Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: 2d59+vFxywxw9CnM994RuGOk3jn28J8ptMG0eoq4gnQ=
Subject key identifier: AE:C8:7B:03:78:E5:0C:7E:65:69:76:F1:AB:12:93:03:BC:E3:9E:63
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 01974A7B23E757AD9D40C4134674F687CB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 12B5
Signing time: Sat 07 Jun 2025 13:01:13 +0000
Manifest this update: Sat 07 Jun 2025 13:01:13 +0000
Manifest next update: Sun 08 Jun 2025 13:01:13 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: GkR6rWSsE2GNAfXFeYNkQcpx2KWqw1Cq7OJk2h5m7qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:23:e7:57:ad:9d:40:c4:13:46:74:f6:87:cb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Jun 7 13:01:13 2025 GMT
Not After : Jun 8 13:01:13 2025 GMT
Subject: CN=aec87b0378e50c7e656976f1ab129303bce39e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:f4:0a:f7:03:15:43:ad:8b:c1:3e:a4:e2:
07:80:79:b4:1b:3a:46:9d:f7:5b:95:af:0c:2d:1c:
93:90:40:6d:06:00:12:6b:67:5d:ac:5d:6b:56:92:
6b:d0:64:62:be:e0:94:0b:62:7a:f1:c8:00:e3:5b:
d7:76:dd:81:c0:43:3f:56:04:72:bf:4d:04:af:20:
36:46:b2:59:83:e6:56:f2:17:53:df:84:be:38:d5:
47:9c:5b:a1:08:3c:71:1e:7b:29:8a:ec:8f:02:d6:
84:ad:87:24:7d:1c:12:1d:a4:63:b8:bf:77:cf:5e:
60:87:61:4d:19:96:38:da:93:32:e8:f2:ea:ea:e2:
59:5e:f7:60:e6:b3:2e:d4:57:b3:64:98:f6:c5:5a:
0b:f6:5f:78:81:41:b6:d7:71:d4:ad:e8:e0:c0:6e:
0f:43:d9:93:45:d2:e7:42:e6:f6:d6:b1:aa:f9:b9:
ad:78:24:1e:b4:1f:fd:f9:2c:4d:e0:d2:ce:72:40:
9c:97:09:54:f8:5d:36:94:d7:4d:5d:a7:54:33:b2:
ef:26:e1:a3:76:20:76:b2:2b:24:ab:d0:4f:54:56:
24:e9:30:b1:d3:e0:ea:a6:14:ad:c5:0b:ed:20:2a:
2f:37:4f:2e:8e:90:ba:af:fa:c1:88:56:06:25:11:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:7B:03:78:E5:0C:7E:65:69:76:F1:AB:12:93:03:BC:E3:9E:63
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fe:04:ba:53:d2:50:3e:2b:7d:36:18:c7:db:80:93:b7:6d:
69:3e:a9:7f:a2:22:7a:68:67:50:66:4e:9d:6d:a7:f3:56:8a:
16:54:6c:64:1c:79:d1:62:db:25:44:67:f7:97:69:e9:13:c9:
ff:dd:07:a4:dd:0c:f8:52:d6:62:e3:32:15:97:d1:93:4d:88:
a0:95:82:91:94:e6:aa:ac:c5:1f:4a:b9:ca:47:a6:a8:89:01:
f3:54:14:57:ab:2a:06:5f:7e:04:ee:89:74:fa:26:52:57:6d:
f6:a1:2f:8d:67:27:3b:30:fe:a5:08:ca:06:ba:37:65:51:99:
fb:02:b6:0f:b4:1d:b9:e0:c1:81:3d:e2:cd:8e:15:a7:73:13:
c1:9b:07:80:65:b9:97:6f:b0:73:30:b8:61:92:ca:0e:23:d5:
ac:54:94:e4:cf:6d:b7:81:63:d6:ec:3e:64:58:fa:6a:4a:7f:
70:7c:ea:a1:0a:95:9c:93:56:fa:05:3a:51:ee:f2:a8:d4:7f:
91:2f:97:8d:7b:35:48:9e:b4:6c:0c:8f:cc:fd:6e:1c:32:7e:
6a:6b:7a:0b:08:66:8f:2b:f8:2f:0e:7c:d3:1e:2b:2f:45:a4:
58:08:20:2c:4c:b9:8b:10:c4:92:72:c4:5c:58:3a:47:f7:9b:
f3:65:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:29 2025 by rpki-client