Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File: guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier: gQV4yvfA8O3yMfHCYzNWJNAZwsr6/UNRfY2VmIWSDuM=
Subject key identifier: 57:BF:CE:02:99:0B:44:EE:6A:77:80:2B:52:A9:DA:90:1E:AB:CB:52
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer: /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial: 019752D9164684618047C285DE9C62FA480E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number: 0ECA
Signing time: Mon 09 Jun 2025 04:00:48 +0000
Manifest this update: Mon 09 Jun 2025 04:00:48 +0000
Manifest next update: Tue 10 Jun 2025 04:00:48 +0000
Files and hashes: 1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: xYwDc0UCVfhX0vEK8HE9kFXwHZaon3YMVoT/reoYJPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:16:46:84:61:80:47:c2:85:de:9c:62:fa:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Validity
Not Before: Jun 9 04:00:48 2025 GMT
Not After : Jun 10 04:00:48 2025 GMT
Subject: CN=57bfce02990b44ee6a77802b52a9da901eabcb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:82:36:21:08:d7:b9:1a:00:62:79:bb:ca:29:
63:ee:d7:36:fe:70:42:28:b4:1b:f3:4b:0a:12:3c:
b8:8f:aa:64:b0:27:3d:1d:f5:4a:4c:fc:eb:de:d4:
42:f4:af:bc:ae:4d:4f:ca:b9:3a:a1:05:c4:2d:0e:
6f:de:f2:18:4d:c2:1d:b6:08:3c:32:8a:58:8b:7a:
7f:f1:c7:8b:39:30:31:a2:4f:64:82:fb:4a:27:0c:
4e:44:21:1c:71:5e:65:d3:ac:a6:de:7b:97:00:9d:
32:f5:2c:4d:4e:2f:c8:e5:5e:d7:9a:b1:bd:ae:54:
10:a4:64:00:62:4f:1f:a4:4f:84:ee:b9:88:06:da:
04:32:be:e9:0e:03:6f:b5:41:b3:e2:21:9a:81:52:
6f:c3:2c:03:a1:43:cd:b4:7a:48:76:69:fd:9d:12:
f8:1d:19:eb:15:17:e8:c6:22:b9:8a:e3:b5:f1:b1:
0c:63:3d:7a:14:f9:cc:a1:9e:b6:d5:e1:4c:74:29:
fa:81:c6:27:67:51:c0:19:7a:1a:69:3b:5d:2c:ef:
83:e6:8b:03:f7:4c:30:0a:30:28:82:f6:17:7e:d3:
c7:69:d6:2e:80:1b:4b:7d:0d:54:46:48:a9:b3:41:
9a:a1:35:f6:de:2e:39:dd:62:14:9c:50:49:b2:e6:
08:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BF:CE:02:99:0B:44:EE:6A:77:80:2B:52:A9:DA:90:1E:AB:CB:52
X509v3 Authority Key Identifier:
keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a1:d5:cd:7e:e0:4f:01:3b:49:47:90:0c:34:0f:47:c3:c7:
99:69:06:c1:5c:df:41:db:ff:4f:9c:77:68:3e:00:f1:b6:cf:
f5:d5:95:fa:be:79:a3:a8:82:5d:e4:1a:57:2b:43:e8:ba:93:
b1:1c:c5:36:43:32:26:98:d3:00:27:c5:f0:5b:40:63:71:79:
23:01:4f:51:50:e0:e1:0b:43:5f:17:f0:61:5e:44:be:db:2c:
72:a0:60:e4:09:c8:35:1e:09:12:52:90:03:23:27:94:32:75:
9b:8b:64:9d:b9:64:b6:f8:87:10:73:01:8c:fa:e5:84:98:6e:
2d:7c:0f:98:86:b6:76:2a:86:a4:e4:94:b2:9b:3a:89:86:d6:
7d:91:db:52:13:af:ab:f9:b1:5e:87:09:3b:79:c2:23:38:23:
34:6a:a6:e4:a5:02:13:6d:51:1c:2b:31:b0:16:32:7a:8d:08:
b2:1e:82:29:d3:15:6e:36:5a:d4:e0:b2:4a:09:b8:91:64:f4:
c8:97:0e:c5:6b:3c:5d:de:50:37:92:69:7a:16:c5:21:2e:77:
55:da:e5:58:62:81:d8:9b:20:ad:fd:f9:11:00:4c:4a:79:51:
92:04:d2:48:8c:1a:26:60:b5:4c:5d:7c:81:5f:bf:26:1c:ac:
0d:4d:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:22:25 2025 by rpki-client