Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json)
Hash identifier: Ur1PgTY3m4seHC5o+W+wJ+hhscE3g7oJNE43v10UO0o=
Subject key identifier: B2:48:E4:A0:12:99:F3:7F:93:7C:F9:65:38:AF:70:FA:1B:EF:7F:19
Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Certificate serial: 01975B374C6773574436C0AC352F4FBB1C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
Manifest number: 100D
Signing time: Tue 10 Jun 2025 19:00:40 +0000
Manifest this update: Tue 10 Jun 2025 19:00:40 +0000
Manifest next update: Wed 11 Jun 2025 19:00:40 +0000
Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: o4crHYPFncZRvBYGezWdC4OpEQguUYSmImJyegITm7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:4c:67:73:57:44:36:c0:ac:35:2f:4f:bb:1c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Validity
Not Before: Jun 10 19:00:40 2025 GMT
Not After : Jun 11 19:00:40 2025 GMT
Subject: CN=b248e4a01299f37f937cf96538af70fa1bef7f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:3c:5e:d8:aa:44:9e:86:b2:1c:b3:ee:0d:
8a:16:03:b8:bb:e3:7c:9d:74:e5:94:0b:a5:fb:c7:
07:90:5e:ea:a0:9a:99:6f:b7:e0:94:bb:ce:7a:91:
b8:92:6e:02:be:d4:b8:c5:12:c6:0a:72:db:f1:af:
c2:bc:e9:af:ff:86:09:0c:06:dd:25:d7:c6:a0:7b:
e5:08:92:dd:80:12:8d:bb:02:a4:3b:86:ae:14:11:
93:86:e5:c8:42:cf:e4:68:ef:6b:e9:69:14:a3:5f:
04:db:8e:b2:13:a0:5b:1f:b5:ad:bd:3c:d4:13:6a:
a5:a6:8c:41:0f:78:fb:da:5b:67:7b:05:01:81:83:
57:65:0a:9a:00:81:94:da:80:70:33:d0:36:97:b4:
5a:57:b7:e9:6c:78:e0:1b:b6:d7:d2:81:a3:6a:20:
af:e3:aa:3b:10:5e:f7:14:31:09:1a:6f:88:90:28:
bb:20:10:2a:11:50:7a:c9:02:2e:f5:22:a1:7b:5e:
3b:97:59:55:6f:74:0a:f5:2c:ee:1b:ea:15:d1:03:
83:73:53:f8:9f:68:76:d8:53:7a:4b:69:95:6a:4a:
19:ae:39:20:f2:64:2a:50:cf:c7:64:c5:a9:98:92:
66:60:4c:a6:7d:18:a5:7a:f3:4a:a0:1d:ef:ef:38:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:E4:A0:12:99:F3:7F:93:7C:F9:65:38:AF:70:FA:1B:EF:7F:19
X509v3 Authority Key Identifier:
keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9a:cc:fe:ed:7d:d8:94:4d:82:12:81:0f:13:d4:ab:26:b6:
18:23:98:ce:46:e2:79:df:f8:9a:e2:29:c3:e9:68:53:0c:28:
48:7c:ff:98:c3:77:53:8f:ad:44:d1:27:52:b4:88:f8:1c:af:
dd:93:18:4a:5a:a1:d3:1c:fc:38:16:2f:9f:d9:c2:0a:c9:b8:
35:7d:7f:80:96:ca:fc:79:89:e9:6a:73:84:4d:d0:62:dd:17:
05:2b:e0:5b:b1:ba:28:21:fd:08:c9:1c:6b:55:27:ed:2b:5e:
f8:ae:7e:74:ea:62:cc:44:34:7b:13:a8:be:cd:79:66:f3:48:
2e:fb:df:a2:95:47:4a:67:4b:fa:54:53:ee:70:a8:f0:99:c1:
bd:8e:05:ce:bf:f4:45:6e:3b:1f:ee:eb:14:42:e0:9a:fb:c9:
b5:bb:40:f5:96:f8:76:9c:62:82:cb:3a:4d:5a:cb:5d:5b:34:
35:93:92:c4:d5:cd:6f:38:2e:98:71:ee:5c:13:ae:95:7d:5f:
8d:a5:54:d8:bd:0c:22:5c:4c:35:14:bb:e8:df:55:85:26:c0:
0b:5a:d1:5a:b3:49:7d:d3:6b:c3:94:c7:3a:f4:5b:9f:10:e1:
3b:53:1d:db:62:e1:56:9d:1c:b2:5b:05:9e:1a:0a:27:0a:e7:
49:e8:d8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:12:42 2025 by rpki-client