Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
File: ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft (raw, json)
Hash identifier: D3irdom8niDDwCaPJT/hGeOk+njOzGwlM+s0sp0oPM0=
Subject key identifier: 98:AE:A9:66:F8:75:40:36:8B:A1:F9:6A:6D:77:FE:48:69:6D:BA:DD
Authority key identifier: 82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
Certificate issuer: /CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Certificate serial: 01976F2BF6646BB8EE50000F01715574BF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
Manifest number: 0776
Signing time: Sat 14 Jun 2025 16:00:41 +0000
Manifest this update: Sat 14 Jun 2025 16:00:41 +0000
Manifest next update: Sun 15 Jun 2025 16:00:41 +0000
Files and hashes: 1: ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl (hash: qXj3xCgzhCwiYBjwZIO8MiUmfwrIcwn1cl+BudeMy80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f6:64:6b:b8:ee:50:00:0f:01:71:55:74:bf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Validity
Not Before: Jun 14 16:00:41 2025 GMT
Not After : Jun 15 16:00:41 2025 GMT
Subject: CN=98aea966f87540368ba1f96a6d77fe48696dbadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:03:a2:92:3d:8c:15:0d:28:fe:fc:47:f7:
ed:a9:28:90:44:22:1f:ae:8a:83:38:72:9d:32:cb:
72:e4:93:f1:12:95:31:6f:e3:f4:b5:05:48:b1:39:
4e:f0:15:42:5e:99:57:c2:41:1f:4a:25:64:72:36:
89:f8:36:31:a8:62:2b:97:a1:4a:db:c1:29:bb:aa:
2c:87:56:13:ee:9f:f7:b7:33:9a:c9:e8:fe:40:7d:
bb:1b:81:87:98:4d:e9:c9:c9:33:ad:dd:23:87:6b:
38:ed:43:4b:91:ab:5b:af:2e:89:b2:21:e6:1a:eb:
c9:52:72:de:47:b9:9c:1f:6f:1b:7d:03:74:55:30:
35:c4:a7:60:26:f4:21:e3:f6:46:62:db:f2:cf:b6:
c3:b0:63:de:2b:18:aa:89:6f:b8:79:92:c7:ec:fd:
38:19:18:81:ca:a3:53:43:50:37:b6:88:6d:a5:d1:
93:7e:bd:ab:b1:65:4f:22:44:9c:1f:25:d7:45:af:
47:f7:46:33:0c:af:83:3f:cd:a3:57:44:0f:aa:47:
c4:06:14:1b:3b:78:96:c0:cd:d9:af:7b:4c:7f:9c:
13:af:08:af:21:17:b7:3f:35:61:21:4f:66:36:69:
e1:ba:62:de:b0:af:c1:f5:fe:57:c6:d5:0b:37:e0:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AE:A9:66:F8:75:40:36:8B:A1:F9:6A:6D:77:FE:48:69:6D:BA:DD
X509v3 Authority Key Identifier:
keyid:82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ba:2f:06:5f:8b:e2:a7:8c:46:22:fc:e1:4c:8f:52:a5:2a:
5f:1c:f8:1e:c0:eb:60:7e:8d:7f:6d:8a:1c:6c:41:30:b9:53:
59:64:37:0a:31:a1:1c:df:57:3b:08:d9:28:a6:82:d1:c0:de:
35:1b:a5:93:52:12:4d:db:c6:9e:63:6f:fb:22:63:46:d5:53:
b4:d4:b9:a1:7b:7e:e8:39:6f:cc:2c:5c:32:fe:f3:69:39:cb:
9d:1c:61:a3:9f:0f:2b:36:38:99:b9:99:3a:e0:1f:70:e4:10:
33:07:7f:72:49:19:99:3d:ee:a6:97:7a:cb:c4:60:97:09:3d:
d1:1a:2f:53:6c:5a:4f:29:05:85:b4:0c:50:9b:74:f6:9c:21:
ab:df:a2:0f:f4:42:4d:44:61:82:b6:56:eb:dc:05:f6:dc:5c:
04:94:90:3f:6b:67:52:f8:79:f9:1f:92:5d:7e:9b:8e:4c:4a:
9a:78:f1:a8:60:04:a7:39:30:f3:f3:b9:78:a5:04:d6:53:fd:
46:78:c2:05:74:1f:f9:de:91:75:23:5d:1c:78:5f:b1:66:98:
d3:72:a2:2a:9b:cb:92:94:25:67:bb:06:d5:ee:39:07:27:4e:
49:38:1e:70:55:28:76:cd:6b:84:35:dd:3c:b2:1f:0f:62:12:
44:b9:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:26 2025 by rpki-client