Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier: Nw7XpNRBdp1k3OnXBoCQj5JDlJi/UpCSyGgTyubLilA=
Subject key identifier: AD:81:10:E9:05:67:2D:79:27:6C:FD:40:94:C2:38:DD:09:DB:36:56
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial: 01974CD69AE0A7640679025B0C0A3C99F782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number: 04FB
Signing time: Sun 08 Jun 2025 00:00:22 +0000
Manifest this update: Sun 08 Jun 2025 00:00:22 +0000
Manifest next update: Mon 09 Jun 2025 00:00:22 +0000
Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: 3ZsVWFS6DadKfBXrM2MNTe6OMp5aU9UrkY4xYCEAcH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:9a:e0:a7:64:06:79:02:5b:0c:0a:3c:99:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
Validity
Not Before: Jun 8 00:00:22 2025 GMT
Not After : Jun 9 00:00:22 2025 GMT
Subject: CN=ad8110e905672d79276cfd4094c238dd09db3656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:c4:a4:cd:2d:58:27:db:23:a8:50:1a:dc:
76:09:45:57:95:e8:c8:ed:61:ce:6c:88:3a:d9:48:
ba:10:57:8e:f5:0b:f4:2e:15:01:0d:e1:f7:5d:52:
25:59:d8:17:2e:cb:00:6d:8f:c0:ec:57:b4:b5:b0:
9d:49:f2:92:fc:0f:1c:b9:39:74:f1:42:1c:ef:fe:
63:80:37:ea:0f:eb:ca:d0:61:04:b6:1f:b4:c9:1b:
dd:f0:81:d7:c5:4d:55:2d:ac:ed:f5:1c:06:b5:b6:
da:0b:69:8c:63:d3:dd:7b:d3:ed:14:a5:71:de:e1:
0c:6c:c0:d6:5f:82:67:21:c8:3d:a2:ff:ed:b2:53:
ed:f2:cc:9d:ae:ba:a8:f9:d0:5d:6f:00:43:e9:85:
7f:7b:03:ea:de:d8:27:9c:ed:7a:87:e4:2c:a6:2f:
38:93:97:7b:2c:78:27:ac:df:e5:da:11:2b:ae:1a:
48:47:12:63:07:3b:5c:f4:46:6d:fe:6c:c7:11:f0:
6e:a9:87:40:87:fd:0c:05:b4:38:81:50:52:96:85:
de:a8:7a:c4:bc:7f:b0:89:b2:53:e1:ab:ec:a3:f1:
e9:32:af:f9:10:4a:d1:5d:90:e3:b3:ca:bc:8b:eb:
bb:ed:a6:88:fd:43:ac:a6:ee:67:cf:79:c2:9a:8f:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:81:10:E9:05:67:2D:79:27:6C:FD:40:94:C2:38:DD:09:DB:36:56
X509v3 Authority Key Identifier:
keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:77:ad:6b:22:d0:cf:fa:22:f4:9e:ea:33:b4:bf:40:1c:73:
d9:eb:9a:15:ca:86:b7:28:78:19:d3:26:70:24:8a:85:cc:a2:
f4:ce:6e:14:fb:43:b2:8e:4d:7e:44:1c:02:45:d0:6c:7c:a3:
33:7d:95:bc:cd:cd:5f:fe:62:b5:19:6a:ca:53:50:41:d9:ab:
27:c9:ac:38:9f:0b:63:40:16:5f:56:84:5f:52:db:17:5f:81:
c5:a6:30:ec:12:b7:33:34:25:21:7c:61:16:33:a5:68:3c:14:
19:a8:d6:22:bb:37:d5:61:a9:a3:10:e2:5f:9d:f6:2b:5a:89:
fb:4c:a9:35:c0:cb:a6:d6:98:3a:b2:69:eb:1f:bd:58:6c:b8:
2a:3c:9d:50:14:ab:19:bb:85:c4:b7:ca:f6:24:1f:f3:91:c8:
eb:e9:60:99:5c:dd:2e:93:f6:42:fa:a6:51:79:b2:0c:14:c1:
7c:5a:d8:90:c7:01:57:8d:7a:0b:9b:f7:a6:d5:71:af:13:b9:
bb:ac:00:93:1a:5f:45:cd:0b:3c:82:1d:f7:b5:fd:c2:5a:02:
6a:49:84:8b:d7:17:d3:8c:be:91:86:dd:26:62:1d:37:e7:d8:
00:0a:fc:b1:e9:d3:68:35:68:79:82:77:e5:63:57:e8:4c:fa:
67:df:73:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:27 2025 by rpki-client