Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
File: gZypPRPsITWRKJWUxBdjrAcEbFQ.mft (raw, json)
Hash identifier: kLQdb648lZh2lbNMfNa6O5ECd38BVkde7WE0Oz/OKy4=
Subject key identifier: 41:F7:0F:E3:37:F7:74:21:53:C8:1A:7B:89:BE:A5:AE:CF:2C:92:FB
Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54
Certificate serial: 01974666B5FE78053FFD312C2F2A01615994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
Manifest number: 2F
Signing time: Fri 06 Jun 2025 18:00:25 +0000
Manifest this update: Fri 06 Jun 2025 18:00:25 +0000
Manifest next update: Sat 07 Jun 2025 18:00:25 +0000
Files and hashes: 1: gZypPRPsITWRKJWUxBdjrAcEbFQ.crl (hash: Yg9I//1OqVuwQpdtuXYx+BMthlFBjHXLxcaJhhySveA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:b5:fe:78:05:3f:fd:31:2c:2f:2a:01:61:59:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819ca93d13ec213591289594c41763ac07046c54
Validity
Not Before: Jun 6 18:00:25 2025 GMT
Not After : Jun 7 18:00:25 2025 GMT
Subject: CN=41f70fe337f7742153c81a7b89bea5aecf2c92fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:70:61:f4:68:03:eb:61:6f:67:8c:52:7e:
13:e7:9b:74:9c:e1:42:27:b9:ec:07:aa:f8:4d:d4:
2d:1b:66:fb:f6:f5:6c:65:11:87:15:d8:26:21:16:
d8:e6:45:84:a5:c2:54:23:ef:4b:68:3e:21:b6:14:
82:83:1f:9b:2a:84:8c:4c:92:fe:12:cc:39:75:e0:
c6:23:09:7f:65:04:52:d4:c1:0f:0d:59:b9:8f:ad:
98:8a:4b:9f:0c:9a:71:08:a6:92:3c:be:60:fb:11:
8a:38:1e:73:bf:4a:f6:4e:88:ba:b6:7e:ce:db:37:
e2:59:26:8e:bd:8a:6e:74:a2:4c:6b:d5:e3:76:4d:
88:5c:b8:69:b1:3a:86:6a:1b:d2:fe:12:ca:07:2e:
ef:b7:45:9d:24:f7:c1:ce:d0:fc:5f:56:56:18:76:
f8:2b:09:cb:d7:b2:26:08:a2:bb:6f:d3:46:43:eb:
4d:df:bb:67:7d:b9:97:b6:3f:a7:ed:ab:09:ee:28:
bd:c0:64:f5:af:1f:2f:6e:bd:c0:f7:11:03:e4:6b:
d3:82:fd:ad:d1:2e:89:e4:ea:0f:99:98:09:be:27:
ae:46:3d:d6:1c:5c:a0:2b:de:a9:8f:e8:47:95:d6:
51:97:be:ec:bc:e4:78:a6:0e:b4:f7:7b:94:e7:4f:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:0F:E3:37:F7:74:21:53:C8:1A:7B:89:BE:A5:AE:CF:2C:92:FB
X509v3 Authority Key Identifier:
keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:db:8a:b5:14:2a:57:72:b1:09:19:f4:54:2f:55:b1:68:75:
8b:8a:86:22:c7:7e:61:9e:99:0b:83:5e:74:2b:39:fd:56:09:
78:13:1c:9f:6b:30:3f:0f:da:69:4d:f0:fe:c4:80:00:8f:1a:
55:8e:0a:a5:3d:6e:cb:97:75:8a:f0:14:ee:60:c9:47:c5:bd:
21:6e:79:ba:72:87:66:a2:ea:da:38:42:0b:cb:87:07:dc:7e:
a5:ed:25:9f:09:aa:86:66:7d:96:75:57:c1:45:0c:84:c0:1f:
3f:f8:50:43:41:d9:f1:16:fe:c6:a9:35:0a:7c:a0:63:8f:4d:
dd:d2:8f:1a:91:02:b1:fc:85:73:06:56:85:33:42:59:4a:a1:
b9:8b:fd:3f:88:c6:59:93:d4:d3:6f:4e:2b:72:e4:8a:db:81:
66:cd:0f:b8:e7:73:d2:33:5d:ec:d6:ff:fa:4a:78:19:d8:63:
e0:2a:f1:a8:f1:cc:7c:27:10:c3:1d:7d:16:f9:a0:6a:71:39:
c9:37:5d:8b:91:f3:ab:3b:c7:37:1a:bc:2d:fc:4d:77:d3:90:
70:29:64:43:31:58:38:8d:b0:15:e6:77:ea:aa:5a:7c:6b:db:
69:1b:84:fa:c8:dd:6f:79:93:19:e0:b1:da:e0:81:6e:78:40:
2e:3b:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:08 2025 by rpki-client