Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
File: Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft (raw, json)
Hash identifier: L7PYXzJcfQxu1GaygIFjpHW6Mpby/OGQFS6WuL403zc=
Subject key identifier: 34:A9:49:8D:13:CE:B4:B6:3A:E7:44:7F:96:0B:73:BA:C1:D9:8E:AE
Authority key identifier: 1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
Certificate issuer: /CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Certificate serial: 019768F2D40F8A7F4099D07EC6DE7E2F38DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
Manifest number: 73
Signing time: Fri 13 Jun 2025 11:00:33 +0000
Manifest this update: Fri 13 Jun 2025 11:00:33 +0000
Manifest next update: Sat 14 Jun 2025 11:00:33 +0000
Files and hashes: 1: Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl (hash: +AvoBml8yvbjlfzkKZnbgBfA+rmgi2f7m+4h7CwAww8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:d4:0f:8a:7f:40:99:d0:7e:c6:de:7e:2f:38:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Validity
Not Before: Jun 13 11:00:33 2025 GMT
Not After : Jun 14 11:00:33 2025 GMT
Subject: CN=34a9498d13ceb4b63ae7447f960b73bac1d98eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:0a:18:d3:f1:f4:51:d7:8c:d0:79:1b:19:
38:ae:e2:0c:24:93:ea:a3:27:7b:39:49:e8:a8:cc:
8e:7c:be:31:16:38:b2:d9:b6:03:bd:f5:79:cb:e1:
b0:0a:5a:81:5f:14:d1:26:11:0c:1b:30:e1:de:f6:
f9:78:06:ef:ef:78:39:9c:64:02:36:4c:5f:e0:aa:
23:67:a9:b7:8e:0e:c9:ff:d1:21:c1:8d:bc:0b:81:
77:ba:50:9e:f9:f6:aa:54:14:78:28:e0:93:b7:fb:
4c:06:ec:30:eb:f9:f3:93:9f:3b:4b:32:55:fc:1c:
a5:90:73:dc:1e:27:64:37:8d:bf:b3:b8:23:0d:5f:
b7:4b:8d:2c:75:66:20:5c:7c:28:14:aa:60:16:84:
87:bc:8b:d5:51:34:cb:13:94:88:1a:c3:9c:2e:91:
2b:38:3f:c7:17:1e:bf:2d:36:7e:5f:00:9e:c9:38:
65:5d:34:3c:86:99:57:5e:64:e6:30:36:96:b2:de:
00:1c:16:f0:db:f4:a4:66:f5:45:55:90:c6:4a:0a:
39:e0:84:d0:c8:cd:80:cd:15:20:ce:14:63:ce:a6:
81:51:a3:f4:b4:aa:d7:54:b0:ed:7d:b1:90:50:3c:
22:48:91:b9:f3:be:3c:96:51:b2:9b:b4:59:71:18:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A9:49:8D:13:CE:B4:B6:3A:E7:44:7F:96:0B:73:BA:C1:D9:8E:AE
X509v3 Authority Key Identifier:
keyid:1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9d:ab:69:59:c8:08:4a:8c:30:22:94:e0:af:44:07:23:b5:
a3:38:e0:43:68:f7:69:9d:7f:ba:ab:1e:0f:89:5f:dd:eb:b9:
65:1c:01:42:a8:b8:06:47:8a:b0:9b:36:e7:69:1d:c7:5a:74:
50:82:0a:7b:27:ab:a4:39:ec:4e:8d:22:4a:0f:25:6d:f2:8c:
bb:91:3d:d5:f9:17:cc:79:8c:24:0c:c6:9d:dd:ae:35:ce:19:
f9:7d:73:e4:42:f6:ef:2e:a8:33:96:f3:bf:11:52:06:bc:3e:
77:47:7d:2d:fa:12:f1:5a:09:79:8e:84:82:e4:a2:20:f5:c4:
9a:45:b3:09:7f:56:44:dc:a2:de:41:49:e9:99:0d:43:b9:9a:
8e:79:2d:40:3d:1a:a9:e2:1e:c2:87:24:e9:00:3e:ed:69:7d:
9f:6b:79:ae:e9:92:01:28:c1:40:05:1d:ad:c8:ef:b1:49:af:
c8:88:a5:de:fe:44:d0:0a:04:10:9a:70:fb:5b:b8:33:4b:aa:
7d:62:20:b9:50:e2:d2:23:b2:c2:b9:40:21:fc:db:75:f4:c6:
cb:e5:5e:71:8e:2d:4b:02:f5:1c:09:e0:fd:71:65:0a:e7:5e:
98:ce:11:a3:70:fa:c4:79:9f:96:37:91:ca:c2:25:97:fc:c7:
d7:3a:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:53 2025 by rpki-client