Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
File: GQoJUehsDePU6zKmwyaJECtyel8.mft (raw, json)
Hash identifier: lf9zmIznKwPCcyO4j9gNpjrrZNh9QsGwPXgJVXOIsHg=
Subject key identifier: 1A:76:32:DB:EE:B8:63:F8:29:DD:97:10:F9:3B:CE:26:44:11:8E:B7
Authority key identifier: 19:0A:09:51:E8:6C:0D:E3:D4:EB:32:A6:C3:26:89:10:2B:72:7A:5F
Certificate issuer: /CN=190a0951e86c0de3d4eb32a6c32689102b727a5f
Certificate serial: 01976EF4B64E47A94E78D30A26CA7DCA30B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 15:00:20 +0000
Manifest this update: Sat 14 Jun 2025 15:00:20 +0000
Manifest next update: Sun 15 Jun 2025 15:00:20 +0000
Files and hashes: 1: GQoJUehsDePU6zKmwyaJECtyel8.crl (hash: s0iZXYD0ii8ogig2dsnbZKX5+9za4wV/sbNriv2l7T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:b6:4e:47:a9:4e:78:d3:0a:26:ca:7d:ca:30:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190a0951e86c0de3d4eb32a6c32689102b727a5f
Validity
Not Before: Jun 14 15:00:20 2025 GMT
Not After : Jun 15 15:00:20 2025 GMT
Subject: CN=1a7632dbeeb863f829dd9710f93bce2644118eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:2d:9e:95:9c:67:d4:83:96:26:26:f6:ea:
17:bc:b6:75:ac:f1:7b:49:85:b6:5b:4b:ea:93:e5:
b1:00:cc:38:dd:b9:25:61:9b:f8:99:bd:01:ae:9c:
40:c5:90:da:01:6f:b9:69:c9:cb:27:d0:6b:46:dd:
ac:09:39:aa:cc:cc:7f:23:2c:ef:57:bb:1c:dd:66:
58:0e:b4:3e:44:93:0f:14:77:82:c8:18:bd:a9:a0:
23:ec:0c:1b:90:44:ae:4b:ee:cb:83:0f:e0:d3:01:
c5:88:e9:39:2d:4f:b9:fe:5b:95:c3:cf:0d:b8:75:
da:af:26:67:b7:69:f4:27:aa:f7:0e:89:d3:08:1b:
62:04:7b:24:75:21:13:11:1b:03:0d:0a:aa:0c:44:
87:19:79:6e:1b:b7:e5:82:bb:2b:fe:5e:2a:87:a8:
31:54:ff:b8:1c:b2:db:2c:08:24:de:c2:7c:03:c8:
cc:3b:4a:19:6d:59:f6:c6:29:73:15:f0:65:60:cb:
10:d2:77:c7:90:79:04:b4:47:a3:0e:15:2f:99:9b:
fa:66:24:32:9e:3a:0d:88:45:de:79:b6:26:31:53:
46:55:5d:2d:9a:f0:ea:49:cc:a4:00:69:6c:37:45:
66:7e:f9:ae:7d:da:56:a5:b7:74:2f:aa:3c:a0:92:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:32:DB:EE:B8:63:F8:29:DD:97:10:F9:3B:CE:26:44:11:8E:B7
X509v3 Authority Key Identifier:
keyid:19:0A:09:51:E8:6C:0D:E3:D4:EB:32:A6:C3:26:89:10:2B:72:7A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQoJUehsDePU6zKmwyaJECtyel8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cfb6f7-ec2f-40c4-94ab-0596061e8060/1/GQoJUehsDePU6zKmwyaJECtyel8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e1:7b:ae:43:c1:1b:f5:04:4c:ab:8f:6a:a6:5e:42:cc:c0:
8d:51:7a:16:b2:a6:ad:11:38:4f:1a:bc:93:e7:67:11:30:8d:
85:ba:01:65:81:d9:2f:aa:b5:3a:d9:ec:fa:31:11:19:63:a5:
4c:b3:6d:6c:97:36:4c:18:ba:d5:62:05:62:32:ea:2f:32:3a:
85:7d:54:3d:2e:8a:37:2b:1e:73:e1:99:4d:28:72:93:3e:86:
42:dd:05:8f:26:3f:05:30:60:6f:09:f1:8c:e1:c0:d9:66:6f:
85:ff:b5:72:3a:f7:08:8f:0f:db:53:3e:c6:5d:f4:9d:5e:0b:
cd:7c:70:c8:db:b7:47:6c:eb:b5:4a:ac:de:48:e9:71:dc:42:
ee:83:34:81:63:1e:8c:5d:cc:f1:54:c6:55:07:d2:c8:bd:10:
bc:a7:b6:46:f4:5b:69:32:5a:66:76:ac:9f:0b:ff:ca:b0:2f:
69:08:d5:55:46:3c:21:a2:35:2d:fc:e2:e7:ca:48:cd:51:21:
87:dd:da:8a:df:c7:2c:d4:b1:1e:e2:db:64:cc:f2:28:f2:15:
57:9a:09:13:d4:a4:10:f9:12:e7:19:72:75:55:23:0c:24:76:
a5:43:4d:d7:7a:8f:3e:2e:2d:d7:7a:b1:9d:e0:87:2a:cb:71:
d0:a7:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:31 2025 by rpki-client