Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: 8oavoep9TdbWy05QbyJgQZAfVGLE/QcmX0snm5wEczI=
Subject key identifier: 6A:50:B1:EA:56:E6:1F:2C:F0:9B:89:14:9D:D4:ED:22:1E:62:0C:6B
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 019750462500648D8094A0D3B42EB4FCEF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 16:01:03 +0000
Manifest this update: Sun 08 Jun 2025 16:01:03 +0000
Manifest next update: Mon 09 Jun 2025 16:01:03 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: 8EMZ5ptPd1U/UaaA8yjEcGuZcdZR3Dr5nhRjmsLXQdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:25:00:64:8d:80:94:a0:d3:b4:2e:b4:fc:ef:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Jun 8 16:01:03 2025 GMT
Not After : Jun 9 16:01:03 2025 GMT
Subject: CN=6a50b1ea56e61f2cf09b89149dd4ed221e620c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:5e:bc:4e:f0:39:80:9f:59:2b:1d:6c:7a:
9f:87:bd:96:04:96:13:f5:33:61:ea:f4:20:97:82:
9c:93:7e:b5:77:33:2b:02:29:b9:ca:4b:fe:cf:78:
f6:98:74:4b:33:f0:a5:bb:ef:45:f3:79:6b:b0:9d:
e8:71:48:ba:09:a3:9d:53:9e:b1:75:fb:ab:05:0e:
fd:b5:f1:52:88:d9:43:ae:47:cb:9a:8f:0e:f5:c6:
a3:41:80:f2:d7:ee:e8:36:42:17:9e:bd:1d:b7:05:
a3:93:ea:f9:44:ca:ff:95:26:54:ad:3d:e1:aa:b5:
24:de:61:32:46:58:63:36:0a:d3:54:7f:97:3f:5a:
65:a8:fa:e1:34:52:c7:5a:83:c0:b7:ee:61:9b:79:
10:64:62:5e:ec:a8:53:e0:21:90:24:77:92:60:af:
4e:fa:ba:e4:1a:87:86:8f:49:5e:6d:78:53:3b:49:
9f:e7:8f:85:f7:b0:33:5e:ec:d3:6c:57:58:a7:dc:
06:70:fe:7c:ba:8d:fb:45:8a:c5:17:b7:f3:d2:4e:
89:10:de:0a:d2:6c:02:ef:bb:e1:c6:11:be:6d:1e:
d9:62:be:21:32:f8:fb:89:ed:86:ac:e5:68:2e:97:
e8:e4:f7:81:3f:1f:18:76:7c:88:3d:a0:8d:6a:6d:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:50:B1:EA:56:E6:1F:2C:F0:9B:89:14:9D:D4:ED:22:1E:62:0C:6B
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b4:c2:36:da:20:43:5d:57:1a:4d:8f:a0:07:ce:39:9a:99:
bd:8b:62:89:a4:0a:71:28:1e:e1:a3:81:cf:72:58:07:2f:f6:
17:16:96:71:bb:dc:bd:4f:9c:85:3a:61:dc:ba:44:6e:08:72:
62:7f:df:49:b5:b7:e8:e5:f2:8d:9b:e5:5a:20:e6:89:64:64:
45:cc:b1:fd:67:e1:03:36:39:77:d0:4c:f7:8e:92:96:de:61:
06:34:c9:48:0c:3e:84:42:2c:ad:3f:30:c4:03:48:e2:42:aa:
3b:39:f3:19:43:3e:c3:9f:1c:e1:d5:31:b6:f2:56:68:63:1a:
50:f7:c0:68:7b:ed:47:a7:61:58:33:0b:79:87:eb:5a:48:4f:
6e:b1:01:ee:6f:2a:f9:95:0c:29:68:16:e2:cb:87:ec:4a:da:
b0:00:d1:2c:65:ea:83:38:f0:11:91:ea:63:d0:84:83:ac:73:
8e:ef:5f:f0:c6:53:46:6f:7c:2b:e8:fd:3d:04:f3:de:9e:b8:
82:b3:2c:60:9b:03:2e:12:af:d9:d2:71:e0:36:f3:83:67:25:
fc:65:cc:f4:de:00:50:2b:ae:a9:45:e0:a0:e0:b9:6d:01:fa:
16:22:dc:34:a1:35:13:eb:55:60:ee:3e:21:ae:fc:25:e8:9e:
e8:56:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:31:29 2025 by rpki-client