Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: lEZUEKsHJwErM220nzyz24yEJyeRUGkj6B8SKUq37BU=
Subject key identifier: 67:1B:B6:C9:11:13:2F:83:8A:39:21:B6:30:64:C6:5B:BB:C8:42:98
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 0197561158F28E5127F7088C3793760C1351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1515
Signing time: Mon 09 Jun 2025 19:01:06 +0000
Manifest this update: Mon 09 Jun 2025 19:01:06 +0000
Manifest next update: Tue 10 Jun 2025 19:01:06 +0000
Files and hashes: 1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: 8oM3HX8jZbggvbadUpx5Vaaew4q6unTCR0hGj3TrUfU=)
2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:58:f2:8e:51:27:f7:08:8c:37:93:76:0c:13:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Jun 9 19:01:06 2025 GMT
Not After : Jun 10 19:01:06 2025 GMT
Subject: CN=671bb6c911132f838a3921b63064c65bbbc84298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:0a:2f:ad:9a:06:c8:1e:87:a1:d4:bc:1d:
ba:64:d0:bf:3d:a6:c8:d5:dc:7c:3a:23:80:20:53:
70:a0:d5:0d:75:55:21:c1:ba:b0:b9:26:71:96:db:
c0:d2:3d:54:1b:c8:ab:ef:73:62:44:c0:cc:5d:1c:
cc:a2:18:96:e1:8b:28:61:7a:6b:af:34:f6:f2:ce:
9d:59:ad:9e:e6:c4:f1:af:a8:77:9e:fb:95:ba:df:
bf:c7:34:25:a2:02:1f:a5:72:3d:85:2d:1e:7b:1b:
24:f8:a7:92:4b:6c:b0:1d:87:9b:73:72:df:0e:47:
c3:43:12:3f:09:20:a9:63:a1:c4:eb:07:d4:01:24:
60:c3:d8:cd:2e:d3:6c:0d:0d:8c:43:4e:ad:1f:e5:
5d:05:9e:d0:75:12:62:24:61:36:95:15:12:96:fa:
7f:de:d4:1b:ec:72:56:1b:27:73:48:e4:ab:5c:ca:
d7:7e:5c:2a:e9:79:9b:9a:1e:21:21:5b:25:6b:06:
a2:bf:9d:c6:c6:74:4b:b5:3a:7e:09:f8:c1:06:54:
b0:5d:61:ad:7c:fb:a5:97:6c:a5:07:d0:16:7e:ab:
c6:fc:ca:25:ee:03:08:71:f6:f2:99:a9:17:0f:b5:
2b:3f:7a:43:e6:66:73:74:35:6b:02:ce:4b:29:20:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:B6:C9:11:13:2F:83:8A:39:21:B6:30:64:C6:5B:BB:C8:42:98
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fa:65:eb:c5:7d:69:d4:1f:aa:74:5c:59:d6:0f:0b:a5:87:
28:03:79:61:10:b2:46:1b:ca:4f:6d:39:db:f3:f5:f6:1e:ac:
86:14:42:93:db:01:da:fe:15:06:06:b4:69:74:4e:bd:8d:5d:
84:b4:60:7e:e3:b9:ae:8e:bd:7c:54:a5:06:d4:14:2b:5a:c3:
d9:6b:aa:a8:5e:9f:cf:42:66:cf:65:84:08:eb:86:50:b7:15:
8d:55:f3:fe:72:c9:31:f1:c8:87:3f:5f:54:0c:b0:81:38:c9:
e2:f7:c9:67:ac:29:b1:2c:21:6b:f2:10:f7:b8:d6:dd:b1:a0:
29:3e:34:cd:5a:fe:4e:52:9f:8d:35:f6:f0:17:85:a4:e2:26:
c7:41:34:a4:23:8a:f8:a5:a1:bb:fa:0c:47:7e:0a:26:e9:80:
dd:80:df:44:fe:1c:17:e8:05:88:e4:79:eb:f6:76:07:45:9e:
e9:2d:c5:e9:5d:c3:39:b8:3f:e2:4e:92:a0:74:df:70:91:ec:
d1:05:dd:63:d9:a6:bc:1b:5d:bf:e2:2c:d0:ae:e2:cd:f0:bf:
44:9d:07:9d:1a:c9:fe:4c:8e:9c:18:57:15:0b:98:5c:fa:80:
07:a2:22:02:c5:54:47:06:fa:3e:df:44:20:da:62:22:51:d3:
37:22:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:07:41 2025 by rpki-client