Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: f2RQKGCN/xyw6ny+887m8XLqvQqsmIX8O8W94UTaE3o=
Subject key identifier: B6:FA:EF:19:D6:76:65:55:47:7D:AA:3B:BF:AD:E8:04:14:45:AF:E1
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 01974D0DD8F25B79FACB367D566E9240DED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 157A
Signing time: Sun 08 Jun 2025 01:00:42 +0000
Manifest this update: Sun 08 Jun 2025 01:00:42 +0000
Manifest next update: Mon 09 Jun 2025 01:00:42 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: W+MLDM6pxrg/d0pOuP93+omAQzq5m7S9gw4eud40V40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:d8:f2:5b:79:fa:cb:36:7d:56:6e:92:40:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Jun 8 01:00:42 2025 GMT
Not After : Jun 9 01:00:42 2025 GMT
Subject: CN=b6faef19d6766555477daa3bbfade8041445afe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:6a:95:b5:76:f2:e1:d3:bd:b1:c0:bf:d4:
4d:56:a9:9c:d8:b5:57:6f:e0:85:c2:39:0a:70:67:
bb:5a:24:24:e9:e0:55:7a:7d:92:24:0f:49:87:4b:
74:ef:99:71:ca:84:77:6c:79:73:4a:92:83:f6:6e:
7e:fc:61:d1:2f:ed:b4:22:7f:8c:71:91:38:d7:bb:
7f:a0:db:60:d3:b5:46:cf:ee:0f:22:b4:1f:db:89:
7e:e2:15:4c:43:ad:33:70:c2:11:4f:2d:80:ef:8c:
b9:33:5d:74:d8:0a:41:3e:22:af:6d:03:64:fb:bf:
1b:b9:6e:d9:d6:82:b4:e1:8b:e6:91:c6:94:e3:a1:
07:1c:bc:6a:de:72:e5:43:3e:e4:42:fe:39:ef:b2:
86:df:07:75:e6:8b:ec:95:58:71:bf:15:51:03:4d:
9d:2b:8a:24:1a:63:be:3e:50:00:ec:43:b4:d3:7b:
34:a2:49:a1:16:75:37:41:c1:96:32:c1:d7:3a:4a:
c0:8d:c0:1f:5b:99:a2:5d:23:29:9a:73:5d:63:af:
c0:12:3c:24:ca:3f:3a:90:23:7d:66:bd:b8:b7:a3:
8b:02:07:84:7b:ef:cb:c6:73:3a:04:65:a9:9b:61:
c3:7c:12:aa:f8:fc:17:5b:63:79:07:41:f6:16:1f:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:EF:19:D6:76:65:55:47:7D:AA:3B:BF:AD:E8:04:14:45:AF:E1
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:10:82:da:60:6c:96:ba:1c:fb:ba:c0:0e:31:ba:c8:92:
10:d6:d7:e9:64:c2:c6:40:cb:ec:50:6b:0d:a4:45:a3:2c:c0:
a9:42:e7:ce:91:f0:a1:a3:c0:bd:15:3b:6e:e0:2f:cc:86:af:
a9:c0:79:d4:3a:e5:29:56:b7:ca:86:9d:3a:d3:49:c1:14:56:
56:55:9a:9a:1b:a9:bd:ec:99:07:9b:13:69:37:3f:49:1c:da:
b3:ae:1e:a4:d4:d9:c6:9d:76:fc:98:48:af:d9:39:e6:4c:b6:
fd:8e:a9:22:62:4d:98:c3:60:8f:54:09:79:1b:7b:94:43:cd:
84:c3:16:b2:ef:be:d4:ab:b9:69:d3:f8:f1:db:86:59:a2:af:
2e:ae:6e:7d:94:f0:a5:32:c1:3c:a4:82:2d:56:ce:bc:69:c4:
43:5f:cc:4a:56:c0:83:12:7b:fb:37:8c:ea:fe:f2:d6:cd:61:
e1:cd:95:64:3d:e5:24:89:50:d6:0d:66:be:ed:2f:fe:ed:30:
a3:a4:f0:3a:c6:1d:9a:e0:e2:5b:8d:d0:5e:bf:25:9a:7f:1b:
07:df:c3:e9:ad:9f:be:9f:e1:10:9f:5a:08:f8:79:cb:01:82:
96:5e:97:3b:b2:6a:1b:fd:f8:a7:9e:e8:bc:65:02:7d:3d:4b:
1b:43:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:54:04 2025 by rpki-client