Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json)
Hash identifier: M9nCdUmMmHmChQAOOsuiiMYzwAtfmoRStpqr6Sht9YY=
Subject key identifier: 3E:2C:5B:EA:B4:30:BD:A0:47:5B:2D:0E:DB:2B:AF:3A:C3:21:12:EA
Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Certificate serial: 0197575A7D3012FFFBBBE6865D6659FAB2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
Manifest number: 100B
Signing time: Tue 10 Jun 2025 01:00:37 +0000
Manifest this update: Tue 10 Jun 2025 01:00:37 +0000
Manifest next update: Wed 11 Jun 2025 01:00:37 +0000
Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: 40krp5XciWRore4Nsj1+4ATxhMJdVzpy5PdXPLncVNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:7d:30:12:ff:fb:bb:e6:86:5d:66:59:fa:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Validity
Not Before: Jun 10 01:00:37 2025 GMT
Not After : Jun 11 01:00:37 2025 GMT
Subject: CN=3e2c5beab430bda0475b2d0edb2baf3ac32112ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:9a:2d:08:30:37:fb:05:23:45:1a:54:65:
ed:48:1b:68:6c:30:ce:27:63:9c:25:89:72:5d:44:
c7:b7:e9:47:36:4a:d4:40:94:88:ef:5c:1a:fb:b8:
8d:0d:cc:5f:b6:bd:94:1a:02:12:95:d7:76:0d:43:
e3:ea:41:d1:8f:c9:6b:96:e5:af:03:cc:c2:72:00:
1e:0a:d2:97:f5:0a:99:9e:09:f0:ab:e6:c6:bb:12:
e8:68:2c:9d:34:10:19:a8:07:24:c5:70:23:d9:ec:
c4:b3:29:46:76:fe:b0:7c:39:ff:14:cb:6a:13:73:
5b:d9:ec:9d:ba:06:d6:74:dd:ff:69:ce:c7:86:40:
76:ce:5e:fa:d2:70:ad:de:76:10:f9:d3:18:91:1a:
28:0d:20:5e:e7:83:08:e5:23:4a:f8:c6:e0:ac:b6:
d4:65:37:26:83:55:a6:fb:f7:d1:e9:70:ce:a1:ab:
a4:0e:90:31:59:d5:18:3c:97:6b:89:9e:34:87:47:
19:9b:cb:f6:21:5b:8b:ee:d3:ac:8c:0a:d8:78:8f:
6e:10:e9:42:0c:c0:31:b5:0c:0b:0f:54:d4:97:13:
c6:e2:57:a8:6f:0e:32:a7:11:57:a7:1e:51:ef:c6:
7b:f5:2b:ff:5f:16:15:8a:6d:a0:b2:9e:9a:40:54:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:5B:EA:B4:30:BD:A0:47:5B:2D:0E:DB:2B:AF:3A:C3:21:12:EA
X509v3 Authority Key Identifier:
keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:31:d8:94:85:fd:d1:08:fb:1a:26:a5:71:98:1f:6d:99:56:
23:b9:56:44:89:e9:b5:b6:93:44:34:c5:97:f0:97:0b:ed:0c:
10:ea:bd:04:a7:54:0e:88:85:80:c9:dc:ad:51:bc:e1:f6:fe:
ad:8d:6e:2c:c5:f8:22:29:99:ca:4b:7d:94:04:54:99:69:ce:
2d:9a:b7:aa:28:3a:a3:94:a9:36:d2:43:92:0f:96:ae:40:4f:
d8:cc:f7:50:b1:4d:c2:63:88:ee:88:f2:eb:b7:39:c0:2b:2e:
2d:31:9d:1a:0c:b4:ab:a5:02:e8:d6:66:19:44:f7:8b:05:8e:
bf:2a:da:5f:25:ce:69:23:ad:be:39:4c:0b:b9:f5:d0:d1:2c:
ad:6e:af:16:89:97:82:8c:9c:54:b8:58:4b:06:0f:ca:63:e3:
7a:15:d1:d3:f1:b2:33:06:7c:b3:3b:e6:2b:f4:c1:8c:c1:3f:
8d:01:39:70:4f:9b:f3:bf:1a:8f:f0:3c:4d:62:64:f4:ec:65:
2f:b7:ec:b3:ff:d0:4c:e1:11:71:32:c3:c7:fd:4a:93:37:c8:
ca:e8:a0:7d:1e:da:df:78:8f:37:57:30:e7:28:ff:10:08:b6:
5d:6b:2d:b4:55:ec:9e:b1:b8:95:b5:5c:6b:8a:fa:7d:6b:2c:
38:1f:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:30:18 2025 by rpki-client