Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: EqTlHn9pNaVtniS8YOcPtaG391AdEuM4gT9lEmTH5+A=
Subject key identifier: 88:49:A6:E5:63:C6:19:0F:AD:BD:2B:E8:D6:E7:05:20:0C:36:0F:FA
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 019769613A62F45FC4D897A489D52727BD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 1588
Signing time: Fri 13 Jun 2025 13:01:08 +0000
Manifest this update: Fri 13 Jun 2025 13:01:08 +0000
Manifest next update: Sat 14 Jun 2025 13:01:08 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: 4Y0MzWjpfyDw9CWsrf5wtsfm3hHfzxddYijDOBsQlCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:3a:62:f4:5f:c4:d8:97:a4:89:d5:27:27:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Jun 13 13:01:08 2025 GMT
Not After : Jun 14 13:01:08 2025 GMT
Subject: CN=8849a6e563c6190fadbd2be8d6e705200c360ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8a:a5:c2:e8:6f:53:4d:70:75:a4:a3:75:37:
a9:b0:8f:cd:23:1b:4e:61:57:3c:52:dd:5c:ea:75:
c3:6c:a8:47:e8:1b:6c:07:55:c1:b2:f1:36:3a:c4:
52:f0:04:83:d3:90:58:95:73:e7:36:48:98:89:cf:
28:dc:60:77:34:44:57:50:e6:ea:0d:f8:00:06:0d:
72:54:96:9a:30:50:44:48:7e:6f:85:ea:fa:52:e8:
1f:99:b8:41:e7:5a:46:69:73:d8:22:a5:7c:d5:10:
07:a1:f5:93:15:28:15:2e:7a:d8:1e:e5:a5:cd:07:
2c:83:ce:cb:f7:93:f1:b3:6f:2c:9c:5c:28:a1:04:
7c:34:d0:c2:1b:00:d8:52:15:04:cc:b4:49:8a:86:
a9:68:47:10:ac:94:f2:dd:50:11:22:01:30:24:a6:
5f:10:28:18:41:b0:44:2c:b2:2e:01:48:88:7c:62:
d4:e4:05:0a:87:25:4e:0f:33:2b:0c:d6:d0:b1:fd:
7b:a8:57:51:32:96:da:d6:7c:c5:27:30:d1:c7:13:
b3:b5:10:8b:6d:5b:2c:31:4d:e3:b9:d5:20:64:1a:
8e:60:20:35:1b:f5:e8:76:78:77:47:a7:93:a5:d6:
47:f7:d1:81:a6:3b:12:5d:90:9a:88:90:36:19:6d:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:A6:E5:63:C6:19:0F:AD:BD:2B:E8:D6:E7:05:20:0C:36:0F:FA
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:08:14:f6:a9:6f:45:35:e2:c3:1c:72:1c:76:bf:1b:97:fa:
b4:4a:66:6f:8f:bc:29:a1:c8:50:cd:8c:80:4a:60:8c:bd:a0:
ee:97:ee:5f:e9:cb:13:11:63:72:11:57:3e:cb:88:50:65:33:
c7:ea:c0:be:e8:9a:65:33:4b:00:12:19:3b:67:2b:a8:ff:74:
23:74:b4:d4:6c:c6:49:10:37:4e:a5:21:00:e8:3d:db:39:18:
6a:12:8c:88:05:ab:8b:a7:a5:55:e1:c7:a0:0d:99:24:70:90:
d9:7d:5a:db:b0:01:60:5d:fc:be:7c:b6:22:2a:b3:cf:2c:3b:
fd:e3:0b:b2:d3:8a:13:e8:92:41:51:21:81:ff:5e:82:59:49:
90:ca:ea:f7:44:42:a7:69:05:b0:53:58:5d:c9:66:b0:af:e6:
4d:9e:87:50:23:60:0f:f4:93:d9:15:2a:ea:bf:76:c5:21:1e:
96:bf:53:c9:5b:cb:d4:22:68:33:71:3b:08:1b:4b:f0:77:26:
fa:3d:99:68:1d:e2:87:1a:7b:fc:e7:c4:43:f3:bf:33:42:b3:
bb:cf:6f:d6:29:ed:c7:87:38:67:4f:f9:16:63:d3:a9:67:e3:
a1:8e:88:9c:f1:54:8a:10:cc:c3:fc:18:d0:03:35:b7:ab:91:
43:8e:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:19:02 2025 by rpki-client