Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: 69RX+ILHlTztIcWR/UIBwnHCSCrq+dkQ8Cduwo/utoY=
Subject key identifier: DF:7F:C2:DD:FE:63:D5:64:A1:EC:21:7C:A5:D9:92:6C:E3:03:DF:21
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 01976F2BF29E983B575AD1EE4F53E4807209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 0342
Signing time: Sat 14 Jun 2025 16:00:40 +0000
Manifest this update: Sat 14 Jun 2025 16:00:40 +0000
Manifest next update: Sun 15 Jun 2025 16:00:40 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: IqFc6sf3QDtxQsgtcrlTXIjkrLEXE/wHF4ExDp2ZN/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f2:9e:98:3b:57:5a:d1:ee:4f:53:e4:80:72:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Jun 14 16:00:40 2025 GMT
Not After : Jun 15 16:00:40 2025 GMT
Subject: CN=df7fc2ddfe63d564a1ec217ca5d9926ce303df21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:cb:9e:aa:31:d9:d3:78:1b:d3:6f:6c:f9:
7f:d7:81:d3:0b:8c:7f:9d:6a:83:bb:9a:c1:16:d8:
a4:c8:cc:80:84:7f:f3:bf:27:ef:d6:68:21:c1:6b:
fd:1f:d8:97:0d:75:9d:3e:a6:1c:0d:4b:63:b9:da:
65:af:25:cd:19:83:65:dd:1e:59:f1:a5:39:c7:ab:
a3:c8:ed:2b:f6:a9:51:61:87:aa:88:98:47:56:33:
36:f0:54:10:55:f8:1b:92:95:9f:9e:a7:33:fe:62:
c2:c3:1d:0b:09:2e:eb:e3:be:8e:68:a1:99:47:44:
c5:1d:aa:fc:f9:cb:f0:e7:57:c7:45:ec:ac:76:30:
7e:d1:a1:92:be:95:b9:a0:9a:dd:1d:b3:03:29:f2:
18:03:f8:ac:a5:b0:0a:79:36:69:a2:0b:60:4a:99:
d4:ff:e3:a5:db:56:68:96:1a:c9:d4:5f:01:12:a4:
18:29:35:19:40:f6:2d:16:98:e0:39:80:cf:68:83:
59:a8:1f:92:86:4a:7b:23:05:01:c4:e5:4e:57:b9:
be:5c:ac:fa:7b:bf:c2:c9:ee:ef:62:d0:d9:5d:ef:
f9:3b:ed:e4:36:f2:bd:61:9e:9f:c0:87:83:c0:db:
07:c6:05:74:ec:8f:23:ee:ad:33:51:60:97:09:49:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:C2:DD:FE:63:D5:64:A1:EC:21:7C:A5:D9:92:6C:E3:03:DF:21
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c4:a1:43:60:64:a5:61:65:c7:76:80:30:62:82:85:19:64:
70:01:d6:a1:53:6e:fa:0c:33:99:59:ba:9b:42:55:38:68:60:
ed:db:ca:16:d6:04:74:ec:ac:3e:02:14:6b:ff:b1:f4:59:2e:
2e:45:01:14:e0:aa:c4:11:6c:b5:45:5e:c0:f6:59:39:f7:d9:
a2:0b:64:5d:7a:31:bd:46:8c:f9:28:04:a8:fb:52:3c:77:aa:
a3:4d:9b:0a:91:68:9e:a7:cd:da:fb:d5:c5:b8:af:90:78:e5:
35:25:39:a6:f6:05:70:4e:8b:7b:1a:4a:b8:e2:ff:8e:a1:dc:
d3:16:ea:e6:c4:06:c3:0e:1d:f9:b7:2b:03:b5:d3:47:b5:2f:
fa:86:56:01:6a:e6:b5:01:f6:1f:db:18:18:33:30:8a:78:a7:
4f:40:a5:41:19:e8:76:4b:2e:dd:f9:e1:11:06:e6:e0:fa:0d:
51:56:d8:7b:cd:4d:7a:34:4d:e7:af:91:ba:37:b5:33:25:0c:
62:4d:62:b4:80:d0:4f:64:47:fc:af:7c:60:15:12:6f:1b:0d:
f3:14:63:d0:21:ae:a3:2b:64:df:1c:dd:02:61:fa:09:22:2b:
0d:6c:f3:b6:1c:c4:0b:e2:4d:80:89:8d:c9:17:37:2d:24:d5:
4e:fd:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:06:33 2025 by rpki-client