Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
File: GHrmJafreY8V_B5hw-E3AaNW_hY.mft (raw, json)
Hash identifier: sgNUIoJ1A4zANHp+z8obkHubpp1q7HXlMKlAPKtyBmI=
Subject key identifier: 82:DC:CC:C2:25:83:E7:05:97:C5:A8:0B:F2:B3:46:EA:15:14:3E:76
Authority key identifier: 18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
Certificate issuer: /CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Certificate serial: 019826A3C223D921F523B015E47BC1AFA5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
Manifest number: 0E
Signing time: Sun 20 Jul 2025 07:02:02 +0000
Manifest this update: Sun 20 Jul 2025 07:02:02 +0000
Manifest next update: Mon 21 Jul 2025 07:02:02 +0000
Files and hashes: 1: GHrmJafreY8V_B5hw-E3AaNW_hY.crl (hash: 12Su3mh73WR9VBptbkFc1XvOiHmM+4+yE0apttxozP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a3:c2:23:d9:21:f5:23:b0:15:e4:7b:c1:af:a5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Validity
Not Before: Jul 20 07:02:02 2025 GMT
Not After : Jul 21 07:02:02 2025 GMT
Subject: CN=82dcccc22583e70597c5a80bf2b346ea15143e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:f8:f0:8a:6b:ff:95:f5:67:c1:7c:2e:06:
6f:ad:87:5a:0d:06:00:94:29:67:cb:c1:7d:fb:bf:
2a:ed:6d:3b:58:9e:12:7e:d4:05:90:b2:4f:f7:6e:
3d:df:19:06:74:52:1f:49:08:0a:4d:a6:16:2f:0e:
9e:3d:27:2f:27:b3:7f:7d:a2:ab:05:c8:86:25:8d:
64:45:58:5a:0e:62:84:4d:83:cb:a2:a7:b9:2d:91:
7b:40:44:3c:ed:9f:99:7d:e5:a5:65:a5:01:88:14:
da:e1:03:f8:7e:c0:e0:d8:a2:a2:f5:cf:8a:04:51:
82:76:09:b4:bb:c5:38:aa:02:5d:69:85:09:65:fd:
31:93:95:a9:72:38:8f:a7:f8:ef:5e:bc:46:2e:9c:
98:b3:29:bf:00:d3:de:e3:07:95:f2:25:b3:e6:70:
5f:de:b2:3a:62:e4:2a:28:a1:58:65:87:60:d2:28:
68:15:c8:d8:cd:4c:1e:3e:ca:2a:14:39:99:93:7d:
59:eb:d4:28:3f:8d:65:80:7b:ed:7c:72:31:95:05:
ce:d8:1e:2a:9a:75:bb:8d:74:96:b4:aa:d5:45:d2:
cc:97:3e:42:5f:4c:96:d8:f9:64:fd:7c:7e:f6:36:
44:50:26:66:36:63:1e:db:63:55:6d:cd:60:c5:46:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DC:CC:C2:25:83:E7:05:97:C5:A8:0B:F2:B3:46:EA:15:14:3E:76
X509v3 Authority Key Identifier:
keyid:18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:07:96:04:cc:53:5d:03:78:f5:22:90:57:a9:51:05:61:7e:
9d:e1:7a:d7:10:b2:3e:f1:fa:ad:e1:d3:7c:f8:46:7d:87:0b:
4c:d2:84:de:ea:8e:37:74:02:da:3b:d2:c9:81:65:2d:7c:9b:
9d:ee:f9:0c:d4:db:6e:84:27:8c:eb:54:00:7e:2d:de:f7:65:
f7:43:3e:33:eb:7e:7e:18:af:83:1c:fd:67:a5:74:0f:f7:85:
cd:13:3e:14:07:db:75:99:97:87:53:aa:54:68:72:38:2e:d7:
0e:bd:cb:38:da:7c:84:63:99:8d:c6:8b:91:e7:4e:77:c7:51:
ac:33:e3:cf:a0:82:51:c0:cb:93:2a:23:97:de:52:d8:80:c2:
cd:b1:e4:4b:b5:a0:07:9c:0e:ed:93:46:fb:52:0d:3e:32:38:
3a:77:85:7e:7d:71:a4:b0:07:c7:3f:da:64:3e:e2:94:02:37:
ed:e0:25:ec:2a:cc:d5:67:7a:8c:36:d9:34:70:45:56:17:c4:
eb:ec:a7:28:fd:4d:c5:b1:6a:c9:10:08:2c:8b:94:5f:a6:ff:
04:6a:2e:60:80:68:b1:13:17:12:82:51:bd:75:ae:16:b0:07:
c6:78:c7:23:fe:a3:fe:a6:61:1a:b6:e3:1d:ae:78:6c:c6:84:
06:8b:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:28 2025 by rpki-client