Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
File: Gwm9TWooxfH75oPPKs1ei_K65MQ.mft (raw, json)
Hash identifier: d5fgFZngaVHE1UM4r2LO+5kJHGKO7gJz/Qq5VGEvZB4=
Subject key identifier: DF:27:13:DD:A2:6F:7C:73:B7:BE:FB:A8:35:68:40:40:FB:39:68:27
Authority key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
Certificate issuer: /CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Certificate serial: 019769619A3DA20944B33902C30D9916467E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
Manifest number: 0356
Signing time: Fri 13 Jun 2025 13:01:33 +0000
Manifest this update: Fri 13 Jun 2025 13:01:33 +0000
Manifest next update: Sat 14 Jun 2025 13:01:33 +0000
Files and hashes: 1: Gwm9TWooxfH75oPPKs1ei_K65MQ.crl (hash: svqzlILDdMjQc9fga1AQ1QyJFHVJv0IaVmU2OS767Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:9a:3d:a2:09:44:b3:39:02:c3:0d:99:16:46:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Validity
Not Before: Jun 13 13:01:33 2025 GMT
Not After : Jun 14 13:01:33 2025 GMT
Subject: CN=df2713dda26f7c73b7befba835684040fb396827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:24:e5:87:ad:35:89:47:72:6f:8d:40:aa:
8f:0e:d7:12:23:c1:01:80:d4:62:b7:a9:b1:e1:27:
2a:ff:d8:c0:a2:71:48:d9:c6:b1:ae:d5:a7:f7:f2:
76:05:0d:93:df:da:e4:53:b9:0c:cc:82:82:2a:b4:
86:35:9d:43:78:d5:35:5f:6d:5a:23:93:31:7e:f8:
70:ff:f3:63:3b:e7:04:f1:a7:ff:19:5d:f5:ff:e7:
ac:ef:f9:d8:8e:a0:80:12:7b:eb:e4:20:f1:7f:c7:
95:9e:72:7d:64:f9:79:da:4f:66:2e:6b:da:27:c6:
1c:82:14:cc:bd:e2:5e:96:02:1c:3c:ac:d0:cc:b6:
9a:da:fe:20:5f:9e:68:fc:d8:07:38:66:28:aa:3b:
4d:47:71:03:57:9f:99:17:35:97:d4:e4:15:40:9a:
3c:30:d9:7f:a7:24:fb:59:78:71:35:52:88:18:5d:
dd:82:c5:c1:30:0e:10:49:f7:0e:83:0a:87:06:df:
27:c0:5d:28:1a:9e:d0:9c:db:53:38:e1:8b:cd:d6:
d7:ed:2a:ec:46:89:48:cb:38:79:6d:dd:10:4b:2a:
e6:8d:b2:ce:48:6b:7d:02:3b:c7:cd:5a:b8:10:e6:
35:70:ce:2b:25:ba:31:7c:88:44:cc:cc:6f:da:3d:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:13:DD:A2:6F:7C:73:B7:BE:FB:A8:35:68:40:40:FB:39:68:27
X509v3 Authority Key Identifier:
keyid:1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a2:ea:57:b1:52:9d:ef:22:ed:ec:a2:97:94:2d:c2:d8:3f:
9f:26:94:fe:1c:64:f8:e3:ca:53:9d:a4:1e:71:27:df:f3:a5:
db:2d:d2:3a:61:97:21:f1:ea:78:a9:46:38:59:8e:3b:81:98:
5d:5f:cb:51:be:2d:05:1f:2d:bd:46:6f:d3:16:3c:fc:32:92:
93:7e:e1:b5:5a:d3:e7:f3:9c:76:ec:c9:c6:72:70:dc:d8:8b:
e5:12:42:d0:d3:fc:48:ce:3e:f8:f1:ac:cf:ff:ac:00:c2:de:
81:68:30:ce:d0:35:2f:7a:b0:bd:63:99:b7:6a:66:61:bd:3c:
6c:44:2c:7f:63:ec:3a:07:89:3c:0d:a0:ea:80:dd:18:79:59:
fb:70:a5:91:72:a6:04:d6:99:92:cc:88:79:e4:32:15:b6:cd:
97:fd:54:6c:12:3f:38:c7:f5:64:d0:67:43:b8:d5:ec:f8:af:
94:b2:68:b0:3d:95:0a:25:e4:84:d8:a4:f1:d5:60:76:78:4a:
53:79:4c:aa:47:61:ea:8f:80:1e:f2:d1:dd:6c:16:6e:78:97:
1b:6d:d7:74:f2:1c:a3:85:a1:52:f9:b2:10:d2:7b:78:87:97:
72:2a:3e:89:30:76:59:2e:b5:86:21:34:73:08:05:88:58:9c:
4b:3f:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:32 2025 by rpki-client