Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: J12e2Yr4O/kAYaudjbIMYcyGMzdRdsBu0Dr8FFPAQLQ=
Subject key identifier: 78:AF:66:9C:4C:84:7D:4C:83:2A:A1:6F:64:42:C3:C4:5D:20:49:7C
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 019751FD2B6C208EE6E17271A4E786697C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 157D
Signing time: Mon 09 Jun 2025 00:00:35 +0000
Manifest this update: Mon 09 Jun 2025 00:00:35 +0000
Manifest next update: Tue 10 Jun 2025 00:00:35 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: 2dbbQLvxTGsp5jSpOA0Tye1JnZrRLQ2O8ZSQXf/cUuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:2b:6c:20:8e:e6:e1:72:71:a4:e7:86:69:7c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Jun 9 00:00:35 2025 GMT
Not After : Jun 10 00:00:35 2025 GMT
Subject: CN=78af669c4c847d4c832aa16f6442c3c45d20497c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:99:e6:22:9f:4f:e9:1b:41:af:93:a6:72:
8f:38:78:c4:59:8d:a7:e9:e6:74:9d:3b:ad:ed:c4:
f8:1e:ad:c8:8d:a5:6e:59:f8:a4:42:9a:11:81:b3:
52:08:6d:bd:80:b0:56:43:59:92:05:f3:66:fb:d1:
33:5f:4a:37:59:3b:f4:d1:1f:02:da:62:21:bc:ba:
a0:5f:2d:e2:d8:21:2e:46:d5:4c:08:ea:c5:ba:c1:
40:53:f0:65:d4:5e:14:28:df:79:1a:42:07:e9:65:
87:eb:27:cf:de:b3:6c:c5:33:95:32:b1:5b:16:24:
10:18:e4:36:f1:ef:1e:99:9c:18:5e:0d:b7:a4:43:
d3:b4:ee:4f:37:a7:3e:64:40:53:e2:b4:e9:af:0f:
dd:d5:47:bb:26:35:0c:86:74:81:03:12:f5:c8:67:
cf:fc:6c:4b:ff:78:ca:51:75:5e:27:12:98:41:94:
fe:92:62:0e:16:12:99:8a:c1:ff:d8:42:ea:8c:32:
4e:1c:3c:56:68:70:6d:95:f1:83:f6:2c:40:40:08:
98:79:89:1d:36:ed:7f:3f:83:15:c4:91:2c:e4:05:
5d:44:c4:b3:2b:01:2f:b9:d2:e4:4c:fe:ee:70:0f:
29:77:5f:1e:12:22:9b:92:c8:18:a4:0f:4b:f5:e9:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:66:9C:4C:84:7D:4C:83:2A:A1:6F:64:42:C3:C4:5D:20:49:7C
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5c:19:57:43:e7:e4:56:ee:54:2c:c8:6d:9f:79:e0:eb:af:
c3:94:8e:bc:1a:86:48:e1:b6:03:72:a2:fc:fe:dd:6e:9d:5d:
f6:be:86:bb:3d:fa:b5:3b:d6:91:d4:0d:42:ee:31:35:ab:c1:
c4:c0:8c:9b:12:15:27:f1:24:0e:41:ab:d1:93:77:6f:e2:68:
8b:a3:f1:19:9b:32:ec:40:4b:65:09:b8:9d:c9:2f:1a:25:38:
25:5e:4c:39:6c:bc:24:8d:96:e4:98:89:dd:16:c0:6f:14:70:
d8:da:13:62:ae:12:60:1d:45:97:08:45:ac:28:8f:30:d6:66:
87:c8:82:fa:98:15:7d:9c:f4:d9:d4:07:71:92:6c:ab:5a:94:
dc:a6:13:e7:03:9c:d7:d3:06:e4:61:c2:d3:1b:1c:83:f9:e8:
c9:06:c0:91:1d:06:27:e7:3c:37:f7:c5:4c:57:35:08:c3:53:
7a:a7:f7:a1:40:42:d0:42:be:ac:08:00:04:20:25:10:4d:3f:
a0:b9:c9:a5:b9:ae:46:9b:57:75:3d:bf:87:48:25:1e:ca:4d:
6e:31:a3:86:f6:7f:e3:6a:18:e1:81:8f:f7:54:9a:47:30:17:
22:2e:c9:57:6f:ee:22:96:d3:6c:ef:a3:f0:7f:87:3e:a3:87:
d3:af:17:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:31:14 2025 by rpki-client