Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: n0Po/Lw0YvrMjbXotBvaUXfX5oOZB9yehtcNVvTRnoo=
Subject key identifier: B7:C0:6E:D5:E3:EC:8C:2B:20:B9:47:61:E7:AD:F7:AE:C1:61:C8:D1
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 01988F59954339F2069D52E64DC9E0F284CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 0592
Signing time: Sat 09 Aug 2025 15:01:09 +0000
Manifest this update: Sat 09 Aug 2025 15:01:09 +0000
Manifest next update: Sun 10 Aug 2025 15:01:09 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: /FTyXNZesVdEbSmnhrwYasGhCj4eTJGKrlVBn2+MGC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:95:43:39:f2:06:9d:52:e6:4d:c9:e0:f2:84:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Aug 9 15:01:09 2025 GMT
Not After : Aug 10 15:01:09 2025 GMT
Subject: CN=b7c06ed5e3ec8c2b20b94761e7adf7aec161c8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:3c:e6:7d:ab:ab:b1:9c:23:77:d0:1b:22:
a8:4f:d8:db:99:40:30:28:c9:67:be:8e:16:ac:17:
56:dc:12:a7:9f:02:70:f4:f2:3c:76:bc:ab:20:04:
e7:20:91:5f:21:ef:1e:e1:76:2c:c9:44:2b:13:ac:
6c:52:1e:1d:c5:79:d2:b7:4b:5b:ba:9c:b8:12:74:
e3:69:34:e3:b2:71:f7:07:e6:44:4d:f7:6a:83:76:
81:ba:fc:8c:d7:4c:78:5a:2e:0a:6e:6e:dd:fd:6d:
2d:a7:f6:d0:74:48:0e:1a:47:cf:56:9f:b6:07:e4:
36:a4:d1:3f:ef:e0:bc:e2:ef:15:ff:6b:2d:45:d8:
aa:c1:1b:c7:54:81:80:a7:a4:d5:9b:cb:22:d0:e6:
46:42:32:78:f2:59:18:69:b8:62:8c:5b:94:8b:fd:
97:8f:ab:79:49:df:11:ff:c3:7b:dc:65:05:73:18:
fb:0c:83:83:33:bd:14:ac:82:5f:87:8d:3e:46:6f:
fe:70:3c:d4:56:d6:67:ab:8a:ee:bd:78:98:db:f0:
68:4c:a2:01:d1:b2:ff:00:21:74:c7:bf:a4:63:fd:
8e:de:18:f3:b2:fb:65:02:e1:a6:6d:50:24:9c:bd:
6a:a7:93:fb:bd:30:2e:3d:6c:da:a2:90:cf:63:0c:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C0:6E:D5:E3:EC:8C:2B:20:B9:47:61:E7:AD:F7:AE:C1:61:C8:D1
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0c:c5:10:f3:88:fb:fd:74:34:78:98:4f:35:b7:3c:d4:6b:
09:68:30:df:c6:e4:a9:e2:97:ca:fe:bb:b4:87:93:be:19:91:
fc:cc:9d:03:51:7f:91:49:f0:a8:86:ff:94:5f:4f:a3:22:65:
c3:ac:de:9d:c9:a5:fa:84:c7:21:ba:6b:a1:b2:de:16:0b:15:
ad:b7:ff:4a:e0:50:92:3b:d5:9f:43:14:dc:09:a2:b5:ab:66:
7d:ae:60:64:0d:21:dc:ab:a9:45:fe:18:18:55:60:4a:e4:45:
41:8f:3c:a6:7d:5c:d7:79:52:2c:e8:20:89:6c:eb:c7:24:1b:
c3:26:50:73:09:03:a6:0c:c6:35:b5:1f:5f:c6:68:b3:65:8a:
b4:71:03:20:ee:77:b7:d8:f4:8e:9e:a5:c7:c3:ee:a7:6f:7a:
b0:4c:77:a1:17:11:27:aa:1e:b1:27:0b:89:e1:2c:6a:69:8d:
81:5a:cd:94:df:82:80:bf:6d:7b:64:7e:c8:68:3a:2e:fd:8b:
c4:96:00:b4:ba:d8:df:9c:b6:72:ea:43:5e:14:fd:ce:9f:de:
28:5e:5d:51:fb:1d:93:a0:b3:60:02:1d:0a:d0:5f:1d:d1:78:
ab:de:ec:80:ba:b4:5a:e5:5c:2e:05:5a:74:13:d6:76:07:72:
75:35:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:50 2025 by rpki-client