Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: s7R4WcFGVRM6Nos74eKwqvurHllSXzAPyvTFsen/fUM=
Subject key identifier: 43:01:99:18:2F:BD:A1:9E:75:29:C5:A8:5A:05:87:5E:24:F3:5C:BE
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 019847774671E8222BCF44C49F079D4854A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:00:55 +0000
Manifest this update: Sat 26 Jul 2025 16:00:55 +0000
Manifest next update: Sun 27 Jul 2025 16:00:55 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: pab3E4pNpJ3RffGl1v4SFtmswBJG0xEpX5hX4TF2zR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:46:71:e8:22:2b:cf:44:c4:9f:07:9d:48:54:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Jul 26 16:00:55 2025 GMT
Not After : Jul 27 16:00:55 2025 GMT
Subject: CN=430199182fbda19e7529c5a85a05875e24f35cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:b2:5c:65:28:b2:68:62:f3:7e:fd:6b:7e:
69:70:13:f2:a4:53:be:22:e6:be:15:d5:22:4b:ea:
22:c7:53:9e:2f:6d:47:3f:cc:52:3e:e0:c4:17:f8:
29:27:16:54:05:a3:31:2f:17:ea:fb:82:cb:2a:14:
93:7b:c2:d0:48:2e:c0:03:c2:56:0c:72:ad:ae:f8:
53:b3:a0:dc:c0:f3:07:e6:a3:b6:67:8b:87:d4:13:
d5:2f:1d:84:13:bf:d9:3a:25:c5:00:24:8d:01:21:
63:c0:3d:9b:91:b1:77:f3:c7:74:6f:70:70:5f:92:
c6:65:92:b7:14:95:57:f3:a1:8e:39:14:fc:de:a6:
43:1d:1d:47:13:d1:93:5e:88:a4:da:7f:cf:77:13:
ff:b5:66:f2:71:cd:4c:8a:70:ed:12:36:f4:86:36:
ec:2a:fc:6d:eb:f6:53:a5:26:1a:d5:d8:b3:5e:cc:
fd:b1:2e:c8:27:33:ec:8c:36:a5:54:b7:7f:12:eb:
8d:1c:75:d9:9f:7c:40:b4:73:ef:24:03:95:39:bd:
0d:2a:97:a0:2d:68:e1:28:5e:3d:9a:3c:fe:53:58:
55:66:d9:24:f5:65:77:82:0d:a7:63:40:49:1a:6e:
f4:f2:6c:06:ca:38:f2:e5:f0:83:e7:34:24:8b:c1:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:99:18:2F:BD:A1:9E:75:29:C5:A8:5A:05:87:5E:24:F3:5C:BE
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c3:2f:66:c0:b2:1e:2a:c2:05:49:27:ae:c8:ee:0a:85:7c:
f0:17:5b:67:da:9c:1f:44:d0:6a:de:3a:66:b0:89:da:f6:43:
bb:6c:6b:cc:aa:77:63:ea:1d:fb:08:ff:c6:da:19:f9:94:c2:
14:fc:ab:f6:1c:6f:f3:6f:87:46:cc:b1:fe:38:05:e1:fc:ed:
59:c4:bf:a1:a0:11:5d:6d:bb:1e:5c:80:17:ae:05:04:d4:92:
0c:24:1d:3c:c1:83:93:be:13:a9:07:a9:26:d2:6a:b1:ff:ae:
aa:89:0b:40:62:02:49:e3:e2:8b:8b:59:1f:16:99:0b:d5:a0:
5d:55:e9:98:3d:39:82:8e:fe:37:93:91:b7:e1:d6:9f:06:bf:
d4:76:25:cb:a7:f5:f6:36:bb:40:5e:6f:76:db:a9:81:a4:3b:
2e:02:42:dd:7b:2a:59:72:7e:1f:9b:a1:cc:95:4d:f7:38:e3:
55:49:06:8f:b0:50:cb:b2:c5:60:e5:4c:2a:10:26:1d:06:af:
c0:62:9a:46:a8:18:0c:6b:38:60:77:96:22:e2:56:d8:df:8f:
35:02:4a:c4:95:6b:90:da:9b:fe:eb:fc:0b:d0:be:3a:ab:73:
ae:e2:1e:53:c0:5c:fa:c8:51:49:b7:6a:46:94:52:19:8c:60:
a8:38:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:11 2025 by rpki-client