
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: RAJaK/3KkTL0qlD1lqHgdqJTx4e/dOHsiHViUwwzS10=
Subject key identifier: A0:3C:32:CE:52:27:9C:FC:03:FC:57:14:3E:F4:4B:45:C5:6F:05:62
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 0197D699154148D6C69624E0DAE163B35365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 15C3
Signing time: Fri 04 Jul 2025 18:00:45 +0000
Manifest this update: Fri 04 Jul 2025 18:00:45 +0000
Manifest next update: Sat 05 Jul 2025 18:00:45 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: vaCRLh9wZ9N93iEfBS8qEKsKwrUg7riaOnw3MIAH14o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:99:15:41:48:d6:c6:96:24:e0:da:e1:63:b3:53:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Jul 4 18:00:45 2025 GMT
Not After : Jul 5 18:00:45 2025 GMT
Subject: CN=a03c32ce52279cfc03fc57143ef44b45c56f0562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cb:bb:3c:7f:1a:c8:e0:33:a2:fe:6c:37:d0:
70:69:ec:93:b1:ff:02:87:48:8e:d7:78:9a:00:bf:
f6:86:a4:35:ef:ea:da:58:65:a1:12:37:d6:2f:3f:
8f:19:62:d7:55:39:e8:ca:17:49:c1:1a:e5:0b:0c:
cb:b1:3e:8a:46:67:7c:62:9c:ec:4e:83:33:73:49:
da:2a:f7:e5:9b:79:17:e8:02:05:eb:62:e3:65:c6:
9e:fd:1f:67:02:e9:e4:e8:45:1c:55:35:70:3a:90:
5d:50:4e:db:02:f5:af:03:b3:32:22:fe:0f:bf:17:
5e:5e:aa:33:0e:e0:a4:3f:5d:ea:9a:91:0f:9b:a6:
75:85:1a:5e:f0:46:40:50:d7:0f:89:72:e5:5c:32:
48:0d:09:92:20:40:90:d8:b8:b0:ea:33:b4:f8:00:
5d:47:9b:37:d7:89:f9:0e:2f:8f:f9:03:7b:4d:87:
85:2a:db:95:c7:65:38:47:2a:7a:37:86:c4:cb:de:
49:85:8c:85:2a:a8:9c:94:28:8f:61:8f:f7:ed:88:
b2:c8:86:0f:13:3e:ed:b1:9d:51:44:4f:3e:fa:08:
f4:95:33:53:aa:44:98:36:d2:8f:15:a2:96:5d:5a:
e7:2b:c3:82:f7:b5:27:29:fd:0b:bd:86:6b:65:0c:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:32:CE:52:27:9C:FC:03:FC:57:14:3E:F4:4B:45:C5:6F:05:62
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d3:60:ce:f7:af:cd:ba:69:c1:ff:a5:50:ac:76:47:e7:4f:
c4:a9:90:75:95:a3:d3:52:f8:e5:fd:31:3c:30:59:2b:bc:59:
15:5c:a4:79:b2:d5:b0:5d:1c:80:53:c5:d8:80:a4:6c:f2:18:
09:98:8c:b3:1c:53:32:84:b8:17:6b:ec:b5:8d:da:20:7c:41:
34:a8:d0:7f:33:5a:c8:dc:5a:ed:4c:3f:ce:2c:3b:61:a5:18:
47:f2:42:a8:fc:9c:0b:14:67:29:e4:15:02:26:ff:a1:0c:e9:
20:41:94:5a:67:f9:38:d0:e6:6a:d0:72:55:01:13:6c:d9:b9:
32:e4:54:a0:dc:c8:7b:be:c2:1b:e9:27:b7:6a:6c:7e:f1:1d:
4b:7c:ce:89:9a:8c:5f:78:71:fe:5f:cf:c5:0d:7b:c8:d0:4c:
45:7b:46:75:55:cb:5a:c2:e7:f4:5c:ab:55:5a:2b:5e:65:ce:
cf:41:18:ee:df:e4:b1:28:ff:bc:2f:66:fd:bf:cf:da:5c:a0:
d5:f5:e1:44:9c:ba:6f:38:7c:f3:2e:d2:28:0b:ff:83:2e:4d:
56:7c:cc:64:fc:9a:a0:6a:84:b8:df:3f:77:07:36:06:c7:6d:
a3:02:e2:ee:15:08:ce:34:05:7f:64:60:6f:b2:6e:d2:b0:14:
69:31:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:16:03 2025 by rpki-client