Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
File: gXS2uiCeYit5ihT86qlEdi-nYpo.mft (raw, json)
Hash identifier: b/favKmpput08aAVoxoiEgbD5PpOYKr0Vcen4skznkw=
Subject key identifier: EF:C2:03:67:33:64:45:85:6E:2E:F6:9C:C5:2C:8B:6C:6A:65:EF:A6
Authority key identifier: 81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
Certificate issuer: /CN=8174b6ba209e622b798a14fceaa944762fa7629a
Certificate serial: 01974B1F1C01D532A25127857C06F5B540AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
Manifest number: 3C
Signing time: Sat 07 Jun 2025 16:00:19 +0000
Manifest this update: Sat 07 Jun 2025 16:00:19 +0000
Manifest next update: Sun 08 Jun 2025 16:00:19 +0000
Files and hashes: 1: gXS2uiCeYit5ihT86qlEdi-nYpo.crl (hash: gzUltYvhelGC7KEFy15YXw5YkhNtqee/LuHTEHHZ3Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:1c:01:d5:32:a2:51:27:85:7c:06:f5:b5:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174b6ba209e622b798a14fceaa944762fa7629a
Validity
Not Before: Jun 7 16:00:19 2025 GMT
Not After : Jun 8 16:00:19 2025 GMT
Subject: CN=efc20367336445856e2ef69cc52c8b6c6a65efa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:e9:0d:9b:75:6b:80:7d:0b:ae:2f:f4:66:
55:b6:ac:3c:85:61:72:aa:b0:b6:1f:54:83:74:68:
e6:cc:e7:72:a8:cd:ad:84:20:d3:42:49:29:0a:5d:
af:c4:8a:f2:f0:e9:f4:b4:39:e6:5a:a7:75:51:63:
0a:61:42:f3:3b:e5:54:ef:c5:10:10:6f:30:5a:04:
23:65:2a:a1:35:42:7a:19:07:93:9a:88:aa:e5:9e:
26:f4:cd:f5:71:74:b7:fb:e3:ae:24:3d:d4:1f:09:
c0:82:fc:20:22:e3:e8:ea:ed:1b:1a:5f:46:67:ef:
96:4c:1f:29:e7:c3:cc:f1:26:1a:bf:5a:91:10:be:
31:fa:ab:8d:ab:32:17:3f:a5:31:ad:a5:b0:1b:46:
56:b6:9e:f6:3a:93:1b:0c:a1:02:5f:c6:69:28:dd:
4c:23:e1:ee:08:0c:18:3d:2e:1b:fa:20:8f:2c:d9:
de:89:51:12:b7:b6:ba:65:bc:9a:81:1b:64:4a:26:
db:44:35:ae:1b:20:76:73:61:3d:8e:a7:19:46:60:
23:55:b8:d8:11:ca:e9:a9:18:9f:98:ed:a9:a9:6d:
4b:c8:f5:11:a6:9f:7c:01:0f:93:70:fa:44:3d:52:
07:65:73:eb:e4:0e:62:6c:fc:8f:45:09:c0:81:94:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:03:67:33:64:45:85:6E:2E:F6:9C:C5:2C:8B:6C:6A:65:EF:A6
X509v3 Authority Key Identifier:
keyid:81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ce:05:c2:33:a2:79:d2:92:2f:7e:a0:ec:0d:93:e4:74:df:
64:1d:ba:07:69:9c:80:43:12:d4:85:0d:4c:8e:e6:7a:31:ce:
6b:5e:83:3a:a8:ea:5d:8d:43:58:f3:2e:92:46:7b:62:b7:ed:
4a:f2:61:3c:84:90:2d:e9:dc:c8:55:d6:c3:26:57:63:cd:61:
4f:f2:3b:cb:5d:92:76:1e:85:2f:30:7e:bf:a7:d0:df:90:b0:
cd:69:f3:99:6d:49:5e:cf:46:6f:c6:5b:ec:f0:06:9d:db:8c:
f7:ec:10:92:e8:9a:84:07:90:95:99:34:1b:cd:ce:5b:34:d8:
6f:be:8b:5a:58:02:32:6a:72:89:5c:43:7e:3d:0f:a4:7e:6b:
bf:62:fe:8e:76:a7:ce:58:06:b9:c0:63:88:6f:92:7d:0d:7f:
c0:5a:a4:45:d1:9f:fc:16:37:4a:39:d0:2c:3e:34:3e:4d:f8:
62:ec:36:5c:b1:95:3a:f7:3a:d8:bf:80:ab:69:a6:c2:0b:87:
cf:77:c4:e2:0b:0e:4c:ab:09:f1:30:e9:d3:45:f6:fd:57:26:
df:b6:73:f6:d5:98:1d:cb:9e:c3:9b:e8:b9:50:ee:a7:de:99:
51:ac:a3:87:4d:b2:03:7f:52:90:81:97:33:04:7c:ea:ff:33:
ce:09:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:11 2025 by rpki-client