Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: yjhSRiqxydiUPD443KaAXoP/1Uqy6c2mf3pMt/raJaY=
Subject key identifier: 4E:85:32:B7:AD:36:42:4F:64:A8:AA:0A:5B:5E:35:A9:FA:6F:3F:DF
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 01967C7C35FD4D88044DB9D9E7ABD7686646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 0429
Signing time: Mon 28 Apr 2025 13:00:36 +0000
Manifest this update: Mon 28 Apr 2025 13:00:36 +0000
Manifest next update: Tue 29 Apr 2025 13:00:36 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: 9rrG5kdavgFxm2c8cYygMrvwgByUeALcXkFEO4eQRvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:35:fd:4d:88:04:4d:b9:d9:e7:ab:d7:68:66:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: Apr 28 13:00:36 2025 GMT
Not After : Apr 29 13:00:36 2025 GMT
Subject: CN=4e8532b7ad36424f64a8aa0a5b5e35a9fa6f3fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:99:b7:94:08:27:90:8a:f5:af:6f:11:39:
ea:e6:bd:c8:e5:6e:34:a7:98:d5:14:fe:fa:86:7f:
1f:ce:39:26:03:d4:df:b9:b5:0e:c0:52:01:3e:cd:
65:b4:fd:00:1b:1f:2d:a2:46:db:4c:67:1a:d7:fc:
52:97:c7:b4:c3:47:07:05:65:dc:5b:86:b9:f3:5f:
3d:ba:41:33:20:a1:5e:02:79:93:2e:fd:da:a0:b5:
d4:fa:46:89:42:7e:2e:21:21:5e:52:4e:51:86:8d:
09:fc:57:fc:56:c3:c9:3f:05:71:4a:01:04:d1:35:
c6:06:a5:c9:cb:42:5d:2b:8b:c6:84:fe:9c:cb:4d:
bf:71:3d:0f:5e:28:33:af:a6:fe:50:aa:da:93:ab:
25:a0:94:3f:94:c6:e3:d1:2c:9d:a0:c8:52:de:57:
5c:02:bd:83:d3:31:58:08:2b:9a:ca:d0:ef:a8:67:
31:d7:b4:f2:e8:c8:b5:a7:81:3f:a7:c7:85:a8:e7:
af:08:ab:34:d6:04:8a:81:11:32:73:c2:28:72:c7:
80:7b:e4:00:bc:81:a9:2c:18:33:46:50:57:b6:a0:
a3:10:c6:b5:be:19:26:ca:09:97:11:4e:0b:6f:ea:
d5:83:2f:42:bb:c1:4d:70:b8:2c:1e:0e:bc:a1:87:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:85:32:B7:AD:36:42:4F:64:A8:AA:0A:5B:5E:35:A9:FA:6F:3F:DF
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d2:83:13:ce:fc:79:ba:ec:20:82:1c:31:45:0e:64:a5:e9:
19:ca:83:22:05:87:29:d6:57:0e:19:df:1c:cb:1f:af:36:ac:
70:eb:e5:90:e9:e7:49:f9:3a:3d:d7:3b:54:82:3d:95:4e:8f:
9a:77:e5:fa:49:25:e9:06:ac:94:f1:bf:21:ba:10:85:c5:ba:
8d:1c:67:ce:50:f0:65:dd:e6:65:b7:73:da:61:41:31:3c:55:
da:3d:f4:22:ee:d2:81:93:21:c0:da:25:24:7e:91:fd:94:c4:
c8:10:af:25:ac:17:60:26:ed:58:4d:7e:bc:bc:05:42:15:8f:
3a:7f:51:c8:6a:1b:a6:de:d8:8d:02:97:32:e8:85:83:6b:d7:
27:64:38:c0:21:59:3d:54:c0:c1:4b:2c:ee:62:85:70:0b:06:
f1:55:2a:9a:cf:40:ac:75:21:2a:10:e4:ee:a9:22:e1:4a:8e:
9c:e7:b0:f3:5a:42:e4:7c:1f:5d:cb:76:e5:27:92:27:9a:26:
b1:ee:b8:4f:b0:5f:4b:4c:4f:e2:fd:0e:5c:4a:29:7c:10:fd:
8f:d8:19:12:3c:e3:62:fb:d9:fe:26:ee:05:5e:a3:08:4c:ea:
37:4b:d3:52:c6:cd:81:df:86:ad:9b:49:d8:d3:d0:25:73:76:
4d:6d:a6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:09:17 2025 by rpki-client