Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: O2JbUOmaov5EvXfQV+6TJ3DxuN7juAsqIG2UjWZZ3xY=
Subject key identifier: 1F:0B:E5:DB:44:98:5D:5C:55:EC:FB:D6:FA:09:E2:99:D1:0E:19:B7
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 019887A00DDA115E875C0BA365ADBD92E09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 06CF
Signing time: Fri 08 Aug 2025 03:01:09 +0000
Manifest this update: Fri 08 Aug 2025 03:01:09 +0000
Manifest next update: Sat 09 Aug 2025 03:01:09 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: GsRMDhbLCEXuMhe+ZCOnGyl/++Fi6On3yW9909JNQgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:0d:da:11:5e:87:5c:0b:a3:65:ad:bd:92:e0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Aug 8 03:01:09 2025 GMT
Not After : Aug 9 03:01:09 2025 GMT
Subject: CN=1f0be5db44985d5c55ecfbd6fa09e299d10e19b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:2d:0c:e0:e1:5a:60:53:b3:60:40:99:15:
21:a3:28:84:67:70:a6:f6:bc:a7:af:91:ab:9c:e3:
0f:84:62:2d:93:12:76:63:76:08:58:7f:c7:fb:28:
2a:bd:4e:5c:1a:b6:78:e4:92:17:39:7b:74:73:ca:
59:e5:da:42:1c:31:50:c2:4c:d7:47:e7:75:78:8f:
f2:bc:1f:c9:13:42:86:42:72:ef:f5:38:63:bf:bc:
a5:3a:46:2d:57:c3:c7:49:2f:c5:8a:9b:f3:84:9a:
cf:50:97:54:63:02:d4:ec:28:04:69:e7:d6:1b:ed:
aa:15:23:e8:c2:14:f9:37:1b:d5:9b:68:ec:c2:b5:
bb:ab:d5:d3:21:d2:af:63:ac:24:81:3b:18:e1:a2:
5b:9c:9f:3d:ed:5f:a3:b6:ce:ec:8a:19:5c:bb:ee:
c4:7e:41:19:7b:99:1e:04:cc:b3:66:aa:38:51:30:
1a:f9:54:0f:eb:a7:97:d1:2e:fb:8a:72:c5:22:eb:
76:6d:c8:c9:a4:0a:83:4d:94:82:5e:fe:ae:de:0c:
b3:8d:9f:5f:48:82:ca:8f:5f:fa:2b:11:8f:c1:ce:
c2:6f:e8:75:77:c2:68:ef:d0:c9:d1:46:a6:05:7b:
77:82:0d:53:91:5b:4f:df:48:5d:22:a9:f0:99:77:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0B:E5:DB:44:98:5D:5C:55:EC:FB:D6:FA:09:E2:99:D1:0E:19:B7
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6b:d7:3c:36:c9:05:98:39:2e:cc:70:9d:08:82:e1:9e:f3:
ad:bc:f0:98:fe:44:51:4d:8c:e4:92:3b:a3:b3:43:ff:b1:21:
f5:44:9f:b8:9a:1f:26:b3:65:64:af:c2:d6:61:de:dd:3f:7e:
22:a9:c6:6b:3e:ea:85:93:fe:d0:3c:31:a2:bf:b3:98:97:9e:
ac:c0:b1:2c:be:99:d0:56:84:5f:5c:00:85:52:95:11:0f:0c:
ad:d3:30:31:31:1e:61:a8:8c:70:e5:4a:89:18:ec:a4:57:fa:
fb:66:71:3e:0c:16:80:1c:e3:68:f2:c6:8d:55:6d:1b:03:aa:
f1:95:c5:0a:13:9f:60:b3:ce:ca:05:9c:71:7d:91:7b:55:ab:
6d:90:6f:86:15:bd:35:30:75:d4:36:ba:d8:76:12:81:a4:dc:
0b:f6:0f:eb:c1:10:d0:89:77:88:39:f1:ad:d6:17:8a:bd:f1:
7a:55:22:c0:4b:5f:ac:83:75:dc:c5:87:1d:ff:1b:dc:72:c3:
1b:38:35:8a:08:b5:69:35:5e:d2:3f:93:99:e2:c2:17:8e:d9:
e2:01:f3:ba:39:a2:4b:35:96:7f:91:51:76:47:a2:71:5b:27:
77:80:0d:70:88:38:9e:82:68:3c:83:f9:5d:e7:43:7f:b0:a1:
b5:48:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:29 2025 by rpki-client