Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: YY+3QF/6Ub7pZBKurbq6oPmcnj65sdUTeSDlTz2i+GM=
Subject key identifier: 7A:02:81:3C:55:02:8F:6C:4F:5D:84:B5:DE:4F:C9:DC:49:65:0F:F9
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 01975610B489000C2F90DEBA910F8359D396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 19:00:24 +0000
Manifest this update: Mon 09 Jun 2025 19:00:24 +0000
Manifest next update: Tue 10 Jun 2025 19:00:24 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: VPQyGt1sHgIqvZFkqil3gpVYXiW8b4nOSZvpmRgnoSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:10:b4:89:00:0c:2f:90:de:ba:91:0f:83:59:d3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Jun 9 19:00:24 2025 GMT
Not After : Jun 10 19:00:24 2025 GMT
Subject: CN=7a02813c55028f6c4f5d84b5de4fc9dc49650ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:da:62:40:99:98:05:d0:b3:66:14:f2:bb:
a5:1e:ad:08:21:69:84:10:de:65:33:8f:51:ce:2d:
5b:f7:af:01:7d:da:1d:59:ca:5e:6e:44:fe:2b:6c:
10:9e:77:04:93:b2:68:b5:9b:68:6a:99:ec:79:d9:
a6:22:f0:16:e6:ab:99:6f:dd:91:f2:00:91:5b:8c:
57:15:95:63:8b:4a:06:87:39:ef:43:ad:59:6d:94:
d4:03:4f:7a:2f:59:18:ba:7e:f3:c4:0f:1d:8f:1d:
fc:d5:14:dc:3e:88:6d:08:b3:dc:82:e2:1b:7c:0f:
e4:2d:21:3a:a3:80:91:78:47:c3:3a:22:c0:72:c5:
bd:b1:54:92:dd:da:84:6c:2f:7c:d5:83:24:9c:52:
d8:9b:f2:d3:46:a2:61:0e:d9:3f:94:81:06:f9:83:
0a:5b:97:5b:d4:3a:49:75:20:ee:e4:29:76:37:83:
be:54:78:43:36:f1:dc:0c:67:b2:93:9a:6f:07:6b:
6c:e8:a8:f8:d9:e4:91:a8:57:26:c8:2c:13:64:a6:
aa:34:f7:85:07:2f:b9:df:db:74:cf:a8:11:2c:d1:
a6:5a:6c:d6:6a:84:cc:79:52:46:eb:32:40:c0:b7:
21:e8:a5:60:1f:67:cc:2f:0b:c8:79:3b:89:2a:bc:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:81:3C:55:02:8F:6C:4F:5D:84:B5:DE:4F:C9:DC:49:65:0F:F9
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fe:2c:76:01:69:ad:e2:bf:50:00:87:78:b8:4a:58:c3:bd:
bc:dd:69:02:78:f8:ca:21:29:20:29:f4:bd:66:8d:ad:71:b9:
46:4f:8f:6c:83:67:16:a5:30:60:b5:7e:b5:d1:ec:12:54:ba:
65:d2:06:e8:c4:09:12:e2:4e:cc:b2:cb:ae:8b:78:8d:8d:9e:
17:18:e3:17:f5:3c:76:e0:2d:b5:25:58:e1:48:c8:ea:77:55:
3c:42:e4:94:93:dd:e0:98:07:0a:75:f5:52:11:98:c3:6e:8d:
99:32:ee:e9:87:7b:04:10:b0:d6:ed:bc:67:e3:79:92:79:3c:
4e:27:0d:3d:70:fd:78:21:b4:de:59:6c:92:5e:a3:be:cf:28:
36:16:e7:59:a2:f1:e0:81:6b:3f:0c:ac:83:29:60:c7:3e:6c:
8c:e3:ba:05:4f:d9:5b:41:e8:68:f2:fd:8b:98:88:07:81:4e:
fc:c0:4b:18:24:82:c8:68:84:f3:fb:ed:59:9f:20:75:29:55:
f8:bc:e9:dd:dc:61:0e:41:80:8d:24:d0:ac:a3:ab:2a:8a:60:
10:7b:4f:bd:1c:a0:a8:16:2b:9f:b4:b6:03:63:25:b8:a1:c4:
3e:bc:7f:0d:d5:9e:3b:eb:f4:ad:49:bc:7f:d7:b5:d0:d4:8f:
b9:e4:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:17:29 2025 by rpki-client