Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File: gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier: AB5vqtXu9Zrp6aqIn7BemH/fOA3g03sRhenFHVT5s6g=
Subject key identifier: EB:C5:2A:48:27:C4:52:B5:2F:88:15:60:C1:0E:13:B8:01:C6:16:AB
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer: /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial: 019747E74EB9D88BC49BBBA8C7ADFD1FB9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number: 05C5
Signing time: Sat 07 Jun 2025 01:00:30 +0000
Manifest this update: Sat 07 Jun 2025 01:00:30 +0000
Manifest next update: Sun 08 Jun 2025 01:00:30 +0000
Files and hashes: 1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: T2FyjLXO1pjm9FigHdQgr2V/Nfw47rRWGfgshDgL2H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:4e:b9:d8:8b:c4:9b:bb:a8:c7:ad:fd:1f:b9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Validity
Not Before: Jun 7 01:00:30 2025 GMT
Not After : Jun 8 01:00:30 2025 GMT
Subject: CN=ebc52a4827c452b52f881560c10e13b801c616ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:36:cd:bd:51:ed:cc:1b:10:a7:2f:55:4d:
e3:a2:69:cf:0c:d4:84:74:c2:95:04:e9:1c:81:5c:
3d:83:95:4d:f7:ed:6d:5b:86:6b:ef:9b:ed:eb:19:
41:17:77:8c:73:8e:af:89:cb:bd:47:ca:2f:59:43:
6e:b1:99:dc:22:1c:dd:4f:f3:92:9c:7a:f7:3d:78:
4e:74:86:a8:57:06:4e:16:78:38:cd:e2:38:30:9d:
84:11:19:35:82:4b:78:84:c1:ca:bb:fb:94:a7:92:
82:98:4c:33:1a:87:e8:9d:3b:23:8c:84:63:19:2e:
ff:04:e7:a9:4a:a4:01:96:66:20:6a:c3:49:58:95:
79:44:a8:93:df:d5:68:c3:10:e1:4a:7e:03:89:2a:
ca:5b:35:52:2b:b3:cf:2f:1b:52:7e:d9:aa:f8:57:
6c:10:2e:96:d7:eb:15:30:af:a4:1c:1f:b3:6e:42:
bf:cc:57:84:b7:90:7f:d2:2a:8f:c7:30:c6:5f:e6:
e8:80:02:87:a3:b0:db:9c:28:63:89:98:07:e6:f1:
68:5a:5f:22:3b:cf:c8:fe:b8:1c:be:41:47:cf:e0:
99:18:9c:21:97:d5:34:d4:d3:9c:73:05:41:85:20:
ef:31:1c:20:74:93:57:5c:06:46:f0:0a:c5:04:6f:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:2A:48:27:C4:52:B5:2F:88:15:60:C1:0E:13:B8:01:C6:16:AB
X509v3 Authority Key Identifier:
keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:d5:02:ea:5d:f4:86:0a:3f:2c:3d:90:bf:fd:d0:16:37:
2c:b2:ac:af:9f:04:e4:94:41:3f:a5:4d:cc:3b:82:2f:64:d6:
18:32:42:e3:c5:d7:01:d8:34:33:67:e0:84:ee:17:4b:94:64:
b5:93:cf:05:98:bb:cd:70:4e:73:5e:b4:aa:4b:bf:d8:a8:ef:
7c:3b:36:a5:1e:61:07:5a:b7:ce:77:c6:2e:db:85:d1:5a:01:
cc:04:3b:4c:0c:43:ec:88:fc:e2:c7:64:3e:86:0d:35:cb:98:
cb:fc:0b:1c:6c:5d:29:91:13:3a:50:d3:8e:ed:f6:f2:3f:25:
ce:7a:fe:11:be:6d:9c:03:8c:cb:37:4b:aa:2e:dd:03:8a:b0:
10:ac:6c:c6:44:22:48:db:79:b6:f8:6c:b8:2a:51:55:7c:95:
e9:f3:11:5b:d6:06:b6:fb:6d:49:3f:07:f7:de:1c:61:98:52:
20:ce:37:d5:01:e8:fd:ae:0a:13:72:86:6e:14:dd:72:2b:19:
29:3a:66:45:30:47:d8:93:07:99:e9:7c:56:55:1e:13:65:bf:
b4:1c:b4:3c:9e:62:67:8c:b1:61:c9:88:64:9b:21:ac:ed:f5:
ee:55:af:48:3f:55:44:24:22:97:ac:27:67:02:9f:e8:19:9d:
4a:b1:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:12:08 2025 by rpki-client