Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File: guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier: qKB8XPsa/tjkQqLxHL8677OtJRVLfrUdMs09U5wOV8Q=
Subject key identifier: 3F:43:91:E5:49:CE:C2:C8:07:C2:1C:AF:97:AD:99:F2:25:F7:91:5C
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer: /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial: 019758A3D78B447CA6133D408FC35758242D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number: 0ECD
Signing time: Tue 10 Jun 2025 07:00:21 +0000
Manifest this update: Tue 10 Jun 2025 07:00:21 +0000
Manifest next update: Wed 11 Jun 2025 07:00:21 +0000
Files and hashes: 1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: rjdoeLBIkt/1yHG7yVmx3jf+dN/j9ZxqhewT24CTwCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a3:d7:8b:44:7c:a6:13:3d:40:8f:c3:57:58:24:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Validity
Not Before: Jun 10 07:00:21 2025 GMT
Not After : Jun 11 07:00:21 2025 GMT
Subject: CN=3f4391e549cec2c807c21caf97ad99f225f7915c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:8c:0b:49:8e:e3:94:01:2d:75:d9:c3:f7:
41:48:0f:ca:48:05:71:be:57:f5:f4:25:8f:d7:5e:
56:55:b1:85:d7:dd:8f:78:55:83:8c:24:1f:f2:ea:
2e:bc:12:b3:b9:3f:e9:c9:a9:04:15:75:6d:e8:04:
3e:63:ee:58:e6:9a:91:48:65:a4:4f:40:04:53:a0:
74:46:ff:30:5e:16:df:a4:6c:6b:05:b3:56:07:fb:
15:44:a7:e0:61:cc:ad:17:52:ce:c5:7c:12:be:10:
8a:c4:a3:f0:92:1b:4a:91:3a:58:a1:92:30:31:cd:
4f:9d:00:ef:fd:d2:39:db:a3:3d:99:86:f2:2d:51:
35:7a:d7:80:0d:14:3b:bb:9f:02:f6:6c:fa:1f:97:
5d:96:5a:41:b2:ea:ab:ef:e1:ff:6c:1d:d8:84:56:
00:46:b7:99:24:ff:9f:74:2f:75:62:20:98:90:21:
c2:ec:b7:28:40:9b:7e:9a:04:b1:02:06:f6:b8:6b:
26:21:9e:86:65:0e:db:7b:94:ed:b1:b6:04:26:5d:
29:64:aa:83:80:4e:28:33:d8:ac:7c:48:e3:fa:4b:
2d:7a:95:a9:c4:b5:cd:ac:06:97:a2:74:dd:a7:10:
3d:81:56:61:90:ab:27:4c:67:72:e7:6d:69:c1:44:
18:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:43:91:E5:49:CE:C2:C8:07:C2:1C:AF:97:AD:99:F2:25:F7:91:5C
X509v3 Authority Key Identifier:
keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a1:67:5f:d1:a7:67:69:1f:90:cb:9f:36:92:3c:fd:e6:1a:
12:32:5f:b4:9a:52:4a:2d:83:b5:44:41:3d:33:88:07:84:2a:
d5:38:87:01:60:a5:ee:8a:46:c8:fc:89:e4:9e:6d:06:1d:29:
7c:65:29:9d:ca:5f:10:54:83:d7:58:ff:e4:ca:ee:34:0e:98:
4f:2e:78:49:e2:69:ef:c0:95:94:b1:9a:43:6b:5a:a7:91:d8:
33:07:ec:8c:be:2b:49:50:6e:5e:f0:23:03:35:69:e1:04:c7:
ae:b0:75:b0:62:72:5a:37:e3:e7:3a:d6:67:75:45:ce:db:36:
30:dc:84:6e:47:1e:b2:dd:e3:a1:f0:85:b4:ce:49:51:6f:0f:
93:ec:96:72:45:51:60:18:87:01:4a:e5:c2:03:95:1d:d5:7d:
26:a8:7b:93:fb:8f:2d:e1:70:19:c3:1c:40:9c:44:d4:5e:02:
c3:23:a5:44:a4:e9:67:2b:26:e2:9a:8c:c9:69:e9:0b:07:e4:
15:9e:ac:bc:74:f6:09:ff:24:b6:bc:51:ef:e6:40:72:b0:ec:
e6:a7:c4:c6:d2:5a:78:71:3e:cc:f8:da:ec:65:7b:f6:12:61:
87:32:be:c3:b7:9a:2b:05:19:6e:55:b1:24:3a:53:ed:1a:27:
72:57:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:20:45 2025 by rpki-client