Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: YOkrpxhSmg7ujH0vMD+7JF8hvXrjT4eFCRAnWRvhVxA=
Subject key identifier: 17:BA:4E:50:0C:7E:7D:0D:69:B7:57:53:3F:61:89:46:C1:28:68:D9
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 01984AAED66F732EE3E332AC1EED97989A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 1540
Signing time: Sun 27 Jul 2025 07:00:28 +0000
Manifest this update: Sun 27 Jul 2025 07:00:28 +0000
Manifest next update: Mon 28 Jul 2025 07:00:28 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: W60HZCGMDSxjTKt/pUe0WW2S62AilHrXuklMbahqdeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d6:6f:73:2e:e3:e3:32:ac:1e:ed:97:98:9a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Jul 27 07:00:28 2025 GMT
Not After : Jul 28 07:00:28 2025 GMT
Subject: CN=17ba4e500c7e7d0d69b757533f618946c12868d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:41:fd:c7:c2:eb:36:26:9d:8a:bd:aa:8c:
73:16:37:05:c2:79:7d:fe:bf:74:05:eb:93:1e:bf:
37:dd:dd:97:e1:90:19:06:91:cf:c5:6a:f2:58:45:
f1:e7:16:10:71:b2:64:68:51:13:37:4f:36:63:95:
cc:05:8d:4f:0b:1d:5e:ec:8a:8e:41:27:44:f3:b1:
e4:a2:73:c3:2b:8e:08:66:4a:59:9a:f0:19:48:53:
9d:42:02:28:46:43:96:f7:a8:d7:b6:54:67:3a:cb:
7f:be:1a:10:79:57:cc:d5:bc:3f:43:3f:96:be:e6:
e8:fc:31:6f:ed:98:15:b2:8d:68:9b:39:e9:18:9a:
43:a6:a0:2e:1c:83:c3:34:8e:ce:22:00:37:bd:0c:
c6:c8:7e:21:7b:4d:4e:01:6f:53:9a:0c:54:0c:02:
c2:25:db:d6:4b:b4:65:55:89:68:85:b1:83:a4:3c:
05:45:53:fa:8b:b4:51:f1:5f:4d:65:11:57:99:08:
fe:a7:4b:e3:06:48:65:0c:72:89:21:05:bb:9b:a1:
53:ca:dc:87:0c:0c:35:f5:2a:5f:1f:77:1d:c6:ac:
5c:21:07:36:f7:7e:7f:0b:ce:44:a6:7c:db:1e:83:
b9:ea:01:64:e2:e8:ea:07:df:ae:f0:3c:d1:49:f7:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BA:4E:50:0C:7E:7D:0D:69:B7:57:53:3F:61:89:46:C1:28:68:D9
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fb:65:f7:65:34:d2:db:02:86:61:dd:7d:9b:61:e7:c3:8c:
8f:83:fa:78:11:22:3e:28:19:31:93:28:77:65:1b:de:a3:7c:
67:4b:55:9d:07:a5:d6:18:17:a5:44:6b:47:d4:43:32:82:73:
b4:af:9a:3c:bd:22:da:e0:ff:c3:79:69:dd:93:0e:d4:a6:9a:
db:70:48:63:1f:f5:0e:99:a8:c6:22:76:29:7a:2a:99:22:a7:
1c:bb:12:2c:31:0a:71:62:4d:84:12:9d:8e:36:80:ff:da:b9:
53:ce:14:21:fa:c1:eb:a4:8e:b3:1c:3c:8d:0a:9c:d3:e0:a7:
fe:7b:1a:a0:ca:73:29:b7:bc:01:68:69:90:41:30:38:74:18:
01:46:b6:64:05:12:ba:9d:53:45:d9:d1:8c:52:29:2a:ba:4a:
7d:17:06:9d:a7:a9:1e:8c:dd:db:8c:18:e2:0e:f2:54:c5:77:
ec:e3:a0:8f:6f:73:ba:42:0b:7c:3f:f8:38:02:f6:2e:ee:66:
7d:65:87:89:a3:c0:77:6f:ee:f8:52:97:0c:99:32:5f:07:b7:
fb:13:19:1d:11:92:2d:b0:80:50:cd:6b:2f:3f:d3:b3:38:87:
b6:a2:d5:e5:b3:c5:09:5c:a1:d6:bb:80:43:ec:72:d5:fc:17:
e1:1f:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:54:42 2025 by rpki-client