Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: gQH89sXdouZzGXKH7h5bZ0QM0Sdsl05YDAjy6r0IXdc=
Subject key identifier: 05:C6:3B:C8:DA:FC:29:10:D5:3E:25:52:16:12:E9:EE:8D:80:3D:F3
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 019769CF174B9152FBAC65000AD44DCC5867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 151E
Signing time: Fri 13 Jun 2025 15:01:08 +0000
Manifest this update: Fri 13 Jun 2025 15:01:08 +0000
Manifest next update: Sat 14 Jun 2025 15:01:08 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: zc/TfYFL/XmTZ182oa87RgjvdBNFqbCiN9pSmXzdsEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:17:4b:91:52:fb:ac:65:00:0a:d4:4d:cc:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Jun 13 15:01:08 2025 GMT
Not After : Jun 14 15:01:08 2025 GMT
Subject: CN=05c63bc8dafc2910d53e25521612e9ee8d803df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:10:05:25:b6:43:1f:de:4b:a0:65:6f:57:
8f:6d:de:ff:bd:47:8c:16:77:c6:2d:2d:44:c9:b4:
9f:8b:1c:f3:e1:d4:c3:bb:91:04:92:ba:49:a7:f8:
19:5b:8a:ec:aa:44:2f:d5:35:c3:bb:3d:b1:8d:e6:
7e:1c:0b:a2:88:78:96:73:cd:8b:0c:7a:39:63:33:
c8:17:14:16:af:ef:8c:b6:ad:fa:cf:f8:40:58:f4:
32:7b:e4:1c:38:b4:09:85:72:14:37:09:aa:f1:01:
76:4a:b9:5c:d6:ce:3d:eb:0c:fd:e6:c8:39:52:3b:
9b:4d:b1:a9:73:6d:36:23:95:70:35:be:85:b3:f0:
98:0a:df:2d:65:c4:84:3b:a7:6a:5c:5a:6c:41:40:
ee:9b:43:94:52:6e:17:54:2a:c7:d9:d8:37:be:0a:
4b:c8:25:9e:0f:f4:f5:91:4d:18:83:37:34:74:ad:
68:f8:59:84:d9:c5:55:5f:b1:00:84:3f:df:96:cc:
e8:cc:66:44:e8:25:11:4a:1a:ba:7a:8d:90:52:f1:
d2:b9:30:96:b5:3f:d3:bc:9f:6c:17:3b:03:ce:39:
91:23:fe:d5:cd:91:be:41:44:18:5c:0b:2f:d4:32:
90:fc:4a:02:bb:2b:68:3a:66:f5:b1:f6:72:0b:8a:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C6:3B:C8:DA:FC:29:10:D5:3E:25:52:16:12:E9:EE:8D:80:3D:F3
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fc:ad:13:00:73:28:c5:0e:15:d6:c1:81:b0:db:96:5a:ff:
24:ab:d5:d5:57:e1:59:9d:14:81:58:e3:2b:ae:50:16:79:1a:
83:01:1b:fc:36:ac:3d:d4:95:19:0b:c1:a4:c5:0a:52:a2:fe:
43:20:09:e6:7f:a8:e0:dc:fe:36:99:0e:e9:cc:c8:2a:46:98:
e2:10:26:e9:2a:6d:e0:91:3d:6c:0a:9b:d9:8a:51:c4:87:de:
51:55:6c:9f:da:6d:93:05:52:75:5a:49:f5:3d:2c:17:8d:85:
70:42:a9:11:6e:bc:35:1e:0e:ba:b1:30:69:2f:71:f6:ab:42:
c9:74:94:c9:d3:a8:98:47:54:4d:76:bd:d8:b8:61:d2:c3:ea:
1d:9b:bb:b6:96:c7:53:f3:7f:f4:35:72:56:a9:47:bb:5c:ec:
90:0c:5a:0c:18:de:90:c9:cb:4a:ce:b5:9b:33:9d:ce:cb:70:
1b:3b:49:3a:da:3e:51:39:c7:ad:9e:8b:a0:3e:72:8d:81:e4:
4d:6c:d9:f2:1b:48:8c:fa:50:b8:b8:7c:48:d3:af:96:5c:91:
9f:32:86:df:3c:6f:9a:c3:71:3f:70:ac:e2:3a:fb:46:85:4d:
32:07:7e:52:ef:d4:f8:51:43:5f:1d:ac:db:7a:01:a9:98:8b:
73:a7:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:57 2025 by rpki-client