Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: Y9zpwriDAAwdbfgMa5TtkEHA11TpBppOtRsPogYHt2A=
Subject key identifier: 58:8E:01:08:F5:BA:8F:1A:49:75:42:F4:C7:90:0F:88:A0:64:67:D1
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 0197537DC2C64EF9FFC0D0C4C145EDECD071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 0EB8
Signing time: Mon 09 Jun 2025 07:00:40 +0000
Manifest this update: Mon 09 Jun 2025 07:00:40 +0000
Manifest next update: Tue 10 Jun 2025 07:00:40 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: a3D6UZaJMClXxVMr2cjJGdYy5GZoga/zunv6gU0MOUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:c2:c6:4e:f9:ff:c0:d0:c4:c1:45:ed:ec:d0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Jun 9 07:00:40 2025 GMT
Not After : Jun 10 07:00:40 2025 GMT
Subject: CN=588e0108f5ba8f1a497542f4c7900f88a06467d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:a8:41:47:a0:4b:ab:34:94:1d:26:f9:9c:
66:5b:c3:6f:27:85:aa:c3:e2:b8:04:81:bd:5b:5f:
ff:17:66:41:37:a9:99:47:ca:ce:a2:c8:07:f1:13:
4b:7f:18:15:b6:8a:66:47:1c:77:fc:f1:0a:8b:dc:
86:21:40:2c:56:32:4c:74:4c:00:55:9d:f0:da:f2:
7b:f6:22:4f:9a:f6:90:c0:55:4c:3f:b9:0f:58:c1:
70:e8:18:a7:b9:45:89:ad:bc:af:e3:fb:39:ce:a0:
e9:c6:c6:bb:a6:69:e8:c9:0c:d7:34:a4:48:98:7f:
3b:ec:a2:73:a0:0c:52:05:cc:d8:e8:9f:69:41:0b:
6b:2b:6e:26:b6:fb:24:42:6b:00:ce:53:fe:d3:fa:
b8:4d:5a:76:0e:cf:eb:c6:26:1b:6e:d5:cd:64:02:
cf:fa:52:a9:07:25:5d:69:5e:6c:3d:38:23:72:a3:
97:15:d0:96:a2:6a:2a:d9:67:c2:0f:7d:6c:2d:6c:
88:b2:be:4c:ac:87:c6:67:e2:ce:fb:18:da:47:29:
4c:aa:59:24:44:b3:b3:46:4d:18:ea:32:dc:80:34:
fc:74:2b:1f:17:9e:e9:3b:95:dc:93:5d:17:d5:27:
bb:0e:09:34:bb:d1:3b:8a:ac:af:e8:74:bd:14:a8:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8E:01:08:F5:BA:8F:1A:49:75:42:F4:C7:90:0F:88:A0:64:67:D1
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4f:26:03:82:5e:60:bc:78:26:d4:30:9e:48:ed:9a:ed:b7:
82:a4:1c:c5:5f:cd:ba:03:b4:b1:5c:85:f9:a4:8a:4b:e8:46:
db:6b:7b:65:d1:37:ac:46:58:e6:18:54:61:89:a6:d1:e3:08:
27:c2:d3:ea:60:40:ae:4e:56:38:29:08:ca:9a:1d:82:ff:41:
a1:32:c1:41:f3:af:1e:2b:8b:bc:8a:57:ab:e3:cf:47:98:f6:
fe:44:68:d6:70:f5:a4:01:9e:44:95:95:75:02:18:04:2a:db:
3a:cb:d1:30:01:a4:83:37:f9:e2:28:64:d5:60:3b:96:a8:8c:
11:d0:ea:5a:29:20:5c:6f:74:81:63:e8:68:22:15:08:2b:86:
14:a9:27:05:b7:73:54:6e:6f:09:4e:2a:47:ad:24:c0:21:fb:
63:57:30:bf:c6:97:e1:bd:d0:35:79:c6:0a:07:8e:eb:a0:fe:
a4:9e:2e:a9:dd:2c:12:aa:ad:7b:55:fa:cb:c7:11:f1:25:49:
50:e9:a1:db:e9:4f:13:c8:1c:2b:07:31:ec:10:e3:ed:54:a0:
ef:3d:a6:df:1d:a5:75:f6:8d:1e:7c:35:db:7e:b3:11:15:b2:
30:b5:33:2a:da:94:f1:b7:c7:2d:4c:1b:24:c6:b6:34:ca:7b:
8d:af:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:05:50 2025 by rpki-client