Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File: gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier: 1cEaxdkghnHy7esCvHzt0Ufxp9SKZRnrbsORqfGReRI=
Subject key identifier: 64:37:6E:54:23:4C:F6:C8:4C:D7:95:28:7A:12:63:37:B8:41:F1:AC
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer: /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial: 01984B54CDD99D10EB4F6B8D9608D6667E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number: 0F70
Signing time: Sun 27 Jul 2025 10:01:45 +0000
Manifest this update: Sun 27 Jul 2025 10:01:45 +0000
Manifest next update: Mon 28 Jul 2025 10:01:45 +0000
Files and hashes: 1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: 3QetIPb3n+BTxFDIKOD5Sw2CDWG4S7C7U4XikxAVUBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:cd:d9:9d:10:eb:4f:6b:8d:96:08:d6:66:7e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Validity
Not Before: Jul 27 10:01:45 2025 GMT
Not After : Jul 28 10:01:45 2025 GMT
Subject: CN=64376e54234cf6c84cd795287a126337b841f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:1c:4b:f0:82:e4:c6:96:0b:b0:1b:e7:2b:
cd:6f:dd:4e:f1:40:42:67:d5:26:a2:4e:ec:47:21:
32:58:ea:75:c2:f8:aa:6d:43:a4:f5:20:5e:7f:fd:
72:35:e7:25:9d:45:f2:0e:bc:e5:2a:f1:c8:89:0d:
e1:05:e8:d2:ad:c3:34:26:37:4c:e7:e2:9b:f0:18:
3b:f6:0a:b0:0a:54:e7:e8:33:25:56:b9:f5:90:72:
8a:06:09:74:8e:ef:1c:8f:f8:1c:b1:da:1e:54:0b:
32:d6:8f:69:00:03:86:c6:2d:e2:4a:da:9c:60:8b:
74:d3:2a:87:d7:dd:59:fb:b5:27:e4:f8:ba:fb:ff:
ad:2a:ce:f2:1a:5c:59:c4:6d:e2:a4:a5:f3:16:4c:
1b:59:aa:fe:47:ff:31:27:93:c0:a0:92:a3:45:f9:
44:85:e9:46:63:39:09:7b:b9:b1:09:e4:89:dc:81:
60:0a:b1:7d:2f:d8:66:9b:22:e3:43:a2:0b:ed:cd:
bc:49:b6:99:14:68:63:22:d8:a9:f7:88:e8:0b:5e:
02:30:1a:ad:c9:43:de:8b:cd:d7:7e:c0:0b:70:a0:
40:64:94:66:1f:ae:d1:38:11:d1:83:de:73:2f:65:
ef:fa:87:84:12:7f:12:be:8a:de:20:97:66:13:64:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:37:6E:54:23:4C:F6:C8:4C:D7:95:28:7A:12:63:37:B8:41:F1:AC
X509v3 Authority Key Identifier:
keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:62:77:53:f3:75:01:97:9d:bc:bc:a7:11:b6:40:c8:02:
5e:9e:ef:3c:a0:65:1c:3c:82:99:f4:0d:a9:c1:1e:33:74:e5:
78:61:33:0d:5e:e7:af:1b:a3:3c:f0:ed:b3:77:ab:3f:8b:b6:
a4:f6:a7:14:42:f7:87:53:08:b3:92:ff:c9:fe:58:e3:0c:92:
42:9d:b3:b7:4d:78:a1:4a:1b:41:3a:95:fc:36:7f:3e:47:2e:
40:c1:e8:cf:be:32:df:8a:49:71:bc:40:9d:f6:39:09:f6:ef:
55:d6:61:70:a6:72:ce:17:e8:bb:4d:e2:b8:0c:3a:47:96:75:
bb:f8:24:ce:75:a1:e4:de:5c:b9:2a:7a:9d:ee:cf:5d:c4:08:
e2:b8:6b:e6:32:dd:b2:a8:55:46:55:c1:a0:84:f0:62:8c:8a:
4b:2b:17:7d:12:18:5c:25:94:40:3b:33:ee:e2:b9:bc:c7:53:
48:57:77:d8:b1:f8:31:da:8c:a9:58:50:b2:d6:4f:2d:ac:4d:
4a:5d:4c:ee:8b:0d:41:01:fb:9e:bd:7e:21:ff:da:90:87:56:
b9:68:a6:ec:a0:a3:a9:74:6b:df:93:ec:19:45:d3:f6:28:dd:
e7:de:1d:0d:d9:0b:dd:06:98:41:35:fe:f6:b9:34:07:56:e6:
be:32:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:40:26 2025 by rpki-client