Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: kaXiaHAcPw2rUIrPqWwjYmmwGmXznnkq+NIhHF9ufaM=
Subject key identifier: 8B:B1:14:C1:09:75:4A:1D:3A:9C:9F:2F:31:C1:73:33:F9:AF:EC:64
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 01987F79B29DAC728A1C889C3180297188A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0D7D
Signing time: Wed 06 Aug 2025 13:02:18 +0000
Manifest this update: Wed 06 Aug 2025 13:02:18 +0000
Manifest next update: Thu 07 Aug 2025 13:02:18 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: A1UbAAFKAIhwtOTZAOJ/tGWGAHaY5Q1CN1Us55pX/YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:b2:9d:ac:72:8a:1c:88:9c:31:80:29:71:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Aug 6 13:02:18 2025 GMT
Not After : Aug 7 13:02:18 2025 GMT
Subject: CN=8bb114c109754a1d3a9c9f2f31c17333f9afec64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:4a:fb:85:6b:72:02:c5:37:fd:ae:ba:1d:
0f:8a:7f:69:08:2f:18:1a:d3:37:15:b9:7d:d2:97:
8c:e3:87:f5:ff:99:1a:94:5c:36:0c:09:b3:19:2c:
1a:ec:a7:51:b1:f5:17:06:17:cf:84:ab:bd:11:8a:
e6:f1:64:fb:24:27:fc:50:e9:88:89:07:ba:eb:46:
ca:d3:b7:72:be:3c:68:10:c3:fb:be:e0:68:79:f3:
de:f0:90:6f:4c:b7:b2:b1:c6:18:71:20:0d:ea:a7:
28:4b:e7:50:6f:90:8b:b3:1e:0e:c0:d3:8e:1c:92:
13:61:16:b5:4a:79:0d:6c:c0:77:86:2c:41:ec:3c:
e6:72:9b:ba:6f:33:38:09:bd:8e:c0:94:31:bf:e8:
b4:dc:6e:d0:73:ea:66:a7:77:cc:46:71:0b:93:56:
ef:a0:59:85:37:25:27:55:c9:f9:f3:d0:d7:97:f4:
28:33:8f:64:f2:b1:e3:2f:a1:fb:96:9c:7c:bb:e4:
c3:94:b1:3b:d5:e3:ac:ab:cc:3b:ec:99:16:5a:df:
d8:dc:c6:e5:64:ff:76:fe:63:84:2b:2d:34:a3:b1:
5a:53:ce:e0:e7:a9:53:53:ab:17:91:25:c4:35:0b:
d4:e4:52:de:a6:30:80:df:18:74:09:0d:9d:fa:be:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B1:14:C1:09:75:4A:1D:3A:9C:9F:2F:31:C1:73:33:F9:AF:EC:64
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9e:41:90:30:60:0c:36:54:ff:3f:59:5f:fe:6a:48:73:3c:
5d:d8:4d:99:34:52:36:fe:b8:8f:1c:2a:84:e0:a7:96:10:de:
3b:b3:4f:4b:d1:ac:01:1d:f4:ce:81:38:83:d5:d9:2f:c7:64:
ad:65:d9:54:13:59:9b:ca:cf:66:86:a8:53:4d:35:25:0e:ce:
c7:9a:5f:65:6f:00:75:e8:ca:db:05:6e:29:30:8a:8e:8e:e8:
d0:40:16:91:67:3f:27:b5:8f:81:57:35:34:50:57:5b:d7:c0:
1f:5e:60:cd:46:5b:94:3c:b1:fc:81:aa:fb:a6:28:0a:97:8e:
1c:24:24:c3:4c:6c:a2:2b:8b:12:2a:69:03:64:e2:96:c2:e3:
2d:42:09:55:09:bb:e8:be:0e:9b:66:fc:0e:e8:ba:40:5e:0c:
8e:af:f5:18:eb:3f:f5:46:d7:2e:b7:cb:dc:7e:64:7c:fe:c7:
20:47:5c:ed:77:9f:86:1d:a3:76:6c:de:e1:73:78:b0:2a:d0:
ac:bc:a5:19:a3:19:27:f4:18:25:82:70:90:c8:00:4b:4a:6a:
f6:78:75:96:c8:a7:d7:2b:19:c6:49:99:ed:59:70:c6:d8:17:
0b:ca:1b:1c:6e:ac:4f:fc:e1:dd:da:05:ad:e8:5c:52:08:c4:
05:3c:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:47:43 2025 by rpki-client