Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: LFbeIoARn+9fKOXI16Zyn7GqdRqfSdOALhXJVtyssg8=
Subject key identifier: 27:E5:1C:9A:42:1D:41:BD:8A:05:6F:B0:01:8B:23:1D:DD:AD:5E:3B
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019745F962DFAC4C0E45B51CC0B020B541DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 04C2
Signing time: Fri 06 Jun 2025 16:01:00 +0000
Manifest this update: Fri 06 Jun 2025 16:01:00 +0000
Manifest next update: Sat 07 Jun 2025 16:01:00 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: b24iVzLYJSTWvLPbGj4YiaKMJoYCOu9Fw62+DAuT4hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:62:df:ac:4c:0e:45:b5:1c:c0:b0:20:b5:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Jun 6 16:01:00 2025 GMT
Not After : Jun 7 16:01:00 2025 GMT
Subject: CN=27e51c9a421d41bd8a056fb0018b231dddad5e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:16:a3:1b:68:96:2e:89:91:f2:d5:be:11:1a:
b1:38:88:d2:a9:00:3e:6a:7f:96:43:13:0e:95:18:
de:dc:43:cb:cc:25:fb:15:2f:dc:ac:77:7f:42:21:
e0:8c:bb:f0:80:57:ae:d1:45:c8:70:8f:6b:60:a6:
64:e2:ec:50:d6:5b:53:e8:9d:35:f3:3f:cd:bf:0f:
5e:fa:be:d4:2e:aa:a9:96:f5:cb:58:29:31:49:1e:
5b:9e:fc:e0:e1:3f:de:1c:16:e3:60:24:e5:0e:ed:
b2:79:de:32:d8:1c:39:0f:d2:b6:04:09:99:a6:df:
56:0c:b3:6d:43:a2:6b:54:3c:42:89:ed:32:43:50:
8a:b9:1e:b9:d3:b0:4e:55:cc:bd:29:7a:47:53:3b:
8a:ac:06:8a:74:a9:ae:34:76:3b:f4:71:42:31:ca:
6f:b1:3d:d4:4a:2e:fb:c2:31:8a:c6:bc:e5:4f:bc:
7f:93:f7:b9:ff:21:63:07:f6:ff:51:37:12:9b:d7:
6e:d1:46:aa:69:f5:17:a6:2c:bb:97:fb:61:70:c7:
a8:70:8e:98:31:cf:74:f1:03:c7:b6:ad:92:69:11:
56:2a:59:57:fb:26:c9:59:8b:3e:c7:3c:1f:10:0f:
57:18:1e:79:b3:60:da:7e:73:11:e6:e7:52:26:d5:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E5:1C:9A:42:1D:41:BD:8A:05:6F:B0:01:8B:23:1D:DD:AD:5E:3B
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:14:c7:b7:9f:ed:fa:73:a8:ef:62:43:37:f5:ce:a3:15:fc:
0e:23:55:13:13:d8:25:97:e1:b5:48:b2:57:c8:e2:50:0e:7e:
40:8d:54:07:fa:44:16:67:9d:72:6a:b8:b7:a1:98:a6:c1:63:
6e:5a:a5:bc:49:9f:f8:24:08:f2:70:93:4d:af:f7:80:01:3b:
2e:b4:25:b9:d0:2a:0b:81:49:a1:d9:33:8d:ea:fa:1b:40:38:
bc:0a:de:2b:42:b0:3f:cd:1d:1d:09:72:8d:a8:ba:4f:1b:5d:
32:4e:e4:db:77:11:c2:09:9c:e3:0d:2a:94:31:f8:7c:1d:15:
e4:d6:3f:c1:38:20:a9:bb:79:e9:cd:e2:ca:c0:51:d8:5a:9f:
f3:3c:9e:e6:e5:99:8a:3d:af:9d:db:84:a1:90:59:8b:d6:cb:
a5:a0:15:9c:62:0f:4d:fa:d0:6e:fa:ec:77:05:88:70:95:e8:
08:fe:7f:68:8b:74:22:6d:be:d2:7f:27:d8:7e:22:d4:ed:7b:
dd:79:2b:b3:ae:91:b7:bc:14:f9:e9:fc:5e:ba:23:91:f2:b0:
ea:b1:4f:f6:a8:84:84:62:a1:6a:a1:92:cf:a8:b7:82:f9:df:
87:14:ae:83:9b:74:3d:20:0b:6a:26:7f:32:53:1a:6b:f4:4e:
5c:ba:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:05:12 2025 by rpki-client