Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File: GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier: u2I2g9P+rmf7UOcU1w6L8knWFAVelFLq7tuamqbdco8=
Subject key identifier: 89:59:63:B5:2A:EA:53:31:CD:06:6A:FA:40:63:7E:60:F5:92:F1:64
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer: /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial: 01976961B22B552D524235FDFBCE21A754E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number: 151B
Signing time: Fri 13 Jun 2025 13:01:39 +0000
Manifest this update: Fri 13 Jun 2025 13:01:39 +0000
Manifest next update: Sat 14 Jun 2025 13:01:39 +0000
Files and hashes: 1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: WtPu6ob+IlCqpGntztxi/LBMPEXvU//nGywFn4D/y/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:b2:2b:55:2d:52:42:35:fd:fb:ce:21:a7:54:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
Validity
Not Before: Jun 13 13:01:39 2025 GMT
Not After : Jun 14 13:01:39 2025 GMT
Subject: CN=895963b52aea5331cd066afa40637e60f592f164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:8a:7b:e1:ee:93:22:94:97:68:90:06:a6:
62:6f:70:27:de:7d:af:a4:b7:f6:6e:bc:c2:b0:40:
9c:33:b9:6c:2c:c3:55:cc:09:f2:3e:a3:29:c4:40:
3a:92:00:cd:12:a9:dd:31:6b:8f:80:e6:6d:5c:d4:
52:a0:54:6c:1c:e0:5a:a5:23:32:84:1b:3b:53:cd:
a3:81:92:88:a8:09:93:48:0b:ba:6d:f6:21:93:ea:
95:0e:d9:84:89:2b:2b:c5:1a:a2:f4:ba:2d:e5:5a:
62:ce:69:91:52:9e:b3:3c:49:e6:89:91:b5:86:53:
dc:bb:97:1e:78:db:88:95:4b:3c:75:66:64:89:3b:
8e:72:60:08:93:83:90:77:b9:b0:fe:26:1a:38:c5:
15:d7:ce:8a:82:06:86:94:61:27:79:0a:f7:a8:27:
21:d2:ba:58:02:2d:51:52:81:83:a4:71:0e:5f:4a:
cb:6d:da:3b:e3:a5:3c:74:8c:0e:f2:98:d3:15:c8:
7b:cb:20:9c:82:f9:52:9d:fd:bb:0d:53:d3:c9:2e:
5b:c8:0f:f3:ed:0a:07:31:12:36:a5:e4:55:11:85:
6d:e9:ec:01:55:24:a0:1e:31:be:21:7e:dd:b5:ac:
8d:62:c1:41:20:e7:4c:14:0f:1b:40:0c:c8:c5:27:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:63:B5:2A:EA:53:31:CD:06:6A:FA:40:63:7E:60:F5:92:F1:64
X509v3 Authority Key Identifier:
keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d2:6a:94:11:94:26:0a:d7:df:30:9a:19:cd:3f:dd:35:1b:
07:e0:1c:93:ca:51:81:03:a9:a7:21:9e:e6:95:ba:f3:34:9d:
bb:2f:5b:52:72:bc:5a:33:ec:a9:6f:a7:28:b3:75:1a:8d:09:
ef:14:c2:6f:1f:03:bc:66:da:0b:97:94:58:b4:d8:ed:31:18:
e8:ef:cd:0d:e7:8d:25:a7:27:eb:25:8c:67:37:87:b9:2e:08:
00:56:86:da:c9:9c:ca:72:49:cd:1c:73:67:3c:aa:5f:d1:2b:
36:e5:cd:ef:a4:03:15:36:c1:b6:83:8c:f0:8d:ee:ff:9a:1a:
a7:6d:74:7a:99:bd:73:b9:28:b5:c4:9c:cb:e7:fb:e6:19:ce:
80:06:ca:e1:09:91:f2:44:2b:fa:e8:cf:36:01:ad:d8:e8:19:
6b:b2:74:ed:e7:e1:21:a8:53:e5:1f:f4:0a:37:e3:fb:02:18:
fc:e7:7d:ee:c1:e2:bb:69:3e:4d:5d:29:e3:47:f8:3a:da:00:
bf:07:07:06:9e:b9:8d:1e:34:85:9b:4d:ce:26:a7:52:02:08:
47:17:84:24:23:f3:17:eb:3f:bf:d9:e0:0f:f9:e7:ac:4d:56:
fc:ea:7c:32:4d:f7:8b:ee:7d:3c:6a:bd:94:a6:60:1c:77:8b:
00:9e:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:51 2025 by rpki-client