
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: JHoAd+fsO2zNUf2nc0b9/di393bVIyWd2fIa6L9a/Ks=
Subject key identifier: D9:85:F6:1E:F2:C0:E0:7F:07:6F:D2:94:99:DC:33:D4:F8:57:30:11
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 01975045B8F651806160240996377D4715D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 16:00:35 +0000
Manifest this update: Sun 08 Jun 2025 16:00:35 +0000
Manifest next update: Mon 09 Jun 2025 16:00:35 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: 0of/MUpmrPSF597FoR3Legi09g+OUmnp57YaUZAMW6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:b8:f6:51:80:61:60:24:09:96:37:7d:47:15:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: Jun 8 16:00:35 2025 GMT
Not After : Jun 9 16:00:35 2025 GMT
Subject: CN=d985f61ef2c0e07f076fd29499dc33d4f8573011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:72:dc:a0:fc:7d:b0:40:84:9a:7f:6f:db:9b:
c1:2f:71:71:28:53:43:15:94:54:a4:56:bb:55:c4:
30:66:5d:37:e8:8f:3f:d0:f4:7a:f1:92:2a:64:da:
e2:0a:25:4a:7b:4d:70:8f:f1:01:06:50:aa:b7:64:
63:3e:0d:bd:e2:1a:28:2c:6f:59:66:f9:a1:d5:69:
a2:23:5f:3f:8a:06:0b:a0:42:9c:74:7c:bd:5c:b1:
f7:b1:1d:92:e4:66:51:3c:a9:aa:67:b9:c3:e1:8b:
73:2d:05:65:e9:8e:f7:4a:d8:f8:d9:f5:4f:91:3e:
f1:40:13:a1:20:ec:90:33:db:a1:aa:70:c7:e9:b4:
83:a6:59:6a:ec:30:a2:ba:1c:3e:48:15:29:b6:2d:
40:18:73:ea:cd:0c:02:73:2d:85:b2:3c:09:77:7a:
cc:3f:68:11:eb:e8:d4:f5:d7:3b:4c:b1:46:76:92:
25:93:52:01:36:24:1b:f7:73:16:48:fe:d8:91:f5:
3e:cc:de:5e:64:ee:d4:36:9f:8a:bf:40:16:99:f4:
95:34:fe:ef:53:ec:58:85:65:a4:8a:aa:75:0f:86:
2f:32:17:07:05:1c:8c:04:45:51:26:7d:01:29:bc:
d1:63:2b:d4:2a:57:6a:ff:67:28:0e:a2:c9:00:1d:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:85:F6:1E:F2:C0:E0:7F:07:6F:D2:94:99:DC:33:D4:F8:57:30:11
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:44:e2:7b:09:f8:38:03:60:5a:1e:8a:30:c2:f7:31:dd:
55:b2:83:34:c0:2e:81:e9:24:db:6e:2c:ce:fa:53:33:9a:6f:
d8:89:1b:af:b2:53:09:36:12:c6:55:25:42:1b:b7:3c:c9:4f:
78:80:b9:14:cf:77:37:d8:bf:d7:0c:1f:3c:20:45:3a:98:68:
e3:1b:ac:54:fe:08:4b:cb:2a:c7:0b:87:1f:33:53:25:b7:14:
b4:06:ec:76:d8:b6:6f:aa:e2:c5:dd:69:87:5e:0a:0f:64:0d:
9d:f7:69:00:4d:b2:98:7f:c9:30:cd:71:35:22:b6:9c:d8:e5:
58:71:af:76:22:a1:11:8c:ba:4a:74:af:74:2c:40:3a:1a:df:
40:4f:27:9d:16:8d:34:8b:d5:77:9d:d4:2b:e1:13:8f:4f:f7:
1c:82:c8:05:91:80:3b:e5:93:d2:24:43:60:eb:84:d0:19:6c:
e2:b2:11:9e:4f:7a:d9:89:4f:35:b1:43:e9:3e:68:7d:1a:ea:
af:63:50:74:52:72:12:19:64:78:5c:e8:4f:19:43:6b:db:bd:
15:4d:63:63:7d:09:e9:4c:93:76:62:5d:dc:93:01:b0:be:7d:
21:3b:9c:a6:e1:4b:44:33:b5:75:14:1c:91:59:70:13:ed:07:
f2:64:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:14:15 2025 by rpki-client