Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier: cGcuulbj/yCkj+DPwuUJlEgkhI0DxfqxZgzo+XuIgSE=
Subject key identifier: 0E:09:02:CA:14:87:70:CB:37:C4:C6:94:A8:DA:AE:D6:12:13:B7:D4
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial: 01974DB27A97BC03DB3FE8D79B4E8652406C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 04:00:31 +0000
Manifest this update: Sun 08 Jun 2025 04:00:31 +0000
Manifest next update: Mon 09 Jun 2025 04:00:31 +0000
Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: bJYMJly9IleU8b4xCV8e1TbBD+o/LXdYQbDMwK06KdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:7a:97:bc:03:db:3f:e8:d7:9b:4e:86:52:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
Validity
Not Before: Jun 8 04:00:31 2025 GMT
Not After : Jun 9 04:00:31 2025 GMT
Subject: CN=0e0902ca148770cb37c4c694a8daaed61213b7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:96:15:45:f5:31:31:6d:a1:f6:13:bc:29:
de:22:34:b1:0f:de:39:f1:b0:fe:20:c2:32:34:1b:
80:c4:4e:2c:e0:a7:3a:fb:e6:d1:98:5c:6b:e9:26:
33:85:00:0d:1c:63:cc:54:4f:41:d6:23:c4:2a:ed:
68:a3:9e:5d:88:4c:3b:2d:9b:c1:1d:6c:5d:60:9c:
67:d5:6f:7f:a7:16:a9:74:15:f5:b5:8b:df:28:bb:
0d:33:d2:1f:0f:c4:e3:66:43:2f:3d:8b:cb:29:9e:
e7:49:eb:62:94:04:68:b3:7f:cf:96:98:99:2f:47:
c0:28:3c:89:77:cd:88:72:f0:f1:4d:88:61:65:b1:
09:6f:d7:e6:d5:35:a4:ab:5f:69:52:07:d0:c8:c5:
38:5d:7f:58:33:57:5b:fd:80:ec:c7:27:0b:35:e3:
ed:13:16:11:99:61:20:df:2b:c3:36:26:21:38:6f:
9c:02:25:ee:cc:a1:fa:47:34:50:d9:7b:3d:4b:a0:
65:9f:fc:27:21:88:3c:69:c3:f7:07:89:8a:fe:57:
78:8b:e6:b4:9e:e4:09:6d:35:a9:fe:2d:97:b3:d3:
38:5a:2b:28:09:9c:8c:b5:f5:79:1d:0f:93:be:e2:
c8:22:c3:d4:cd:f9:aa:13:89:0e:0e:d6:72:43:53:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:09:02:CA:14:87:70:CB:37:C4:C6:94:A8:DA:AE:D6:12:13:B7:D4
X509v3 Authority Key Identifier:
keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:51:cb:cc:83:45:b1:16:81:6e:c8:e8:41:6d:a2:40:c4:
1e:16:15:05:64:4d:be:02:14:22:72:37:ef:1c:23:a2:55:89:
c5:c3:12:d0:3f:c8:07:5e:15:9e:92:bc:c9:e2:31:a2:b1:6b:
5b:7d:36:80:ca:56:e4:43:d4:c6:a2:e0:4c:47:cc:ae:70:25:
a2:34:85:60:00:a2:5e:0d:0b:57:36:0f:d1:c2:6a:df:c5:3b:
fa:f8:ac:fc:cc:63:f0:1f:a7:a5:ab:35:8d:98:4a:ec:fd:fb:
8d:8b:a8:75:5d:18:a3:8d:26:49:54:37:4a:12:3a:27:7c:64:
5c:e9:a6:4f:9e:d8:78:c8:f5:ad:46:46:62:d4:c9:60:3c:8a:
6a:4e:ca:22:b5:10:43:a5:f0:bf:76:1c:ea:2b:7a:9f:f0:09:
e7:31:2e:d4:32:01:67:e7:cd:bc:9a:2c:c7:1c:0f:16:c5:b3:
a4:a9:58:b0:23:4b:41:ac:77:1d:bb:51:d6:35:ef:7d:6f:4d:
66:3e:b3:1d:fa:95:f0:65:8a:32:43:3f:ca:a7:bd:11:33:b0:
0d:2d:2b:5b:b1:3d:99:be:52:be:5d:fd:17:38:9a:b6:c5:ac:
9d:9e:66:81:af:bb:26:b2:c2:16:9c:fa:ce:c4:5b:8b:8a:59:
c2:24:16:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:56 2025 by rpki-client