Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File: G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier: KL6XXD+uoX+Qt2Krj1sLx0ZFzUJuKM80NMFu+Dux+xw=
Subject key identifier: 52:B0:C3:E8:5D:53:61:4B:0B:62:24:D4:76:34:44:CF:82:62:66:49
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer: /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial: 019768BC22D5ECF8468B45C6D51FEF4EC30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 10:00:49 +0000
Manifest this update: Fri 13 Jun 2025 10:00:49 +0000
Manifest next update: Sat 14 Jun 2025 10:00:49 +0000
Files and hashes: 1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: mIkotcL8K1lBN+3DfjCT2BF+slvefLIAPziaN3oZUZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:22:d5:ec:f8:46:8b:45:c6:d5:1f:ef:4e:c3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Validity
Not Before: Jun 13 10:00:49 2025 GMT
Not After : Jun 14 10:00:49 2025 GMT
Subject: CN=52b0c3e85d53614b0b6224d4763444cf82626649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:13:b6:71:89:e8:14:54:44:49:32:e1:4f:
37:7a:91:7a:3a:09:5a:6f:d2:aa:60:92:eb:8e:79:
be:d0:24:0e:7b:26:f0:06:71:04:63:4f:16:23:c4:
f1:24:a7:44:d3:fa:5f:ac:ef:74:61:ef:df:b7:35:
db:7a:29:b8:87:36:30:4f:de:ca:b5:69:0c:79:47:
79:59:8d:29:51:12:12:be:6a:ff:0b:be:98:a9:cc:
53:33:e7:a0:25:58:b1:6a:e1:db:d1:f2:7f:c3:a3:
22:3f:77:80:31:59:5c:e6:14:2f:a5:35:ae:c7:53:
a8:14:d2:0c:ba:79:cb:78:15:ee:72:5e:ce:82:d6:
35:ea:36:9f:0f:07:e5:08:0f:ea:02:c2:b4:06:56:
61:e7:df:fd:7f:01:8f:ed:3b:ea:05:a9:71:bb:aa:
16:ae:b7:21:25:9c:69:03:cd:ca:38:29:42:e7:76:
95:9d:2a:b6:3f:06:8b:67:20:45:13:15:a2:5f:ff:
f8:9b:6a:5a:36:2e:05:26:6d:b9:cc:6b:5b:57:47:
0d:a1:33:d7:e0:7e:f9:0f:67:c3:f6:1c:62:29:73:
a3:bb:55:a3:f0:30:8a:36:2f:b7:be:c3:a9:31:8b:
c4:f8:f7:2c:48:25:80:4c:55:9b:19:b4:1d:a0:d0:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B0:C3:E8:5D:53:61:4B:0B:62:24:D4:76:34:44:CF:82:62:66:49
X509v3 Authority Key Identifier:
keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e8:16:ce:f7:b6:47:06:bb:5b:e9:7a:6e:03:83:7f:53:2b:
86:3c:69:c1:df:3b:af:4a:60:fc:1e:57:37:f0:cd:0e:05:84:
fb:0c:d1:b6:d0:66:95:e5:0a:82:52:8e:d2:18:8d:b0:cf:a5:
f9:4a:c8:32:4d:64:62:cb:bd:21:f3:5b:d8:0b:b5:4e:5b:27:
7b:01:44:a9:a6:eb:37:52:ca:9e:a9:6f:c5:24:e9:bd:10:4c:
93:47:e9:be:78:ee:9a:52:38:5d:f4:c6:6b:93:ac:9c:90:08:
56:b7:23:be:9c:3f:c9:9c:c6:e3:65:35:5b:63:47:3f:76:45:
59:11:6a:b3:cd:35:40:0c:7a:66:4b:23:e2:17:36:9f:ad:c2:
4f:4b:8e:22:a7:85:af:81:3c:d6:e5:3a:6d:06:c5:4d:e8:33:
29:4a:94:b3:3f:cc:de:0c:77:dd:0a:cf:68:b6:70:6a:8f:2d:
96:10:7e:1a:70:ed:96:f1:55:01:ff:63:47:a7:9e:e8:7d:01:
47:48:72:5d:b5:17:27:83:5b:f4:31:50:e7:34:70:ec:50:52:
3c:86:08:f0:42:62:07:f4:ef:4f:fa:a0:2f:0f:d2:2a:a1:7d:
5d:cb:02:84:98:df:0d:9e:cf:73:06:f0:f8:55:e4:65:1b:5b:
66:43:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:04 2025 by rpki-client