Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
File: Gwm9TWooxfH75oPPKs1ei_K65MQ.mft (raw, json)
Hash identifier: QOHsrqCkFCibx4YZ6TGLBjZ1ZSHeBqx7BSr6P6YuYYc=
Subject key identifier: 9B:ED:76:68:DE:3D:0E:EE:81:F7:30:82:B0:4A:7C:39:A1:30:66:E3
Authority key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
Certificate issuer: /CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Certificate serial: 01984D4257FEDF5FEF7A19A4D0FEA09463CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
Manifest number: 03CC
Signing time: Sun 27 Jul 2025 19:00:50 +0000
Manifest this update: Sun 27 Jul 2025 19:00:50 +0000
Manifest next update: Mon 28 Jul 2025 19:00:50 +0000
Files and hashes: 1: Gwm9TWooxfH75oPPKs1ei_K65MQ.crl (hash: nUi6EEi62PQsldg7X2fmJGE871ut4wjUk9ZtEepE2AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:57:fe:df:5f:ef:7a:19:a4:d0:fe:a0:94:63:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Validity
Not Before: Jul 27 19:00:50 2025 GMT
Not After : Jul 28 19:00:50 2025 GMT
Subject: CN=9bed7668de3d0eee81f73082b04a7c39a13066e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:87:a0:a2:7c:9a:31:23:df:a4:9b:bb:73:
4b:38:db:12:0d:e0:69:23:9f:21:b3:89:50:a4:e6:
79:28:a9:d7:5f:1a:5d:60:67:20:86:6b:00:37:97:
06:60:28:03:17:01:c9:a1:1d:e8:9f:8f:af:e4:0d:
c4:ac:ee:36:83:3b:03:94:23:d9:45:d2:7e:32:10:
55:90:53:ae:b5:eb:69:9a:ea:44:aa:ec:37:07:a3:
cb:e8:9f:b4:7e:df:94:93:0f:45:2f:93:a7:47:aa:
23:f6:09:ca:1b:df:2c:9d:35:61:97:f0:50:90:5e:
2b:cb:ef:4e:64:c7:d1:90:7f:4f:dc:95:e6:e2:14:
ad:a8:60:cf:3c:d2:dd:09:4b:5c:e7:9f:ec:3e:4b:
5e:24:25:da:95:0d:c5:89:e1:50:05:da:e7:af:30:
ff:fe:e0:1e:4d:60:15:68:50:27:e5:05:c8:95:62:
6f:99:55:88:06:34:de:f6:bf:6a:ed:b4:32:f6:88:
d2:4a:7b:b3:cd:c3:04:d1:a3:54:2a:d9:90:25:60:
9e:1c:f6:ec:d2:c0:ff:8d:28:91:ae:f3:89:5f:43:
47:0f:90:84:d0:a3:53:a5:bd:2a:6f:5f:55:27:fa:
56:9f:32:8e:b3:53:d8:a6:c9:9e:30:e3:74:42:d4:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:76:68:DE:3D:0E:EE:81:F7:30:82:B0:4A:7C:39:A1:30:66:E3
X509v3 Authority Key Identifier:
keyid:1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ac:d8:7b:68:7e:85:5e:b7:4c:3e:75:9f:71:16:12:a1:7b:
cc:4e:e0:1a:67:38:a0:85:6d:c9:b2:87:35:74:9f:cd:f5:19:
74:53:6d:fb:73:09:1f:53:e6:f1:b0:55:39:65:e9:bd:c1:6f:
e0:bb:54:bb:73:5e:ee:43:a9:be:0f:6d:0c:76:da:08:9a:a8:
92:c1:ad:f3:6d:37:3a:af:d9:eb:2c:2c:36:6b:f5:61:19:8b:
ce:67:b2:95:44:10:9e:80:5c:15:18:5a:21:bc:a1:61:b9:87:
ed:31:61:b7:0b:87:6e:5d:a8:af:7a:42:38:1a:80:6b:e4:36:
57:40:18:50:f2:f8:03:83:92:79:45:f7:47:cd:7a:92:cf:33:
be:24:5c:c1:6a:a0:e3:73:88:51:52:03:ea:a5:bc:a8:95:c6:
4d:bf:63:2b:d9:4c:86:aa:3e:84:f9:07:9a:94:66:31:92:c8:
3a:b6:6a:0c:62:29:85:74:b9:aa:34:a0:1a:eb:6b:c7:15:88:
3a:c0:c2:48:10:f7:37:85:2a:31:42:90:7b:d4:bd:7b:1b:85:
01:8c:94:53:02:f1:38:62:59:8e:24:92:92:c1:91:ec:7c:45:
69:c9:a1:ed:ee:05:33:c8:a4:2c:95:d7:37:77:ac:c0:fd:d0:
5e:0e:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:45:07 2025 by rpki-client