Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: TsQPIImu+72r6KvvQcmxiZYGO+K0RtXsSVTzcfFalKs=
Subject key identifier: 1E:91:3D:85:DD:06:30:5F:45:62:2D:BA:15:A8:9E:FF:02:5E:FE:EB
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 01975D25E9585DEC34919DD0F322BD91BA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 04:00:55 +0000
Manifest this update: Wed 11 Jun 2025 04:00:55 +0000
Manifest next update: Thu 12 Jun 2025 04:00:55 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: xUTCQEHX6N0YuHK71C12T/6pHEugtm5Oy13byZorfyk=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:e9:58:5d:ec:34:91:9d:d0:f3:22:bd:91:ba:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jun 11 04:00:55 2025 GMT
Not After : Jun 12 04:00:55 2025 GMT
Subject: CN=1e913d85dd06305f45622dba15a89eff025efeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:32:a1:01:c5:9d:71:23:46:d2:92:8a:53:
fd:00:43:c3:97:09:89:2a:db:18:bc:19:23:5d:62:
42:69:08:b9:b6:8d:ef:01:11:7e:81:bf:66:2d:39:
72:10:67:d0:5c:16:5b:cb:c5:e3:96:e5:8c:16:e6:
fa:78:33:07:67:90:7b:a7:a4:ae:6e:4a:8e:40:d3:
66:c0:9c:d7:1c:94:c5:90:33:8b:fd:ab:7b:5e:6e:
54:9b:8d:58:9d:99:33:7e:16:0e:8c:f5:f3:96:b1:
1d:f7:c2:2f:68:ac:41:07:60:e8:82:be:89:02:50:
8d:08:67:ee:6f:ed:c2:ce:79:35:11:e6:78:b1:65:
ad:a6:70:f0:05:bb:eb:5a:6e:cd:3a:20:e7:dc:54:
8e:77:99:61:d3:8b:fb:de:48:57:ac:1f:71:ee:dd:
d7:c2:ad:ca:19:fa:f4:19:f1:65:8a:5a:93:ca:3b:
de:da:95:96:41:71:5b:bd:e0:1b:63:ea:f9:8d:ba:
e5:cd:25:8a:84:2b:3b:73:06:43:5d:e0:6a:05:2d:
b1:c6:99:c6:bb:a6:77:45:5e:bb:d6:d2:a6:55:f0:
00:e8:32:90:6c:e4:b6:98:55:21:51:27:15:4a:7a:
9a:26:b7:15:7a:d5:c5:66:7a:a0:0c:12:3d:1c:2d:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:91:3D:85:DD:06:30:5F:45:62:2D:BA:15:A8:9E:FF:02:5E:FE:EB
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d0:73:34:a1:96:69:87:16:af:b2:eb:ce:36:89:aa:2b:6c:
13:87:1a:fb:4e:dc:c7:62:5d:e5:38:b4:7e:a9:c3:41:b9:1b:
35:71:b4:16:45:86:0d:c2:0e:9f:b3:55:9c:ed:c2:aa:40:b5:
df:6f:07:94:d4:db:f3:45:ef:48:0b:14:1f:24:ba:15:b1:2c:
4c:56:e4:51:3a:04:c6:d2:90:b4:ee:d2:f8:47:7a:e6:12:f2:
49:f5:be:7f:f6:7d:bf:46:98:e4:a2:e9:9e:9a:36:e2:f2:58:
af:11:9e:88:77:49:0f:c8:17:b3:ca:0e:e4:fb:0e:ae:d5:69:
b8:41:cb:47:1e:7e:bb:4c:e1:2d:d4:2a:ba:09:ca:53:c0:0f:
d6:cf:5e:63:b1:92:44:d0:ab:72:08:77:0c:67:c8:5b:fa:76:
ab:72:92:42:e1:ce:76:db:db:bb:0f:92:4b:02:d6:26:6c:63:
72:fc:8a:63:c2:0d:75:49:41:7d:a0:9f:5d:64:9f:b8:94:d1:
30:13:69:1e:2b:f5:bc:9d:d2:8f:9b:10:4c:7c:d4:a8:75:d1:
a9:40:28:b4:f1:a0:5b:a7:1a:c7:8a:8f:da:cd:94:bd:2c:06:
e9:29:2f:89:40:f8:14:80:f0:58:f2:c5:90:d3:ad:d8:13:22:
1f:27:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:34:34 2025 by rpki-client