Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json)
Hash identifier: h1W8JfnjbZ+HuX3EouSODUnMHpGSRIqIa9DpAkTYob4=
Subject key identifier: 67:34:EF:4F:D7:17:1B:D4:97:3D:F9:89:25:17:1C:B9:AD:19:E1:C7
Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Certificate serial: 01974BC487E5D9FF7BAD9721414ED66D3877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
Manifest number: 0845
Signing time: Sat 07 Jun 2025 19:01:00 +0000
Manifest this update: Sat 07 Jun 2025 19:01:00 +0000
Manifest next update: Sun 08 Jun 2025 19:01:00 +0000
Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: +DGZc1VIYP+Du5+S6Rxz7sw4CX8A6LMeK/CWA4Ged+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:87:e5:d9:ff:7b:ad:97:21:41:4e:d6:6d:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Validity
Not Before: Jun 7 19:01:00 2025 GMT
Not After : Jun 8 19:01:00 2025 GMT
Subject: CN=6734ef4fd7171bd4973df98925171cb9ad19e1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:ec:5b:e2:c8:85:4e:cb:da:69:28:a4:f2:
e5:c9:0d:24:84:6e:79:a7:12:6d:e9:1d:66:0c:e2:
9f:c7:f4:d4:73:96:5b:b3:2d:9b:2c:e6:ea:41:54:
0d:98:9c:87:68:7c:2e:b9:06:0f:b5:06:7c:9d:ee:
b9:26:81:e3:23:92:f5:06:a8:46:09:65:a9:e7:06:
68:a8:5b:64:4e:4b:8f:90:c5:53:4e:25:1c:2b:d1:
1f:d9:f5:3d:6d:fe:ce:a7:03:c7:a2:85:e6:be:ab:
c7:65:fc:3b:2c:4f:8c:61:08:37:aa:31:fb:f7:ec:
a3:7b:45:84:9b:8b:58:7e:6a:f9:6a:5b:bd:e1:de:
02:43:43:f8:8f:21:21:be:d7:f4:48:98:2e:ec:bb:
31:4b:52:d5:21:01:90:d8:3a:e5:33:00:95:cf:af:
f1:48:fd:99:5c:77:b2:2c:a6:05:f3:37:8b:9a:e1:
f3:d6:65:22:d1:3d:ee:49:17:16:de:e8:f3:a8:f6:
0f:91:0a:b1:51:96:96:76:51:ef:dd:43:9e:b7:8d:
09:00:7b:dd:96:68:bc:6e:45:a0:a4:8b:80:05:a0:
bd:b2:d7:af:11:bd:9a:c4:da:32:bc:e1:6b:4c:b9:
5c:f4:c4:ff:5d:28:05:ff:c4:da:3c:7b:97:22:13:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:34:EF:4F:D7:17:1B:D4:97:3D:F9:89:25:17:1C:B9:AD:19:E1:C7
X509v3 Authority Key Identifier:
keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:59:63:22:35:d8:ea:24:de:53:84:b2:6e:b6:84:18:0d:5f:
24:04:cf:dc:b0:f1:fb:ef:ae:57:ac:a1:ee:9f:c4:08:e3:57:
76:4b:ae:70:a7:75:f2:6b:72:e4:66:dd:49:63:3d:71:e9:6f:
0d:a2:be:57:19:c4:cf:0a:f3:cf:f5:42:2d:03:84:c0:e8:89:
65:18:f4:b0:4c:4f:a4:ff:69:de:23:2f:07:17:2e:06:cf:2c:
cc:67:5f:cb:b6:62:70:d9:e6:af:98:1e:33:13:d7:27:71:c4:
db:46:1a:8a:29:51:5a:2e:dc:79:52:bb:12:d4:a0:7d:c2:c1:
c1:29:82:00:c8:d7:71:d5:fb:1e:dd:7e:10:8f:67:e7:27:5b:
1e:df:29:19:69:b3:c0:ea:9f:51:60:74:d7:2a:2e:49:27:a9:
ec:98:80:34:ee:87:e3:2a:6c:8d:03:d5:5c:d4:83:f8:22:28:
92:a7:b5:bd:dc:57:a5:60:3f:ef:ec:23:cc:9d:ca:0a:78:71:
9e:e8:5d:3d:43:b6:66:be:16:0b:05:87:3c:58:76:0a:bb:05:
04:3a:89:49:1a:0f:93:54:9b:de:c5:82:45:8f:f1:c9:34:b6:
ea:64:79:e9:42:3c:72:0b:f3:cc:1f:d5:66:d7:25:a3:6d:57:
9d:55:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:44:48 2025 by rpki-client