
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: OTHXB7tyIzCQYZNUoo4/Olq6v9R2v7WclAUENPuRTFw=
Subject key identifier: 00:13:53:88:61:8A:A9:F8:4D:21:58:F9:FF:ED:DB:10:28:01:C6:64
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 019699744285E4EEDAFB68CA947647AB67E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 151D
Signing time: Sun 04 May 2025 04:00:55 +0000
Manifest this update: Sun 04 May 2025 04:00:55 +0000
Manifest next update: Mon 05 May 2025 04:00:55 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: 13XYM7CWl2NY3LIFgtrLTVwvA7PL/NWbVB7SRAyibQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:74:42:85:e4:ee:da:fb:68:ca:94:76:47:ab:67:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: May 4 04:00:55 2025 GMT
Not After : May 5 04:00:55 2025 GMT
Subject: CN=00135388618aa9f84d2158f9ffeddb102801c664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:fd:7e:02:94:ef:97:65:7f:8d:a6:f4:ef:
40:7d:f5:3f:d2:b3:65:4c:fb:f9:82:3f:aa:ed:7a:
95:ae:06:15:1d:d3:ab:5a:ef:35:6b:bc:f2:5c:7e:
70:d7:7e:28:fa:13:b0:fc:23:9c:7c:50:33:42:69:
25:58:fd:bf:20:43:3a:c3:06:00:10:a5:2e:bc:1f:
57:80:e1:62:07:90:2e:a1:96:58:6b:6d:99:b2:be:
06:67:d0:11:f1:c5:fc:0d:7d:37:7e:70:9a:65:91:
01:72:bc:26:31:91:d1:a6:08:8c:41:cf:7b:5e:98:
48:09:d3:d9:8f:7e:f9:a0:6c:0c:80:b1:8c:ef:5e:
de:c1:9e:b3:b3:da:e9:bf:d9:ff:ea:21:dd:20:10:
26:96:da:90:20:27:d4:8a:a6:fe:51:41:44:80:77:
69:b0:a6:d0:da:d5:8f:1e:d4:a9:44:a6:df:47:b9:
6b:0a:9f:72:d0:9c:38:4e:17:e8:1c:fd:5f:de:02:
2e:c9:0d:30:49:35:2a:89:4f:27:3e:45:f3:52:c5:
58:df:a4:ad:1c:db:2f:5e:df:f7:95:b7:f0:f4:59:
6c:06:98:33:ba:6f:84:df:be:8f:0f:96:67:01:2b:
48:9d:52:41:50:e2:ad:25:e2:7d:24:d1:4c:b4:43:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:53:88:61:8A:A9:F8:4D:21:58:F9:FF:ED:DB:10:28:01:C6:64
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9a:24:a7:93:67:35:75:9b:0c:27:2a:ba:f9:8c:61:e4:39:
31:c5:4e:ec:22:4e:b5:f5:1a:75:48:c1:f7:1f:6e:d5:61:3a:
1c:27:18:32:f7:eb:45:c8:f8:dd:2d:49:07:e6:90:15:3b:3c:
0d:d2:16:a9:0a:56:01:cb:ea:a4:34:a1:bd:07:cc:98:10:e0:
52:f8:84:e3:8e:11:18:3c:a6:f7:3c:5b:70:e6:41:d7:fc:e5:
7d:df:ec:b3:01:32:13:f8:e0:7f:a4:90:5d:2e:50:09:66:c2:
0c:8c:d5:be:0a:21:5d:14:7f:05:94:50:34:40:08:ba:77:a3:
3e:c3:04:95:3d:3b:b0:30:f1:26:5c:1d:8f:3d:3f:86:3e:d6:
71:57:d6:d6:06:4a:f0:32:95:b3:4a:e4:fa:f8:12:db:79:c7:
b9:b9:0b:e0:00:30:09:22:1e:2d:2a:9c:cd:8f:c8:71:25:61:
ea:7b:c1:1a:f9:18:cb:d9:9e:e6:4c:14:05:1a:3d:f5:6f:43:
7a:81:8b:e1:29:9d:fc:bb:e9:c9:d4:44:fc:a2:a6:aa:bf:de:
4c:4e:88:0c:2a:29:26:3e:dc:b6:85:ad:e1:f1:6a:c7:0e:c3:
6a:1a:f9:b9:8d:90:67:95:1e:fb:3a:46:5d:a9:42:68:e5:cf:
b3:44:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:53:22 2025 by rpki-client