Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
File: GHRUZrThRoMLlit0kG2xxtCB_HA.mft (raw, json)
Hash identifier: qbCe4ntMOF0GhEGfsI0tuOxb8dZTbCzSnAHXphv2NQE=
Subject key identifier: 9A:4A:2E:EB:51:06:75:4D:6E:AF:0C:C7:CB:D4:67:8E:E6:F0:3E:2E
Authority key identifier: 18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
Certificate issuer: /CN=18745466b4e146830b962b74906db1c6d081fc70
Certificate serial: 01988F59F6F4BBCFC9472BD1C35600758E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
Manifest number: 15EB
Signing time: Sat 09 Aug 2025 15:01:34 +0000
Manifest this update: Sat 09 Aug 2025 15:01:34 +0000
Manifest next update: Sun 10 Aug 2025 15:01:34 +0000
Files and hashes: 1: GHRUZrThRoMLlit0kG2xxtCB_HA.crl (hash: L7rrKXpPUQnSMKPFB960tAvndIKqXjZwbqrBhP3naSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:f6:f4:bb:cf:c9:47:2b:d1:c3:56:00:75:8e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18745466b4e146830b962b74906db1c6d081fc70
Validity
Not Before: Aug 9 15:01:34 2025 GMT
Not After : Aug 10 15:01:34 2025 GMT
Subject: CN=9a4a2eeb5106754d6eaf0cc7cbd4678ee6f03e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:cb:89:bc:4b:b2:c7:5a:f6:13:0d:84:50:
8e:36:7a:c5:0b:f0:98:7d:b4:6d:19:01:93:87:a5:
1a:40:d2:9b:07:a7:89:4d:c4:65:e1:ad:8c:8f:a9:
2b:18:18:96:00:cf:3d:04:aa:98:15:fd:b7:a7:02:
60:70:98:ce:a1:8a:76:9b:d9:5c:3f:8d:6b:40:29:
a2:b6:06:bd:b9:89:3d:f3:e7:78:6f:33:12:24:d6:
7b:f6:f2:cc:50:a3:0c:9d:ca:7e:71:a8:a0:4b:1f:
7d:19:2e:32:3d:e2:95:57:61:01:e7:ad:4a:2b:7a:
ce:a4:43:f0:32:bc:d5:37:48:15:90:31:f9:f7:f4:
ac:4c:92:52:73:3f:af:4c:9d:e4:17:c7:d0:00:79:
f0:78:34:52:0f:53:64:7b:7f:47:0e:6e:46:68:cd:
ad:08:94:04:5c:32:a0:9f:f9:69:6b:c6:b1:13:8c:
78:9d:bc:94:1f:ec:2f:86:1b:04:a6:6d:bc:45:60:
a0:96:4b:aa:e6:6e:34:d7:22:4f:7e:88:ef:40:7e:
81:d6:f8:31:c7:85:2b:3a:f9:1e:30:5d:ae:91:0e:
14:d2:a8:3d:b9:cc:5c:35:96:58:4c:6d:ec:26:04:
d5:96:64:4d:90:50:ca:6a:0c:74:e8:a4:a6:96:4f:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:2E:EB:51:06:75:4D:6E:AF:0C:C7:CB:D4:67:8E:E6:F0:3E:2E
X509v3 Authority Key Identifier:
keyid:18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b3:07:9e:3c:b3:1e:09:e4:1d:37:f7:e7:53:cb:82:f8:0b:
5e:6c:b9:c6:9a:77:f4:9f:9a:75:5d:08:e2:7f:aa:ae:00:92:
0c:3b:39:28:ca:61:57:f6:06:1d:49:ca:15:de:70:8f:d2:7a:
b9:93:c8:e3:cb:0e:10:9e:2c:0d:8a:f6:5c:ad:fe:ec:ad:69:
13:71:9d:cc:81:0f:81:68:31:16:be:40:fe:76:48:e5:34:20:
37:53:f8:7f:c8:d3:9e:43:c3:5d:e2:d1:b2:0c:2c:a3:27:d4:
3e:48:92:21:fc:40:75:71:39:89:26:30:f8:f4:4a:12:2a:44:
1b:4e:d5:fc:28:67:a5:af:78:f9:24:5d:71:49:e6:10:25:de:
3a:83:f3:24:80:a9:79:94:52:cc:f0:40:32:e3:d6:c5:81:48:
84:dc:01:49:a3:b1:2d:22:f8:9e:cb:8d:27:4c:1b:4d:85:81:
08:54:a2:c1:a9:9f:6f:72:93:1e:c0:6a:e8:d8:fb:63:9c:c1:
27:33:1d:c2:cb:39:c8:38:35:24:11:9e:05:8a:c2:f6:78:f4:
56:d8:7b:63:4f:14:38:32:35:b1:ab:c5:fd:44:83:be:1f:1b:
d3:e8:26:58:37:4e:25:55:54:02:fb:f2:64:8c:2f:c4:12:15:
fd:55:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:13 2025 by rpki-client