Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: r0Q3AQeZS1y3xI5smsverazfQx1hX+SXb2Yb2ZAaBi0=
Subject key identifier: 14:A1:58:99:E3:E5:DA:0E:0F:3A:DC:FA:CE:35:3B:EB:B1:C0:27:99
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 0197488D5BEC208BB7286E72A2871C7A9D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 0D15
Signing time: Sat 07 Jun 2025 04:01:52 +0000
Manifest this update: Sat 07 Jun 2025 04:01:52 +0000
Manifest next update: Sun 08 Jun 2025 04:01:52 +0000
Files and hashes: 1: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: Pmfs9rHOChLdWR/wSbvFi8X+wtB14Ir85wAzmc4ANjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:5b:ec:20:8b:b7:28:6e:72:a2:87:1c:7a:9d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Jun 7 04:01:52 2025 GMT
Not After : Jun 8 04:01:52 2025 GMT
Subject: CN=14a15899e3e5da0e0f3adcface353bebb1c02799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:a0:de:27:cb:63:6b:c5:e3:4b:43:0c:9d:
67:c0:ad:c7:cb:03:b1:c7:0d:a8:65:b5:4e:5b:7b:
02:83:27:89:92:91:43:36:fa:3a:fa:d5:92:b0:72:
b5:91:3e:65:5b:9d:3b:09:8e:31:7b:e8:92:b3:b2:
78:6a:d9:d8:13:1a:4a:8e:04:ed:08:fb:ab:c5:d8:
76:13:2a:11:a9:87:26:30:ab:a2:73:77:5b:fb:0e:
46:b2:43:c2:f4:30:fb:f7:6b:09:87:0d:f3:f6:f8:
49:0a:40:7a:89:27:70:63:66:ed:d1:4e:46:d0:01:
e9:2a:37:3b:9c:ba:f8:bf:bc:84:a7:e9:01:f5:33:
db:67:c4:f3:d4:66:1b:09:64:7a:f6:7f:be:d0:cf:
7f:00:83:26:1c:cb:f8:29:84:7a:fc:13:4a:62:24:
21:60:c0:dd:08:39:c9:26:41:f0:97:ab:14:0e:7b:
04:c1:8a:49:26:77:b9:2e:bd:34:35:20:c7:e3:ae:
ed:d2:19:af:0c:0c:5a:cf:e6:8b:60:0e:c9:cb:e4:
0e:51:d8:5d:f1:d9:4a:15:47:78:16:d0:8d:83:54:
05:cb:91:3d:b3:7b:f0:d6:97:b3:ab:59:8e:cb:82:
15:f0:fe:46:ee:f2:3d:c1:cd:87:37:ce:28:93:39:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:58:99:E3:E5:DA:0E:0F:3A:DC:FA:CE:35:3B:EB:B1:C0:27:99
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7c:c5:cb:10:71:ed:d6:a9:2c:78:5c:72:9a:d7:5d:7e:b2:
53:6f:83:2b:44:f2:47:37:5d:9b:27:12:4d:f4:cf:00:60:53:
94:63:1a:2b:45:93:88:c2:85:3a:d9:51:e0:a0:eb:26:75:ef:
a1:a3:2a:70:18:de:2c:a4:33:a4:21:2b:82:49:c9:f2:cc:96:
aa:fd:ba:94:41:0f:e7:fc:06:24:5a:3a:08:55:2f:d0:bc:31:
dc:a8:af:b6:e4:3b:0d:da:80:ab:e1:ed:df:bb:e9:f3:b9:55:
c8:61:e2:01:9f:4f:88:f3:fc:85:d7:2a:0c:e2:4d:97:6f:1a:
34:b0:52:74:e7:2c:4d:26:82:2d:37:62:2b:45:0f:1c:c3:f4:
da:c6:e4:ad:04:02:86:2b:20:20:e3:5c:83:a7:82:27:58:af:
ba:40:4a:a5:d7:fa:35:c4:da:2d:40:17:bb:66:a0:48:69:cf:
18:08:41:22:22:45:6e:81:f6:80:66:97:29:2b:1a:df:22:be:
64:27:cb:36:6c:50:6b:c5:db:c3:96:70:7d:49:7b:d0:f9:6e:
03:b9:28:de:c5:9b:96:94:13:70:c4:4e:d2:9c:59:2e:12:b4:
78:47:3a:f6:b4:b9:68:22:80:a3:8f:ee:7c:99:a3:87:e4:06:
b9:bd:4c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:22:52 2025 by rpki-client