Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: bcZ5H7PuF0DP8JdGJhrQObuALp9akqozeBKFk/uLnyA=
Subject key identifier: 6A:AA:B9:91:DA:9E:02:A5:82:A3:3F:97:CE:EC:15:04:6A:43:5D:9F
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 01974C68B01C0F9E44D4D13CCC3BF2C59A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 0DA5
Signing time: Sat 07 Jun 2025 22:00:18 +0000
Manifest this update: Sat 07 Jun 2025 22:00:18 +0000
Manifest next update: Sun 08 Jun 2025 22:00:18 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: 5PGzKIwY2xDBIBhzgx/6Os5Gm45ZV7tgfSEZibGHL44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:b0:1c:0f:9e:44:d4:d1:3c:cc:3b:f2:c5:9a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: Jun 7 22:00:18 2025 GMT
Not After : Jun 8 22:00:18 2025 GMT
Subject: CN=6aaab991da9e02a582a33f97ceec15046a435d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4c:2d:bc:cd:69:e5:c1:af:7f:70:28:0e:e0:
f1:99:99:e6:31:a6:a8:c3:6e:3f:e0:40:e5:12:30:
9a:a3:b2:83:83:78:65:34:e4:61:47:01:bc:1b:af:
77:50:2a:ef:8c:f2:b5:da:ca:3d:3b:9b:29:98:d5:
5a:d2:d7:fa:a6:c9:1f:97:3a:73:7f:26:32:f0:44:
3e:af:85:cc:49:5a:d6:36:78:67:47:43:37:f9:2a:
2e:06:21:40:52:71:11:86:b3:02:e0:cd:38:c1:eb:
97:04:a9:2b:df:3b:2b:95:f8:98:63:f9:10:1b:07:
d6:2a:70:80:0f:74:07:e8:4d:f2:69:a3:c6:7a:0d:
b7:27:61:75:df:d1:55:8b:db:15:a9:45:a1:25:f6:
02:3c:61:82:29:65:b5:11:0e:a6:3f:2d:af:e3:29:
67:28:24:41:90:da:36:d8:52:64:59:ae:90:ef:77:
a4:27:a3:8a:9b:31:be:bc:32:e7:17:4a:76:ac:00:
5a:bd:21:89:82:a0:8f:d9:a4:60:39:13:5b:05:50:
cc:8b:0a:65:01:38:a5:d3:01:e3:af:56:70:55:25:
15:69:a2:a6:97:a8:53:65:de:89:ca:16:2f:6e:a9:
5e:14:f1:3f:31:01:ef:8c:2c:ce:bd:b9:7d:df:da:
cb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:B9:91:DA:9E:02:A5:82:A3:3F:97:CE:EC:15:04:6A:43:5D:9F
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:22:6b:f1:c3:1b:71:ed:a0:83:a3:b7:0a:e1:8c:ec:72:b2:
a4:e4:8d:49:3e:0f:7b:55:04:c4:ca:55:d2:62:b5:60:45:04:
8a:b0:7e:4c:56:a1:56:56:3a:7a:c2:a4:b1:71:df:0b:5a:f1:
e9:f8:9a:81:ef:66:28:94:7a:27:33:7e:c9:09:bc:81:a5:1a:
7b:47:dd:60:c8:7a:1f:9b:1d:23:6a:86:91:9d:0c:22:c3:e1:
71:8c:4c:35:57:98:c8:78:30:54:e6:60:aa:ca:f0:c1:72:8a:
fe:08:a0:88:72:fc:e7:62:a2:1b:ac:c2:57:46:a6:89:b6:11:
42:c9:63:d3:83:97:fd:43:fc:13:7b:b2:5a:b5:58:e5:be:7c:
bc:89:be:c5:20:db:7e:30:4d:bb:e1:93:00:b1:f1:09:24:65:
5e:2f:4b:51:ce:9a:de:4b:40:2b:23:72:c7:59:93:5a:bb:23:
7e:4d:6d:71:00:7c:1b:ad:75:ec:c5:01:19:46:e7:13:8d:f2:
0b:c7:a3:57:d2:7e:eb:c3:01:aa:1c:de:02:3c:a4:43:fa:00:
9e:2a:b1:9f:fe:41:11:c1:82:3e:5d:b5:3b:13:b6:e7:82:16:
86:e0:1c:e2:f1:9f:90:55:40:ec:a6:af:11:1f:fd:38:92:eb:
20:9f:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:48 2025 by rpki-client