Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier: /6Y8HPbpqogavjIghgxL5zZuULbD4xX1IkRFtsl1dvE=
Subject key identifier: 72:2B:4E:27:86:D3:41:FE:A9:D0:A9:D5:9B:46:26:1A:36:84:1F:B6
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial: 0197CACC64A860ED8833C0546631E71FE846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number: 07A6
Signing time: Wed 02 Jul 2025 11:01:22 +0000
Manifest this update: Wed 02 Jul 2025 11:01:22 +0000
Manifest next update: Thu 03 Jul 2025 11:01:22 +0000
Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: q4WAjtJl+qS/JWkSLOuTyVxRzWmW8qF4GsfaitHHxfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:64:a8:60:ed:88:33:c0:54:66:31:e7:1f:e8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
Validity
Not Before: Jul 2 11:01:22 2025 GMT
Not After : Jul 3 11:01:22 2025 GMT
Subject: CN=722b4e2786d341fea9d0a9d59b46261a36841fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:1c:a7:a9:0c:44:66:04:be:2b:e0:69:d3:
73:c0:86:80:c2:62:b4:d0:81:5e:06:68:81:de:f7:
b8:a6:47:31:0c:31:45:b1:2e:2b:21:de:f9:d2:04:
b3:aa:a1:9a:7c:8e:f4:f8:d8:42:95:d9:fa:2a:7c:
07:56:84:a2:23:4f:95:bd:55:c6:d6:a5:2f:0d:0f:
40:f5:d4:f6:ca:16:2f:07:49:fd:30:b6:c4:0b:f6:
c9:68:19:4a:00:5b:94:90:f4:6d:95:e1:81:e1:8c:
17:a2:0d:f5:6f:07:1e:1c:df:30:71:b1:29:e7:80:
e0:ad:0b:0a:6a:80:d1:54:44:77:d1:11:9c:77:7a:
65:26:da:dc:7b:0d:c0:0f:08:e9:f1:20:8d:f1:24:
a5:0a:7a:be:a8:2b:52:95:4f:94:d8:5c:09:82:be:
33:19:6e:f9:22:e9:1f:5f:78:25:6d:1f:aa:95:68:
21:5c:c0:91:32:f2:97:70:3e:2d:0e:cd:bc:d9:c2:
a6:ca:6d:c7:20:8f:d7:ea:f1:d9:fd:a0:51:04:9c:
1e:d0:86:0c:f0:39:01:97:2e:1a:a0:f5:ce:44:ec:
04:74:f3:78:d4:a4:4b:8f:36:02:5f:9d:09:3d:2b:
b4:91:2d:16:97:3f:16:02:23:ea:2c:75:34:9d:97:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:4E:27:86:D3:41:FE:A9:D0:A9:D5:9B:46:26:1A:36:84:1F:B6
X509v3 Authority Key Identifier:
keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:6d:98:e6:34:4a:1f:3b:fc:c3:90:7f:ca:fe:e4:ef:7a:94:
86:31:4b:22:cb:17:fd:63:77:e7:63:50:73:e8:ef:cf:f3:63:
f5:e8:88:9d:6a:62:80:70:18:a3:d0:59:9d:33:bc:f1:bb:22:
a9:1f:04:20:cf:f0:71:c5:42:31:9b:3f:81:f0:f2:f6:c7:88:
7a:fb:74:76:46:49:03:76:e5:b6:20:ed:7c:8c:17:c9:84:a6:
e4:ad:ff:4f:88:fa:86:09:28:61:55:aa:fa:0b:eb:fb:0b:18:
1d:7f:f7:e3:97:ce:1f:df:4c:af:d2:ec:af:27:18:c6:c2:c9:
28:ab:36:50:da:41:1c:22:b7:23:b8:cc:67:7d:7c:a2:8f:40:
f9:05:f3:cf:4a:d7:fc:6e:61:49:f6:34:66:21:79:7c:3e:cc:
1d:b1:fc:b3:6c:1a:33:7a:df:25:ac:0d:c3:f3:b6:a4:77:8a:
6c:c3:80:6c:7d:9f:78:91:48:b1:0d:39:82:54:08:82:50:77:
2a:2c:15:36:3f:88:ca:75:6f:da:24:42:20:54:16:f8:a4:2d:
b9:c1:d6:04:87:4b:51:74:0c:61:21:c5:74:c8:0e:1a:5b:fa:
29:80:b9:9c:4e:13:a5:68:81:ed:80:85:f0:5f:c6:2b:b0:09:
47:54:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:09:21 2025 by rpki-client