Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json)
Hash identifier: gvQrWjVdjIanXbai1X88fpdO3sAJOv9WeGFjXTlP5oA=
Subject key identifier: 5B:69:DE:32:A1:56:42:A5:08:A9:3D:5B:9A:C6:D3:B6:81:EC:77:F9
Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Certificate serial: 019844E3C999F7C4EDAD7335D17E05898937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
Manifest number: 08C6
Signing time: Sat 26 Jul 2025 04:00:35 +0000
Manifest this update: Sat 26 Jul 2025 04:00:35 +0000
Manifest next update: Sun 27 Jul 2025 04:00:35 +0000
Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: da0DuMsPQDGU4VZgxFRh2dhmDkMbNc5FOmDCYXkYGJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:c9:99:f7:c4:ed:ad:73:35:d1:7e:05:89:89:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Validity
Not Before: Jul 26 04:00:35 2025 GMT
Not After : Jul 27 04:00:35 2025 GMT
Subject: CN=5b69de32a15642a508a93d5b9ac6d3b681ec77f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:4a:80:f6:27:25:48:d7:14:15:98:a5:34:
d9:e6:94:2c:c8:2c:03:ac:c0:22:3f:69:95:e0:9b:
4f:0f:e1:87:6b:72:37:f9:58:30:f7:03:d3:0f:e6:
6a:86:2d:c4:1c:f8:11:77:27:43:26:4e:a5:63:5b:
5c:99:49:e9:d5:de:89:d9:c9:ed:80:e6:58:62:55:
9d:bb:6e:90:36:74:69:73:f8:71:f0:61:7c:c6:97:
8d:3c:0b:c9:ae:ce:8f:ff:5a:ac:38:74:52:81:66:
aa:8c:78:4c:44:5e:6e:af:10:48:e0:35:eb:53:9f:
c5:b3:db:4e:a3:68:cd:a6:a7:d5:a0:2d:65:eb:23:
68:67:04:69:7f:34:0f:6c:72:ae:fb:75:02:59:b9:
dc:8c:a9:44:f8:5a:26:b8:f5:56:1b:bb:4e:37:41:
8e:87:c7:03:ce:af:0e:a8:d2:2e:01:f0:67:97:2a:
61:86:46:ce:77:0a:47:81:a6:68:37:a7:c5:b0:b7:
5d:86:f5:a8:fa:a9:7e:b7:e5:68:7f:b8:1f:75:3a:
9b:a1:df:6b:9c:e0:64:e5:9f:be:81:51:07:4c:fd:
c0:2d:65:a6:61:7b:35:3f:4c:4d:20:a7:07:92:85:
52:95:3b:3c:43:de:99:3d:91:71:b6:46:46:5e:c4:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:69:DE:32:A1:56:42:A5:08:A9:3D:5B:9A:C6:D3:B6:81:EC:77:F9
X509v3 Authority Key Identifier:
keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c2:5f:5f:a3:46:44:cd:ca:f2:8f:f6:38:07:fb:c8:5a:a9:
eb:44:93:5e:6d:07:9d:d4:50:0f:db:b7:2f:80:16:6a:07:04:
81:4b:a5:ef:88:ba:92:c0:9f:3c:37:50:b4:8b:e3:78:a8:b0:
b0:81:17:08:9c:d5:58:6e:ad:ff:ed:11:46:52:15:5c:d9:23:
75:a5:cb:38:03:1a:96:27:09:53:5c:03:9b:34:f0:da:69:da:
d4:16:2e:5c:05:f7:f6:3a:a2:88:b9:25:56:61:17:7e:cf:7f:
c2:c8:85:3c:07:c7:86:f8:10:68:9d:c4:8a:2d:40:00:88:40:
11:6e:e8:ae:f2:87:ff:7f:38:7e:44:ac:bc:dc:a3:22:62:93:
9b:69:d8:0d:d8:07:6c:c3:30:fe:28:df:bc:45:75:69:2c:e4:
fb:c6:3a:b8:4e:e2:1a:39:84:22:52:86:ba:e8:32:60:95:da:
a7:89:39:ca:77:55:c7:bf:6c:62:3d:b5:d0:7c:de:74:9e:20:
29:5b:ad:c5:0b:9d:fe:0e:12:d5:3f:2c:21:6d:7f:5e:ac:e1:
43:75:0c:76:6e:9d:47:19:f9:63:70:dd:82:2c:16:1e:74:f9:
db:38:31:09:ec:ef:61:82:96:ad:ec:26:da:5d:f7:b0:84:7e:
10:f7:44:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:30 2025 by rpki-client