Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: x0t7vtGZtvoSlz4JjoetgwbNNa003mKtGqOUahMs/Xs=
Subject key identifier: 8F:ED:18:C1:61:68:E2:82:D1:7A:26:93:54:D3:F8:58:5E:D8:BA:5B
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 019851FA2BD1F89700CEF9A8A5C99F3A83AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 133E
Signing time: Mon 28 Jul 2025 17:00:06 +0000
Manifest this update: Mon 28 Jul 2025 17:00:06 +0000
Manifest next update: Tue 29 Jul 2025 17:00:06 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: 9DZk2rb9/WK5Iv8FwhrC/++U3tRY1pZjxLYCtJXdi28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 17:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:2b:d1:f8:97:00:ce:f9:a8:a5:c9:9f:3a:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Jul 28 17:00:06 2025 GMT
Not After : Jul 29 17:00:06 2025 GMT
Subject: CN=8fed18c16168e282d17a269354d3f8585ed8ba5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:7b:e7:7c:4a:4e:26:b8:c5:24:f2:10:7c:
79:59:7e:b0:a3:4d:30:82:ef:73:3d:f9:9e:af:24:
36:6f:41:06:e9:27:d4:6d:a8:30:69:3f:84:34:bf:
b0:a8:43:c8:37:dc:b0:ec:aa:5b:1a:95:51:48:f7:
11:e0:14:b5:22:41:d1:e2:a6:a6:9f:68:bc:0a:ba:
45:de:6a:b6:53:fd:8c:53:c9:31:5a:91:f5:50:d1:
74:ba:49:27:85:9d:d2:9a:c8:9f:60:53:67:78:91:
36:80:b9:40:9d:a7:22:d9:ac:d3:c7:cc:d4:e4:1a:
be:cd:13:f8:e1:5c:88:42:fc:f3:1f:7d:86:33:45:
3c:94:07:8a:7b:e2:26:05:b4:74:22:6c:23:bb:69:
78:20:96:d2:c7:ba:fe:0a:a0:c0:4e:c4:18:e9:2d:
47:09:8f:e7:59:07:18:db:f5:02:47:17:0c:d9:ac:
09:93:7d:b6:e8:1e:04:3a:19:f2:99:d7:0e:0d:a8:
11:9c:cf:f5:30:3c:2e:7e:14:a9:04:05:a8:c5:33:
33:37:98:2a:0e:e7:82:3c:24:b8:21:60:68:04:c7:
16:e1:de:2b:47:cd:5a:0a:53:3e:75:a3:cd:c3:f0:
7a:53:49:91:9f:51:59:c2:27:4d:2d:9d:a1:67:10:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:18:C1:61:68:E2:82:D1:7A:26:93:54:D3:F8:58:5E:D8:BA:5B
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:4a:69:78:77:02:f4:d7:c2:5c:5c:22:95:fb:f2:9d:2e:f9:
77:9e:2d:b1:ca:d5:1b:5e:21:42:fa:7b:cd:30:67:68:5f:c0:
7a:c2:b0:93:bc:eb:ea:b3:a0:58:e1:d0:98:2a:0b:42:68:39:
b2:15:5a:99:b8:25:3c:de:be:05:1d:f1:68:73:85:b6:29:32:
bd:ce:be:4b:a7:02:9e:73:1a:7b:14:c2:7d:c6:af:29:5b:ea:
60:9e:a5:23:e1:49:d8:ea:3f:87:27:ad:65:59:54:db:13:49:
48:27:52:54:c2:08:bc:07:c9:db:af:7e:3c:b5:a6:3c:9c:5c:
b6:c5:b7:1a:2a:3f:be:f6:8f:5d:58:7a:33:fe:e9:47:4e:01:
a2:df:77:e1:21:f2:31:b1:5b:65:32:90:08:15:bc:77:98:d0:
1f:c4:df:2e:6a:27:88:71:89:0c:38:9c:d2:3d:7b:93:77:c3:
48:f8:10:d7:f9:31:01:c8:cd:70:b6:b0:0b:99:87:eb:3f:5c:
2f:9a:cf:e8:3f:07:13:5c:18:4a:6e:0b:04:00:a5:b9:15:56:
29:50:a2:1d:7b:70:c9:39:a7:2f:22:88:90:48:11:79:33:3e:
48:5f:0f:f9:ac:b2:e9:c0:f2:61:73:83:38:4b:a1:46:86:c8:
88:34:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:35:02 2025 by rpki-client