2025 10:01:36 +0000
Manifest this update: Wed 18 Jun 2025 10:01:36 +0000
Manifest next update: Thu 19 Jun 2025 10:01:36 +0000
Files and hashes: 1: GGr6K4fO01gj1aLMCghE56FRa_M.crl (hash: yhNhfbPcByAGu80ZA8eW1X8kfpPpcC7kEUImrc7myA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7c:a6:97:63:f7:df:ee:ee:a4:da:3d:df:5d:2e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
Validity
Not Before: Jun 18 10:01:36 2025 GMT
Not After : Jun 19 10:01:36 2025 GMT
Subject: CN=aa17b2a9042b8852b2133d1781ba65cead5d1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:c2:8b:81:47:b7:f3:ce:4b:68:3b:49:7e:
82:40:7e:1e:6d:f0:5b:05:de:cf:a9:4f:98:a2:79:
63:62:c7:8e:71:53:99:3d:99:79:b9:d0:cc:89:8c:
f8:4e:32:91:fd:02:ab:f0:de:17:99:f5:c2:b7:6c:
4e:30:d4:17:e4:28:17:4e:8d:ee:a3:e3:55:a0:d0:
27:89:96:c2:f1:67:75:29:65:d6:13:14:51:e7:3b:
cc:ff:0f:30:6e:45:aa:90:40:cf:63:47:97:cf:1a:
43:38:4a:c6:91:03:49:0c:4a:47:fd:b0:0e:91:f2:
f1:f0:f0:58:43:27:a5:e8:a4:f5:41:bd:71:1f:a7:
2f:d7:b2:9b:81:96:ec:3b:d8:07:a9:a8:5f:70:42:
bd:6f:35:7c:24:e6:fb:48:9c:0a:56:cf:d3:70:4f:
38:7f:e3:1c:6d:16:2e:31:a6:77:03:69:b7:16:11:
4f:74:42:4a:27:e5:cf:da:c4:25:4e:c5:e1:84:fd:
c2:46:ca:53:aa:43:df:4f:a5:00:fd:5e:89:3d:b9:
bd:2c:50:00:f1:35:9a:82:38:26:b1:57:ca:69:4c:
65:aa:e8:0e:ef:2d:68:6d:13:43:c6:30:d2:0a:e8:
6d:2e:54:a1:11:fc:4d:6d:3b:f7:71:72:2a:65:d7:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:B2:A9:04:2B:88:52:B2:13:3D:17:81:BA:65:CE:AD:5D:12:21
X509v3 Authority Key Identifier:
keyid:18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:10:d7:17:96:34:9f:21:fc:6b:64:4f:4f:ac:41:13:19:a2:
0d:69:a4:1b:bb:ce:e4:67:60:3a:e4:38:24:41:35:7d:be:31:
05:e9:ce:91:b5:08:b0:a6:8d:87:58:ec:6e:fd:65:48:35:38:
fd:8d:3f:f7:7c:fd:33:19:82:d8:f2:cf:ba:cc:66:06:76:21:
fd:52:75:78:eb:03:dd:0d:e1:9b:da:28:fe:f4:b7:5f:78:5f:
71:62:87:e1:9f:72:5d:36:fb:dd:84:5f:e2:8e:d2:7e:98:19:
1f:71:2e:be:65:a6:3e:fd:41:f0:a0:60:30:35:f4:46:2e:ec:
43:32:1c:fc:43:45:d2:ce:a9:c2:d2:dd:6e:aa:72:c5:2c:ec:
cc:07:43:6a:cb:03:e7:0a:47:f9:11:c1:1b:e0:84:20:3d:a4:
23:79:61:a5:9e:43:45:eb:a2:e0:e4:3e:79:10:cb:e9:cb:21:
1f:29:8a:0b:19:a0:4e:a1:ff:5b:d5:00:56:90:7e:da:ce:60:
b9:db:55:c3:de:6e:7d:7e:0d:10:92:8f:ab:be:2d:aa:d6:07:
ca:25:e0:ab:60:2d:b9:44:c4:6f:ed:42:05:04:a4:47:de:e4:
16:10:02:8f:92:2e:02:e8:38:a7:f8:5f:b6:77:41:42:b2:f6:
74:2e:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:02:37 2025 by rpki-client