Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: 9Z8Ze4Z3ZLGLT14vGZzrpxTbGcHoXFVx3ozc71SAztg=
Subject key identifier: B9:D3:20:3F:DA:4B:6C:23:83:D6:BB:84:6C:50:6B:60:5A:41:75:0C
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 01975F1443D78E9375EFF2EFBB9617FCF54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 13:00:52 +0000
Manifest this update: Wed 11 Jun 2025 13:00:52 +0000
Manifest next update: Thu 12 Jun 2025 13:00:52 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: Qz0Lv88a/mkDN0/TNMfEx6a2e5cVffosHL3vtjoWuYQ=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:43:d7:8e:93:75:ef:f2:ef:bb:96:17:fc:f5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jun 11 13:00:52 2025 GMT
Not After : Jun 12 13:00:52 2025 GMT
Subject: CN=b9d3203fda4b6c2383d6bb846c506b605a41750c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:af:a3:c1:1f:d8:50:b5:e3:16:70:e6:98:
7a:d9:5f:00:d2:a3:ae:1a:06:2a:f2:0d:53:07:5d:
81:bb:87:ea:97:bf:9f:9f:5b:ea:0d:74:0f:4f:bf:
b6:74:22:a1:5a:a6:e6:61:12:7d:5d:e3:50:a1:09:
30:96:bc:db:b9:cb:3e:1c:06:d2:ba:ed:10:c2:84:
69:69:6b:ea:c1:bc:5d:4c:cf:dd:fe:8b:b0:3d:f8:
ce:b5:98:c3:72:24:91:78:44:c0:f2:26:0a:9a:41:
a9:c2:5b:1f:2e:03:52:65:7f:18:61:cf:40:d7:63:
bf:d5:07:d6:a7:2e:39:53:d2:b2:67:35:78:6f:fa:
ac:52:c0:6c:31:9e:7f:9b:36:4d:6b:36:fb:7d:a5:
92:dd:17:e8:7f:51:52:96:b2:30:ff:5c:3d:86:36:
da:16:13:be:03:a5:f9:6c:f7:87:fa:d7:1b:d4:ab:
dc:ce:d8:28:32:5a:90:07:8d:70:c1:ef:cc:69:0c:
3a:d4:9c:44:9d:f1:98:65:67:9a:fe:5c:4c:55:78:
d9:75:1b:16:2b:10:7f:9e:fb:77:e6:33:6b:f6:69:
fd:a2:9d:84:60:4c:f5:dc:08:b5:5e:fa:0b:42:47:
24:2e:9c:5a:de:2b:3a:71:9f:ba:63:6d:b2:42:78:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:20:3F:DA:4B:6C:23:83:D6:BB:84:6C:50:6B:60:5A:41:75:0C
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:45:04:3c:91:5f:2f:18:64:af:0a:0e:09:2d:ac:96:38:67:
28:63:2f:1d:73:d6:1a:6e:11:e1:86:a4:0a:d8:03:6b:5d:98:
08:33:4b:9b:b4:d3:41:7e:f9:58:5a:b3:36:a2:84:54:bf:67:
5f:91:47:ce:b3:7d:23:08:5b:fc:de:97:ff:17:e9:0f:49:0d:
92:ba:4a:9d:8d:22:52:fe:b1:38:64:2d:4b:50:00:1e:e3:d3:
c0:8d:82:c3:4f:7e:11:0b:2b:b6:08:de:14:06:eb:29:42:15:
3b:1f:d1:c7:d9:56:5a:de:36:69:5e:d1:48:ff:0a:c3:ce:a5:
17:f0:d9:2c:fe:7b:2f:fd:f7:1c:95:86:86:7e:cd:39:6a:b6:
11:e7:98:e6:b0:1c:bc:57:d4:7a:fa:0c:de:99:71:a5:62:38:
f3:61:c0:88:46:d4:89:f7:82:66:9a:07:ca:de:84:ca:7d:bb:
93:79:6e:88:96:c6:b2:0e:b9:7e:69:4c:15:37:f8:39:05:20:
7c:95:95:ed:5b:45:de:89:90:50:ed:8f:b5:93:50:80:50:0e:
be:a4:28:8d:9d:f1:37:9e:a5:76:9c:a3:83:25:2f:80:23:32:
0a:e5:38:6d:61:d1:3c:0e:8c:7c:af:be:43:e1:6f:fe:fe:a6:
f1:56:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:43:59 2025 by rpki-client