Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: Zrf7NftpPutECl+f262cTpM7UDVPqZvZayJIkTzxrDs=
Subject key identifier: 50:93:B5:C3:56:DF:02:68:74:DC:11:C4:79:4B:6C:60:F2:21:44:D4
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 01976C2A909D012C572C6B3E1DBEF9D71FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:00:18 +0000
Manifest this update: Sat 14 Jun 2025 02:00:18 +0000
Manifest next update: Sun 15 Jun 2025 02:00:18 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: Nm8SwQ1rFub4h5yQ9QkM9Y9RL8qNn5jH5PBp3BX/lhA=)
2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:90:9d:01:2c:57:2c:6b:3e:1d:be:f9:d7:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Jun 14 02:00:18 2025 GMT
Not After : Jun 15 02:00:18 2025 GMT
Subject: CN=5093b5c356df026874dc11c4794b6c60f22144d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2e:eb:6d:9c:b5:53:19:d5:e6:fa:76:a7:b2:
fd:d4:7a:c5:84:b0:af:0b:33:ce:ba:6d:b0:82:18:
c8:7c:ce:6e:08:ee:9a:74:f1:91:8b:9c:6a:91:ea:
5f:92:2b:ce:81:2e:7f:66:ce:d1:4a:dd:ee:70:da:
c2:0b:6f:81:21:8a:7c:27:df:06:44:71:ac:97:65:
f3:8e:2f:5f:5c:2f:7a:34:4f:3f:67:86:ac:69:43:
e7:fd:a6:ad:7d:d0:4f:7b:3a:17:53:5d:1c:40:18:
6d:e5:63:6e:e5:17:45:c3:0c:61:3b:15:e2:7e:f2:
bd:e0:20:a7:84:b5:f7:32:57:53:40:46:a7:75:01:
3b:10:ae:a0:29:cc:53:01:5c:a3:39:7b:2c:9a:0c:
db:e3:7c:5a:2a:dc:93:65:eb:93:62:fd:a2:ac:8d:
14:bb:66:44:87:7e:4d:f6:45:d7:d7:7b:74:3b:7a:
68:07:00:1a:4f:5e:17:0e:87:c8:91:a1:09:9f:e8:
de:68:6d:d5:aa:03:df:43:7a:04:08:1a:78:8a:de:
ba:8f:44:d7:46:94:c1:a0:a4:08:e9:b3:44:20:2f:
e9:60:43:b5:b8:38:90:8d:b7:55:5e:0b:01:9d:f8:
33:76:52:99:50:d7:5e:60:27:7d:77:f2:89:75:1b:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:93:B5:C3:56:DF:02:68:74:DC:11:C4:79:4B:6C:60:F2:21:44:D4
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:01:40:7e:d1:bd:ee:d4:cd:5e:fe:68:61:27:03:02:85:b6:
0a:d7:c6:52:5f:cd:79:6b:42:80:e9:c0:66:0a:36:0f:0e:5d:
61:45:36:fc:75:43:56:6f:b9:d6:95:5e:d0:56:ac:56:cb:82:
36:fe:a7:78:b1:40:3b:19:51:91:7a:2c:21:dc:9d:83:f3:03:
5b:c7:40:70:54:da:03:30:be:1d:e0:b1:ea:76:e1:e8:ae:12:
30:e9:1a:77:04:2a:5d:05:29:e8:a5:32:1e:a2:42:6e:6b:cd:
31:9a:f5:2f:5b:78:84:f1:cd:c5:9e:29:7f:b9:e2:9c:c1:24:
d0:ea:0a:bf:a7:cd:ec:35:20:3e:8d:46:ca:bb:9b:10:c3:82:
c0:da:a6:df:a0:62:72:e9:ec:c2:54:11:06:2b:f3:4d:13:d6:
05:e3:9c:a2:94:5e:0f:cb:f9:25:7e:80:0c:bd:5d:12:b6:c7:
91:d8:2b:d1:95:60:b4:53:1a:87:0a:d9:13:a2:a7:ba:75:4a:
08:66:dd:0d:22:23:1b:b2:8a:f7:11:af:21:44:a4:53:10:09:
2f:29:6c:f6:7a:e1:ea:55:0f:64:ee:bb:c5:0e:bb:6b:80:c7:
30:72:a4:d4:f0:a2:f9:30:43:ae:a7:f2:12:40:85:bb:50:97:
e5:0a:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:50 2025 by rpki-client