
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File: GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier: l/kAetnZ71sMU5Hv+aTkuuVDAFWHhz0ZPIl9qa77cEg=
Subject key identifier: 9D:69:4E:FB:EC:B8:7F:DB:FE:DA:97:15:1F:74:C0:13:92:00:EF:EC
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial: 01974A7A794C0E2236E84FD4B1656A887C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number: 0DE5
Signing time: Sat 07 Jun 2025 13:00:29 +0000
Manifest this update: Sat 07 Jun 2025 13:00:29 +0000
Manifest next update: Sun 08 Jun 2025 13:00:29 +0000
Files and hashes: 1: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: COJQFXzNfylV2V+7Qql8oISlZFKp7mpnYGk4d7VV16U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:79:4c:0e:22:36:e8:4f:d4:b1:65:6a:88:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Validity
Not Before: Jun 7 13:00:29 2025 GMT
Not After : Jun 8 13:00:29 2025 GMT
Subject: CN=9d694efbecb87fdbfeda97151f74c0139200efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:52:07:d2:e5:b6:a7:6c:56:37:bb:4d:3e:
da:ac:aa:cf:83:65:d2:69:cb:a9:a2:ca:f3:d7:ed:
56:0d:e7:78:91:eb:1d:c6:70:5e:40:e6:c1:c5:f6:
1c:c8:5c:e1:e7:12:ad:eb:a1:3c:d7:99:44:64:0c:
9c:54:ef:ac:08:30:c3:70:ee:38:34:ea:68:94:39:
8b:7f:48:8f:03:7c:26:4c:92:85:6e:a1:7c:f9:1b:
9c:0f:fc:59:5c:b0:f3:04:fd:25:2f:7f:29:c4:80:
b4:f8:1d:7d:00:6d:ea:34:bf:2c:46:bd:56:e0:d6:
a0:30:ca:d6:f1:d7:e0:e4:4a:9c:b1:dc:30:fe:71:
6f:54:fe:ee:51:cf:01:67:c0:aa:d0:60:a3:04:c2:
b5:1b:25:f7:c0:13:a7:6d:06:fa:1d:e5:3d:f4:66:
7a:90:70:d0:e6:53:26:55:f2:9d:cd:e7:6c:a5:8b:
13:5c:a6:46:3d:02:03:13:c8:0f:5e:1c:3a:39:a6:
6b:71:11:5b:76:5f:a0:bb:a0:20:39:e4:ab:a5:e9:
bd:ee:4f:14:e1:ff:af:d6:b6:c3:1b:38:1c:c1:88:
c2:ce:fc:0a:21:a3:1e:fa:46:9a:54:30:d7:a0:2c:
66:d3:ca:2f:58:0b:7a:9e:de:25:03:0d:cf:dc:b2:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:4E:FB:EC:B8:7F:DB:FE:DA:97:15:1F:74:C0:13:92:00:EF:EC
X509v3 Authority Key Identifier:
keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4c:e0:49:34:c4:93:0e:7c:4b:22:dc:ca:cd:88:ea:eb:74:
32:29:cb:7f:40:3b:11:a8:e6:16:83:4c:79:f1:bf:7c:88:f0:
75:a0:e6:c9:81:dd:e4:59:93:e8:94:5f:1d:0a:03:f6:45:81:
bf:ef:84:f8:8b:b7:16:4c:34:b5:1f:3e:11:7e:fb:0b:07:0c:
d0:e1:92:35:24:97:e4:72:60:a6:d9:fa:2e:30:da:d9:82:f7:
a8:8d:7c:3a:00:62:cc:e5:cc:61:67:11:f9:b1:1d:72:90:87:
e1:d8:32:73:ec:94:e0:f2:6d:1b:ac:6c:f8:b6:a7:4f:d1:91:
47:db:cc:12:0d:ba:fe:5e:d8:45:72:da:56:d6:1d:3d:2d:53:
68:f6:70:8e:33:f5:43:02:01:12:3d:9c:e7:34:99:95:e0:c9:
93:96:c2:1d:34:c6:3a:a2:e2:19:e2:b1:0b:b3:6c:be:66:78:
09:eb:b4:a3:8c:9a:35:e9:f8:35:b3:f5:a8:e3:98:57:00:39:
66:51:d1:18:cd:4d:e7:f4:29:b1:45:a8:21:72:94:f7:ce:15:
90:e8:d6:5d:74:58:5a:5f:d4:12:aa:58:a9:aa:09:40:ab:c7:
9b:f4:ba:67:bb:be:43:0b:1e:30:45:27:bc:bd:08:ff:ca:b2:
70:77:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:08 2025 by rpki-client