Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
File: GhREUllzKqZzbCSCNEZZR_wjdNA.mft (raw, json)
Hash identifier: O3xQS3wvIjL7pM8PmRJI/L8FkNCOkDGPq0CeQbZWzpA=
Subject key identifier: 45:75:70:6C:6A:BE:3F:72:80:69:D3:3A:2A:AA:9E:52:25:5B:BB:17
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 01984965AB4BF1C8D5985DB273AF186815A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
Manifest number: 0C7D
Signing time: Sun 27 Jul 2025 01:00:56 +0000
Manifest this update: Sun 27 Jul 2025 01:00:56 +0000
Manifest next update: Mon 28 Jul 2025 01:00:56 +0000
Files and hashes: 1: GhREUllzKqZzbCSCNEZZR_wjdNA.crl (hash: pZ9ZbYppn2GSHtIIU0SfItBIgh5ixEOjQJ/2s/fjR84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ab:4b:f1:c8:d5:98:5d:b2:73:af:18:68:15:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jul 27 01:00:56 2025 GMT
Not After : Jul 28 01:00:56 2025 GMT
Subject: CN=4575706c6abe3f728069d33a2aaa9e52255bbb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:4a:8f:4b:f3:c9:0a:26:4d:a4:1e:9a:9f:
98:ee:f3:f6:08:7b:90:10:42:6c:95:d1:cc:d3:95:
54:63:c7:47:c1:e6:36:f7:1f:9f:96:10:e2:2b:56:
f8:8d:c4:2e:8a:4a:f7:e9:31:4c:2f:84:b8:8b:35:
99:21:1d:94:cf:2e:63:e0:3e:e9:94:2e:b7:b1:ae:
40:1c:a6:d4:7f:42:05:c0:56:4d:f0:68:65:62:72:
8c:dd:ec:72:af:08:72:0c:d7:82:f3:c4:49:4d:d8:
1c:10:55:49:5a:8c:46:6b:ef:f9:cb:bb:14:aa:e7:
65:63:2b:a9:b8:19:87:58:e6:8d:56:1d:33:59:6b:
b4:65:ca:ba:0a:7a:a0:87:f1:e9:8b:49:f1:69:fd:
68:8d:cc:39:3e:f3:1e:89:01:df:03:68:28:ed:10:
54:c1:13:82:95:57:ae:74:44:93:1f:7d:08:8c:2b:
f2:68:cd:17:d3:e0:df:62:0c:8c:73:95:af:ea:51:
b3:9d:46:93:04:2f:89:14:db:48:a9:79:c1:71:03:
fc:90:7d:90:ae:53:39:df:c5:a1:e4:bc:21:83:7e:
c9:1d:72:89:69:88:ed:07:0d:38:41:7a:b2:6b:d4:
84:c5:d3:8a:31:e2:21:97:7e:c2:7d:bf:e0:f5:e2:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:70:6C:6A:BE:3F:72:80:69:D3:3A:2A:AA:9E:52:25:5B:BB:17
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c9:a0:bd:06:a9:83:15:30:05:3d:68:d5:9c:56:27:11:26:
61:9f:64:36:8b:a3:43:20:8b:c9:65:31:9f:5c:a7:13:77:ab:
97:02:f2:c5:af:f5:1e:ef:bf:84:7d:7e:94:ce:70:63:c6:6b:
a6:e8:6f:67:9f:9f:66:0e:60:53:da:b7:1e:56:6b:49:db:8c:
f9:d0:09:1a:74:9e:95:f8:bd:bc:65:a2:ff:86:6e:a5:57:16:
b6:56:4d:b3:b9:db:d8:91:e7:fd:d2:6d:ed:70:ea:58:b0:b3:
9a:c3:9f:09:f9:06:0b:2b:40:e9:01:39:f7:57:c5:bd:d8:1a:
de:f6:ee:45:5b:c4:7c:4e:2b:7b:ad:11:ce:c1:4d:ed:5b:7f:
bc:09:5d:68:61:d1:4d:46:11:f9:0d:86:92:95:e2:c8:f9:6f:
c2:ae:cb:d7:31:6a:51:13:f2:f8:28:10:d4:53:30:c4:47:2e:
0b:e2:22:90:64:6f:9c:12:4f:05:33:ee:6f:2a:3a:84:1d:2c:
48:e1:a6:5b:8b:da:dd:1e:30:6d:4d:a0:26:62:f3:7e:e9:24:
23:63:f2:e0:ae:21:10:ca:e1:6a:d4:8b:6d:02:90:60:bc:21:
80:76:fe:cb:6e:63:50:ff:6e:ff:e3:ee:8f:aa:0a:c2:20:8c:
fa:ea:cc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:12 2025 by rpki-client