Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: EzeufGYIgdHyFo05+PCihgvF5ZkrhUQEBeZo7naM0Fo=
Subject key identifier: 58:4F:39:A1:FA:4B:E0:8A:19:65:A5:87:4D:74:E5:FD:3F:C4:9B:71
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 019754225FD36CBBA771D535EFA00C7B9164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 0334
Signing time: Mon 09 Jun 2025 10:00:28 +0000
Manifest this update: Mon 09 Jun 2025 10:00:28 +0000
Manifest next update: Tue 10 Jun 2025 10:00:28 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: niL6txa+0N3oFMXadeVGChCLtntCpk4Mbnc9kneiVgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:5f:d3:6c:bb:a7:71:d5:35:ef:a0:0c:7b:91:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Jun 9 10:00:28 2025 GMT
Not After : Jun 10 10:00:28 2025 GMT
Subject: CN=584f39a1fa4be08a1965a5874d74e5fd3fc49b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:68:f6:1d:dc:3f:25:7b:88:73:55:9b:68:
76:f2:1a:70:b3:b0:60:5a:9a:07:49:07:ab:0f:11:
41:15:43:c6:f3:a9:b1:48:2a:92:99:0a:c0:df:1d:
a7:c8:55:9e:09:bc:33:19:58:8b:62:65:00:aa:84:
fb:ea:7e:b5:4b:6d:22:a7:eb:ee:7f:65:34:46:bf:
fd:51:55:d8:d0:d5:2f:aa:83:3a:2c:ff:ac:90:e1:
89:a7:d0:73:f7:5c:bf:dc:85:6b:24:99:5a:26:5d:
22:00:d7:2f:06:eb:40:43:00:4c:b6:41:97:1b:72:
f2:13:52:94:8c:33:a3:fe:0c:44:68:3e:2f:ba:3f:
b1:b0:c1:d4:b8:14:ee:8f:37:1f:9e:67:ae:48:1d:
d2:95:e9:3e:76:36:3d:3d:50:f5:39:65:e3:fc:23:
b4:92:9a:1b:fa:51:29:c0:90:3f:d7:e9:91:d7:43:
5d:20:f1:a6:69:5c:c8:41:9d:5f:01:0e:c9:89:8f:
c1:bd:30:50:ae:54:2c:85:0d:b2:82:75:48:ac:96:
21:15:1c:02:eb:65:35:57:3e:4c:bb:76:4f:6f:88:
1f:ef:9b:71:c1:b8:ff:95:b1:a1:c4:be:0e:6e:8a:
67:37:66:42:83:82:a8:1a:38:ba:e2:54:c5:8e:dd:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:39:A1:FA:4B:E0:8A:19:65:A5:87:4D:74:E5:FD:3F:C4:9B:71
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6e:a8:15:c4:27:f5:63:13:61:98:2c:60:4e:45:38:6c:0a:
00:2c:29:ad:de:a0:39:b4:08:14:15:84:23:7e:ef:e5:50:74:
99:d7:02:5b:28:d3:ef:d8:a5:5d:17:b9:4b:9b:9c:d4:68:7c:
57:c4:a9:26:db:39:72:8b:0a:7a:e1:15:a1:7c:23:75:d4:97:
32:32:9a:5b:e6:42:a6:3f:92:2c:18:59:96:31:66:72:ab:c2:
ff:c7:73:cc:ec:f7:f9:70:51:e9:46:29:e1:86:26:72:d6:ce:
41:cc:ab:ab:4d:1e:5c:a4:3b:86:14:9d:2b:d5:e2:79:40:ad:
1b:66:fb:74:bd:cc:34:ea:30:10:e7:88:69:97:b4:07:7c:4d:
bd:e7:ba:65:7d:24:b5:5a:ad:ea:03:a3:bc:4d:0b:b0:b4:f9:
14:91:a4:84:16:45:f5:de:98:ed:1f:eb:88:25:91:ee:be:9f:
56:86:c3:66:83:17:b1:42:ac:76:99:b5:43:d7:83:83:49:a8:
4c:96:03:c8:33:82:69:c0:bc:ba:39:29:4b:59:2e:69:d8:da:
b5:8c:cc:05:67:f8:05:e1:2d:54:34:e6:fd:eb:6c:e2:14:cd:
54:6e:69:b1:28:8f:2f:ed:49:e2:d6:73:d3:03:a1:e4:d1:72:
05:50:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:43 2025 by rpki-client