Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: DHPR5fM0cWhVurq6cq02HYtVKPPV/1EcbhUAT+YKqxE=
Subject key identifier: 67:C1:05:1F:D5:7F:4D:25:58:73:5F:D3:6F:0C:03:1B:39:C8:35:F2
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 01974779ECC0FB15C60943EA48B28495BC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 02AB
Signing time: Fri 06 Jun 2025 23:01:02 +0000
Manifest this update: Fri 06 Jun 2025 23:01:02 +0000
Manifest next update: Sat 07 Jun 2025 23:01:02 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: XrvKExtyDGui+kKu9Q/vdroMI1T0nFMq+FvIsFAhvbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:ec:c0:fb:15:c6:09:43:ea:48:b2:84:95:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Jun 6 23:01:02 2025 GMT
Not After : Jun 7 23:01:02 2025 GMT
Subject: CN=67c1051fd57f4d2558735fd36f0c031b39c835f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:68:ba:cb:bc:3e:0b:da:ef:ac:59:2e:3b:
86:d5:e4:c2:b2:38:cc:01:c5:68:3e:54:45:1b:fa:
5f:6b:86:8e:cb:21:95:c3:6c:39:f0:38:a2:68:99:
34:39:b4:ee:5d:69:29:1e:99:0f:68:9e:77:12:19:
20:a4:d6:1a:32:4d:ed:b5:cd:47:f8:45:0e:c9:5d:
60:33:74:e4:e8:89:ef:79:99:2a:17:8a:76:07:ce:
e3:0b:7e:1f:da:1f:d8:11:b8:c8:3a:77:d3:96:f2:
da:1d:38:64:48:a7:1f:e6:2d:c9:be:87:ca:20:18:
3f:fb:35:53:e2:78:48:ed:f5:6d:dd:62:a3:bd:45:
d3:8e:52:9e:00:70:5a:cb:ee:ac:96:cc:be:ba:e7:
5b:91:10:8d:2d:15:b5:38:c0:3d:58:0f:71:11:45:
8b:bc:61:2f:72:f9:82:74:f0:b8:fb:36:7d:af:03:
59:83:da:b7:f2:11:b0:4d:60:e1:23:3d:22:6c:fe:
4c:18:2e:04:60:a6:e9:51:6e:7b:cf:b7:06:44:66:
01:60:74:02:9c:0a:11:b4:9b:68:a5:f5:7a:a9:f0:
78:7d:8b:92:f4:d4:7f:66:1e:27:ab:73:13:be:02:
62:41:7c:c6:c2:5a:d2:ac:06:ee:d3:04:fd:dc:cd:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C1:05:1F:D5:7F:4D:25:58:73:5F:D3:6F:0C:03:1B:39:C8:35:F2
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:75:66:30:0e:ee:81:a4:91:05:a4:69:b2:1c:42:fc:5f:
ae:29:2e:09:85:2e:dd:d5:30:c1:17:52:39:92:98:36:7d:eb:
65:97:9d:91:71:48:e4:aa:33:d1:4a:6f:a1:89:24:ea:fe:7b:
be:8f:55:ea:8a:39:c2:6a:85:1d:d0:d5:b4:4e:15:0c:38:82:
20:d2:c2:cb:ed:64:5c:64:d5:8b:fb:cb:f0:43:67:33:4c:fd:
9f:e4:46:f6:69:3e:01:eb:bc:25:ed:30:82:e9:7f:e5:e5:f3:
36:23:89:23:92:d0:ae:74:f8:5f:23:a0:4e:49:dd:b8:90:ed:
71:11:d7:3b:82:65:23:98:b0:81:17:4b:bc:dc:cd:a5:4d:c6:
f0:ee:24:ae:e0:1d:ca:72:62:f3:4a:b0:2e:16:2a:4d:4f:6b:
31:02:49:94:50:c4:4c:17:57:65:bb:c8:83:ba:cd:a6:51:99:
48:68:d3:cb:fb:a2:99:ae:fd:a4:82:36:71:34:e8:15:ca:4c:
5c:c6:93:08:68:2e:c1:de:c5:f9:5b:f6:68:f0:93:f9:6a:19:
36:d9:bc:bf:c3:35:15:f7:53:ab:50:33:fb:15:ee:8e:ef:37:
ce:e2:cb:ca:30:3d:60:79:88:22:3d:8b:69:fa:68:75:5e:0a:
ff:84:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:49 2025 by rpki-client