Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: 5g0joU5ZGjIjpnNmlfNRvMSN4w8HRC+UK53DJlhhXyQ=
Subject key identifier: 87:DE:39:51:FE:95:C6:56:E0:E1:84:60:44:F6:3A:41:0B:78:BF:88
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 01974CD76A20B9E5BE2F48A9C3B2B927E607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 150F
Signing time: Sun 08 Jun 2025 00:01:15 +0000
Manifest this update: Sun 08 Jun 2025 00:01:15 +0000
Manifest next update: Mon 09 Jun 2025 00:01:15 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: xMyJX5PCqZFayUQJbfuauUe65WS0tM0ekpeZlghCrLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:6a:20:b9:e5:be:2f:48:a9:c3:b2:b9:27:e6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Jun 8 00:01:15 2025 GMT
Not After : Jun 9 00:01:15 2025 GMT
Subject: CN=87de3951fe95c656e0e1846044f63a410b78bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:16:d9:3a:99:ae:60:92:7b:eb:6c:fd:da:
67:5d:3e:db:55:e6:79:7e:49:c9:dc:98:78:5e:29:
a1:68:5c:ee:04:f0:20:c9:f1:9e:34:7d:13:ed:cc:
31:9a:dc:e3:18:12:44:42:eb:4b:67:38:ba:ea:3a:
26:d8:98:ad:45:05:b5:ca:6f:51:7e:04:03:84:f1:
84:1c:f1:1f:e6:d3:0b:64:f1:32:18:e8:d8:f7:9e:
46:0f:6d:2d:ba:9a:a9:db:1f:c3:fb:e5:ba:1f:33:
37:0b:73:ba:7d:dd:95:c3:78:d1:81:e9:eb:be:b8:
37:d1:15:09:c1:30:ae:8e:ea:10:1f:87:83:3f:26:
a3:98:01:01:bf:1e:fb:91:2c:b0:16:8f:65:2f:d3:
9c:3b:a6:6e:fb:9a:52:4e:f0:c4:3a:b4:07:aa:2b:
b8:fa:71:14:2a:cc:e0:0a:0d:25:88:3e:65:cc:83:
05:bd:3f:f9:8c:56:f9:06:43:d9:0c:9b:1f:4c:49:
a0:28:f2:02:62:af:62:6d:dc:26:39:f7:b5:00:90:
a7:93:f1:f9:91:68:76:12:ec:56:cf:47:3f:a5:ce:
7e:69:f9:30:f3:70:a6:57:7d:60:3e:38:03:0b:65:
a8:6c:56:fe:b0:dd:a3:2f:09:c2:bc:02:a9:8b:5a:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DE:39:51:FE:95:C6:56:E0:E1:84:60:44:F6:3A:41:0B:78:BF:88
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:53:ca:93:7a:27:b2:99:ee:e1:66:f6:27:3a:b1:82:d7:b1:
70:4a:df:25:c9:32:30:a0:b8:26:9e:38:38:19:d9:3f:29:d5:
67:ff:6f:dc:a0:a2:b5:0b:be:ee:a4:f8:4a:4c:49:4c:af:c4:
1b:d5:d0:29:2b:f5:e0:fd:a8:1f:81:c8:21:59:ad:c9:7e:c8:
01:0e:5a:c1:d7:8f:a6:84:f5:f8:b2:82:a8:d2:ad:ce:cc:d1:
93:9e:a1:cb:31:f3:d6:97:a2:17:5b:e9:9e:0e:07:d5:d3:56:
5f:2b:ba:2e:94:24:30:a9:ee:6d:9a:ba:16:af:b2:06:84:28:
8b:fd:8d:df:06:0a:83:e0:1f:a7:15:bc:35:d6:54:2e:fd:df:
b4:1c:27:1d:02:e5:d7:d0:c3:6e:5e:14:f4:72:10:a2:83:81:
0a:f0:39:d4:0a:17:25:c2:fb:d1:ea:14:34:7b:8d:45:37:9c:
34:16:32:6a:ab:f9:aa:6c:4c:48:17:c8:a5:53:9a:16:e3:11:
eb:ff:f2:ae:46:97:48:3b:65:00:75:f0:d9:7b:4a:52:bd:82:
c9:7d:a0:50:ac:2d:58:c4:9b:06:0d:a0:b3:f1:2f:11:3e:4c:
4a:91:53:19:8a:a9:7d:40:4a:86:cb:58:73:e6:a8:88:f3:f0:
4b:d8:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:01:07 2025 by rpki-client