Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: rwLZ4sneDEevJh0aNi+1LWuADnqhdtOV5f+sSXby9Rw=
Subject key identifier: 84:FB:F2:EE:4A:40:A9:78:37:0C:84:8A:2F:63:0E:B8:2A:93:2E:0C
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 01974E572F8FF308BB688C89D8890F600D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 1210
Signing time: Sun 08 Jun 2025 07:00:26 +0000
Manifest this update: Sun 08 Jun 2025 07:00:26 +0000
Manifest next update: Mon 09 Jun 2025 07:00:26 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: pWEdYvziTOOfc9twb6mEZCqCObLjTshwIBg20K6ae1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:2f:8f:f3:08:bb:68:8c:89:d8:89:0f:60:0d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Jun 8 07:00:26 2025 GMT
Not After : Jun 9 07:00:26 2025 GMT
Subject: CN=84fbf2ee4a40a978370c848a2f630eb82a932e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:24:83:ce:71:cb:b1:ef:5c:b6:d7:60:b0:
00:fa:aa:2f:59:76:0f:bb:10:9b:aa:5b:05:5e:36:
ed:84:db:04:58:a5:66:49:a5:90:c5:01:89:66:31:
ee:62:ce:36:67:27:63:a7:65:5d:37:3b:fc:38:f9:
85:9e:72:71:8b:64:8f:80:e1:ef:8f:52:3c:28:d4:
e0:55:03:40:26:06:b9:03:fe:b2:26:b5:0f:39:d0:
c7:4f:83:70:ad:49:f6:16:a9:c7:e8:8d:d8:3f:f3:
94:30:5e:2e:29:4d:96:83:72:34:15:c9:cc:ef:f5:
16:e5:54:53:d0:20:34:0e:c6:52:30:d8:0a:29:57:
f9:f9:fd:aa:e1:c5:51:fe:4c:b8:1b:5a:56:51:ca:
76:16:eb:20:02:88:8e:93:ca:f5:2b:c0:55:4b:69:
7f:a4:1e:eb:d2:0a:64:9f:42:f0:bc:5d:3d:32:ef:
a6:a8:20:c5:a3:c9:82:6e:2c:ff:93:d1:ee:dc:4c:
5f:c5:c8:fc:f8:ec:fd:67:0f:9a:4e:1c:54:04:2f:
02:d5:22:6f:14:9c:33:4b:dc:63:47:49:3a:f1:3f:
c7:69:56:cf:86:c7:de:13:0f:42:d9:92:f0:b4:72:
85:c1:99:d5:01:a2:4c:70:9b:92:4d:87:0c:24:88:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:F2:EE:4A:40:A9:78:37:0C:84:8A:2F:63:0E:B8:2A:93:2E:0C
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b3:ef:0e:71:53:d1:b4:4f:36:e9:c5:a7:12:40:14:95:b4:
44:b2:96:4f:20:9d:2c:f1:6c:b7:11:12:94:be:82:da:a5:db:
aa:ea:09:c9:d9:ad:a4:56:f7:c0:b9:85:49:9b:d0:7a:1f:30:
e8:3d:21:0f:8d:c7:b9:81:25:69:9e:d4:d9:4c:3d:25:79:5e:
18:90:fb:a1:38:ff:a7:e3:c1:75:27:97:5c:be:11:2f:fd:e7:
75:d5:af:ac:af:99:e9:87:97:0e:6e:88:cd:88:fc:38:41:7b:
cf:29:c5:71:81:e0:50:72:8e:3b:dc:6b:33:f3:d6:2d:fc:3b:
4a:50:7d:6a:3f:d4:e2:d8:2c:de:61:f7:af:90:f5:48:80:37:
0d:85:b0:e2:71:df:34:db:de:c3:62:57:20:08:84:d2:0f:cf:
9d:be:0d:4b:c2:c7:ae:cc:d1:ee:6c:77:09:73:31:8e:91:8a:
2f:44:1f:de:a6:0d:eb:06:f7:5a:a1:a0:54:0d:97:a3:dc:ab:
3b:16:54:93:ee:f7:8c:42:bd:d9:a7:99:aa:d3:30:5b:d5:93:
52:c4:37:dc:2f:09:6f:84:3f:8b:fd:7d:c4:03:2c:da:a2:42:
4e:ed:1e:5e:ea:88:c8:cb:42:f9:0e:f1:ff:40:76:9f:83:47:
89:74:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:35:00 2025 by rpki-client