Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
File: G9Id-yT32M4jEbpAdndUdL1QvmQ.mft (raw, json)
Hash identifier: ebFmNSKhnwzIBUxa0iNiN4SFq9+leqCT0Q3S/nRvQYE=
Subject key identifier: 67:F6:09:50:F6:21:06:C3:07:96:C0:23:D7:F5:05:39:57:F4:88:CE
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 019748FA598A5CDE3E0D62CA8281AD21DCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
Manifest number: 1587
Signing time: Sat 07 Jun 2025 06:00:55 +0000
Manifest this update: Sat 07 Jun 2025 06:00:55 +0000
Manifest next update: Sun 08 Jun 2025 06:00:55 +0000
Files and hashes: 1: G9Id-yT32M4jEbpAdndUdL1QvmQ.crl (hash: BRtyLZx5NksxolCryB1iMrx3syNLuM0cDIrs9MKXwhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:59:8a:5c:de:3e:0d:62:ca:82:81:ad:21:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: Jun 7 06:00:55 2025 GMT
Not After : Jun 8 06:00:55 2025 GMT
Subject: CN=67f60950f62106c30796c023d7f5053957f488ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:2a:aa:da:88:2a:78:5a:dc:5d:ea:a9:b6:
74:7b:72:a9:ef:c3:5d:9a:01:39:2f:64:dc:d5:d7:
37:b3:ae:ce:01:95:88:74:d5:17:a4:bf:aa:7f:0e:
8c:9d:b5:cb:11:de:f9:53:b1:64:21:1a:e7:12:64:
47:b6:87:8a:48:47:f2:09:f5:9c:99:dc:e1:08:5e:
01:1a:3c:48:44:b8:9e:a3:30:9f:ee:3c:f1:55:48:
bd:f5:0f:af:3d:bf:94:a9:13:0f:9f:92:f7:a3:4b:
a6:11:09:82:aa:a4:72:55:a8:6f:7e:82:64:37:10:
6b:e4:9e:5f:c1:a0:45:3b:c6:72:a4:84:c8:4f:25:
4d:28:76:a9:dd:6f:f6:f7:4a:62:9c:64:83:f8:88:
02:e6:7b:aa:58:60:73:c3:b6:07:fb:5a:b1:87:55:
3a:4b:f0:fc:58:a5:23:3d:8e:db:ff:4d:02:6f:b6:
2d:78:ac:02:96:1a:8e:48:30:1f:c8:8d:fe:b8:d4:
6b:11:dc:10:79:5e:78:92:74:66:3c:fb:93:cc:08:
fd:b5:23:73:e2:4a:33:da:13:68:d0:77:15:c8:f8:
1f:f5:e0:0c:ae:06:de:f0:9a:73:2d:89:32:e9:e1:
ed:c9:7b:f3:58:a5:21:e4:76:86:bf:4e:08:c1:a8:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F6:09:50:F6:21:06:C3:07:96:C0:23:D7:F5:05:39:57:F4:88:CE
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:67:82:10:c8:d3:ea:f3:b1:e5:1c:24:28:36:d9:d7:a4:93:
94:12:7a:ab:2c:1a:85:de:ae:c5:4d:56:55:58:61:62:52:f7:
b4:34:fc:08:50:55:a2:5c:fd:ba:8e:3c:0e:4c:ac:5a:ec:f3:
4e:55:c6:16:9c:e3:80:66:51:33:c0:71:65:a7:ca:ae:2d:1a:
01:21:28:fe:bd:59:1c:66:b1:a5:9d:cc:0e:77:4c:d5:5f:c7:
41:5b:2f:f9:4d:e4:55:17:0f:b6:85:93:6e:5d:6b:bf:02:97:
43:7d:40:34:1b:63:bb:1d:21:9c:b1:fd:04:3c:90:bf:da:41:
b2:c1:b2:e2:a9:ea:dd:97:18:90:68:06:f2:d4:7d:7d:e3:39:
e0:ec:77:f1:e5:77:d5:24:de:d3:1b:53:43:90:c0:c2:b0:2b:
36:e8:1a:56:08:c5:d7:63:31:55:e0:97:48:dd:46:48:c1:bf:
53:97:63:fe:70:d0:1d:c6:f5:8a:8f:e2:5b:c0:ce:a6:88:36:
21:b0:95:83:c7:8b:b9:2b:cf:58:d3:20:30:30:e7:0e:89:88:
3c:2d:6e:a0:9e:a5:f0:a6:af:b7:9a:25:fe:01:28:88:6f:cb:
6b:b9:9c:dc:7d:93:4d:c2:6b:b3:ae:a4:cf:c0:1a:ef:fe:41:
6c:33:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:39 2025 by rpki-client