Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File: guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier: mZzl60bQ4qlbCkeb5QfoBIrCxJSql3R3Vlr/sOIoi7Y=
Subject key identifier: 47:41:2B:F1:0A:C4:A4:68:3F:10:93:30:A7:5D:CB:0A:F0:E2:F9:21
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer: /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial: 01976BF3F1E65125628B394897AA3A22157E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number: 0ED7
Signing time: Sat 14 Jun 2025 01:00:38 +0000
Manifest this update: Sat 14 Jun 2025 01:00:38 +0000
Manifest next update: Sun 15 Jun 2025 01:00:38 +0000
Files and hashes: 1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: AqATu2HOpXWL1ogtkbHNHZoHD/XhvgbWAWqJVZ/UPqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f1:e6:51:25:62:8b:39:48:97:aa:3a:22:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Validity
Not Before: Jun 14 01:00:38 2025 GMT
Not After : Jun 15 01:00:38 2025 GMT
Subject: CN=47412bf10ac4a4683f109330a75dcb0af0e2f921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:60:b0:0f:c0:3d:83:b4:a7:65:ea:54:3d:
dd:27:22:c2:74:87:c1:6b:7c:c3:d5:5f:f4:ce:39:
c0:a6:84:31:e5:47:cc:13:e0:eb:35:e8:8c:62:f8:
4d:58:0d:eb:f6:6f:98:3f:bf:4b:60:92:a3:98:93:
47:4d:f5:2f:5f:45:ba:6e:90:3d:87:63:92:ee:b0:
d9:20:56:f3:4b:d2:6f:3a:1c:6e:76:b5:b2:3c:77:
e3:00:96:56:51:79:84:a5:05:ed:55:41:6a:91:d6:
b3:94:b0:e7:ac:cd:6e:56:5f:02:7c:25:17:9b:ef:
0f:a1:0c:89:5d:15:52:4d:73:50:9e:b0:fe:93:64:
04:49:12:0b:01:69:dd:63:bd:f8:02:a6:57:27:66:
96:d1:ad:29:84:53:07:97:3e:44:3a:1b:59:c1:a2:
79:0a:07:0a:29:81:fd:4b:ef:23:e8:cd:ee:a8:e2:
97:8f:bc:eb:09:94:d5:e8:bb:68:74:63:b7:7c:27:
e1:e8:c8:ad:81:b3:c8:9d:8d:f3:92:51:b9:c0:31:
a5:cb:c9:9c:bc:f2:8e:a4:30:6a:a6:21:04:a6:73:
2f:c7:e1:98:a0:f4:c3:de:64:7b:68:b4:94:10:2f:
94:37:bf:5b:68:0f:cc:14:0a:d9:94:06:6a:4c:a1:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:2B:F1:0A:C4:A4:68:3F:10:93:30:A7:5D:CB:0A:F0:E2:F9:21
X509v3 Authority Key Identifier:
keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d6:0e:42:4c:72:a9:79:78:8c:18:f3:ff:e9:f7:e0:8a:05:
4b:a1:59:9f:16:1a:29:bd:ee:1c:c8:18:14:b6:6d:15:52:45:
e4:54:7d:5a:ee:ff:2e:b8:04:79:4a:ed:81:d3:35:d9:5a:04:
64:80:4c:16:11:96:d0:ae:8f:f9:89:ca:f8:28:2c:66:39:8e:
4e:06:1a:82:61:76:e4:77:01:fe:f1:47:55:7b:8a:bb:6b:2a:
4e:2d:8a:98:4e:4c:dd:4b:7e:c5:3a:5f:18:c3:4e:ac:27:f6:
e0:33:a7:97:64:ee:20:be:92:5a:e0:83:3a:32:6f:12:da:9d:
92:f2:fe:51:75:bb:e5:d9:d2:52:16:f9:5d:7c:99:28:fb:a2:
6a:af:b2:61:5a:14:16:27:ed:03:a9:24:c8:ac:e9:64:2f:94:
aa:e2:6c:1e:f8:54:69:2a:ab:1e:8b:d5:4e:99:c5:26:04:14:
da:77:21:40:d6:0a:18:f9:92:91:70:fc:34:c7:33:7b:7e:1e:
6e:c4:32:bf:d7:6c:02:2a:c9:76:45:07:37:3a:b5:08:c5:5d:
32:71:b8:c2:bd:77:41:cd:71:a5:89:8f:50:a4:3e:d8:7b:95:
92:d1:79:ac:82:8b:00:22:50:a3:ad:0d:30:1c:8f:d8:b6:84:
c7:e7:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:04:38 2025 by rpki-client