Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: b/enHPgEyYcm1NQu7vy6dGkueEAZOtnN5EVO+/qiIgM=
Subject key identifier: C4:E7:4C:75:C5:3C:45:D8:34:2D:50:F4:D0:43:80:FD:F4:B7:51:F6
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 01976CCF95D41033A72CE1310DF6485588CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 0166
Signing time: Sat 14 Jun 2025 05:00:32 +0000
Manifest this update: Sat 14 Jun 2025 05:00:32 +0000
Manifest next update: Sun 15 Jun 2025 05:00:32 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 8GhMe+dj7Lx+7o2bCBDOkHYFwPGZ0l4VJTfKdC6TtXQ=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:95:d4:10:33:a7:2c:e1:31:0d:f6:48:55:88:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Jun 14 05:00:32 2025 GMT
Not After : Jun 15 05:00:32 2025 GMT
Subject: CN=c4e74c75c53c45d8342d50f4d04380fdf4b751f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:ef:d5:fc:44:eb:91:cc:ce:f3:c6:e1:bc:
27:92:8f:25:ac:b1:82:48:21:3b:63:52:4d:2a:31:
da:59:2b:b6:30:59:1d:2c:22:47:cc:71:34:c1:ed:
84:88:18:89:86:b5:f8:12:e1:24:7b:3d:ca:2d:88:
e2:40:d6:25:24:87:f5:05:45:0e:4e:87:60:74:75:
86:02:b4:cd:7a:85:de:be:95:ee:af:73:a5:1a:e3:
d4:9b:db:19:da:26:a4:de:0a:c4:15:36:7d:67:f0:
41:73:ac:6a:f7:ee:9f:ca:51:69:38:3d:89:1f:f7:
a8:98:77:9f:51:49:bf:80:c0:7f:17:aa:fc:f9:31:
2d:a7:77:13:5f:bb:35:e4:26:f1:ca:33:d9:fc:70:
b4:9d:26:53:80:70:e9:4c:76:1b:05:eb:3f:18:d1:
e4:49:94:4d:63:b5:dd:65:76:6b:91:83:9d:74:ae:
ef:02:0d:3c:14:d5:de:e3:a6:c8:56:7b:37:fa:cc:
d9:37:21:cd:9d:bd:a5:c6:8d:db:f9:5d:42:72:f0:
a0:92:13:d6:03:d0:af:af:c8:af:78:28:1d:ac:f7:
6e:2d:53:77:ff:1c:a1:0c:68:93:e6:f5:44:6b:e3:
3a:c5:68:4e:be:64:bb:ae:30:30:ed:8a:91:d5:15:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E7:4C:75:C5:3C:45:D8:34:2D:50:F4:D0:43:80:FD:F4:B7:51:F6
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cc:d3:13:69:d9:34:6d:60:ba:55:db:6f:1c:04:3d:6d:68:
09:e6:93:dc:69:89:08:81:c6:6e:e0:87:c2:a6:70:18:41:9b:
72:50:99:c1:6b:b6:f4:a4:9d:93:53:5b:9c:f5:46:62:4b:dd:
8a:b7:e2:59:c9:fc:cc:61:0b:0b:3b:c7:60:db:bc:1d:f5:d2:
2d:e8:9c:8f:42:13:c3:96:d2:6a:71:25:ef:4f:eb:18:e1:62:
d3:26:a6:13:82:d8:02:53:05:8b:12:8d:0c:2d:5a:e9:48:60:
bc:3c:10:11:f5:64:aa:c0:d3:3f:15:4f:71:16:e4:88:58:52:
40:a5:3e:8c:44:19:8c:22:98:da:71:32:c2:90:fa:99:a9:49:
36:ff:54:71:8a:2b:4b:64:2d:21:ba:8d:27:a9:81:17:9e:4a:
f2:53:08:9f:d1:be:ae:97:3d:48:fd:d8:63:3f:8e:90:cb:99:
88:d5:19:c0:f6:58:02:36:12:1f:88:f3:23:eb:55:28:cd:d2:
20:59:e9:2b:ca:6f:e1:e2:42:cf:42:a3:d3:46:f7:e2:2c:27:
98:ef:ab:9a:20:55:5c:c9:b9:de:ac:2f:0a:0d:f7:6a:8a:2d:
37:d6:0a:fd:1c:fb:1a:6d:95:de:bc:2d:54:b9:85:b3:af:ce:
f3:d6:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:12 2025 by rpki-client