Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: FGsyD9VQZVaUb0/PVwepD4ucsJ+ytvOlBmCfVKawF3Y=
Subject key identifier: AE:E9:47:E7:13:A1:D4:90:92:0B:05:72:99:C3:9E:81:AB:F5:13:D9
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 01984A418B31B5EBEF9EF2933D94A1521D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 086B
Signing time: Sun 27 Jul 2025 05:01:06 +0000
Manifest this update: Sun 27 Jul 2025 05:01:06 +0000
Manifest next update: Mon 28 Jul 2025 05:01:06 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: z+FMShKOWmP+yV+dWmunkxHqk5ccpXH2GsKtWSMAnWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:8b:31:b5:eb:ef:9e:f2:93:3d:94:a1:52:1d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Jul 27 05:01:06 2025 GMT
Not After : Jul 28 05:01:06 2025 GMT
Subject: CN=aee947e713a1d490920b057299c39e81abf513d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:25:6d:6f:11:29:b1:73:52:ca:42:2b:ef:
77:dc:4a:62:ff:7e:cf:26:c9:27:83:c4:56:5f:90:
d8:7c:56:79:b3:c6:f2:0c:4b:0c:0c:51:a0:ce:d4:
43:7d:50:d4:11:83:4a:94:99:86:b2:83:7d:d3:d7:
bf:44:1d:e1:1b:d2:32:ae:1d:07:98:b3:73:85:51:
fe:a5:15:bf:28:23:63:ea:d4:82:58:c0:18:11:b4:
74:7c:71:0f:6e:7a:7c:87:82:26:f8:e1:1a:50:b2:
36:d2:b9:60:a0:65:9b:7b:52:9c:1c:2d:4b:1f:27:
5d:fb:ad:32:ed:c7:67:4c:18:eb:bb:56:cf:b1:5f:
5c:08:8a:79:50:6b:8d:62:59:b4:be:2e:38:5e:d6:
02:90:66:74:df:5a:8d:3a:9e:52:61:d8:f6:5e:ff:
5b:d1:15:79:40:5f:a6:54:56:df:a0:9b:9d:68:76:
78:22:c5:e9:27:fc:5f:b2:06:62:4f:61:bf:38:7b:
ff:0b:cc:42:c6:26:e3:1b:e3:a7:08:69:04:fc:62:
06:05:53:c2:ac:3a:f8:2f:7d:5a:b2:e7:6d:2c:af:
f1:10:a9:ae:9f:93:dc:78:82:a0:b1:7d:7b:0d:5e:
71:b2:ef:86:bd:f9:58:75:22:2f:29:07:1e:fc:c7:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:47:E7:13:A1:D4:90:92:0B:05:72:99:C3:9E:81:AB:F5:13:D9
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:15:97:ab:07:de:e1:14:67:e9:49:53:50:3a:66:cc:18:1c:
42:85:ab:dc:c9:a8:e1:c2:4a:49:a1:23:ed:f0:60:0e:82:08:
05:38:51:e2:c8:ff:b5:e5:68:18:98:1a:43:26:8e:ec:c0:05:
44:c7:69:43:0e:5f:56:7b:ab:30:c8:1c:b4:3a:d2:42:7e:e4:
cc:5f:22:ee:e8:b8:61:5a:3e:31:de:5b:1c:ec:53:db:8f:f9:
2f:54:50:83:36:10:af:a5:a3:f4:81:2e:29:81:12:f1:d1:27:
25:db:f8:40:f4:3a:e4:a9:8b:05:c1:56:e9:6b:f2:42:db:2e:
b9:ee:9d:41:c4:b0:37:8a:cf:02:e0:f1:c3:1c:a2:1b:08:0f:
4b:5d:56:c4:55:b4:2a:fd:f1:c0:fb:94:c6:ba:33:58:20:08:
55:8e:31:f8:41:72:48:f1:6c:30:66:b2:43:47:aa:9c:c5:bd:
e8:f4:4f:97:70:6c:41:98:43:46:9a:46:71:f5:5f:b4:a1:ec:
78:95:26:22:84:01:ac:0d:8f:51:2c:ff:29:4a:44:a4:b0:88:
f1:67:e0:40:32:cc:c0:d2:43:f0:86:ad:2f:fd:0d:da:b7:39:
b6:6f:09:4d:c2:20:5c:03:ba:fc:f6:ee:7e:52:b5:29:67:81:
6d:5a:8c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:36 2025 by rpki-client