Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: s428OE7FNNZzhP7gllsOCxRArR+Sq7J1K9xRS6pe5uo=
Subject key identifier: 63:BC:85:06:94:FD:B4:A8:50:63:BA:78:83:F3:86:AC:D3:9D:92:9E
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 019678D623F3656BB29C44920F6F1FBD6321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 0347
Signing time: Sun 27 Apr 2025 20:00:21 +0000
Manifest this update: Sun 27 Apr 2025 20:00:21 +0000
Manifest next update: Mon 28 Apr 2025 20:00:21 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: oHzUNRjkxE2WwDVn0NqgT3gpg52AFloPhW94s36VKio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:23:f3:65:6b:b2:9c:44:92:0f:6f:1f:bd:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Apr 27 20:00:21 2025 GMT
Not After : Apr 28 20:00:21 2025 GMT
Subject: CN=63bc850694fdb4a85063ba7883f386acd39d929e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:95:f4:c8:cd:1c:6e:88:a8:f9:77:15:69:
51:01:e4:2e:ce:b8:12:27:1d:88:6b:0f:05:23:da:
48:df:5c:b6:f3:6e:69:8e:fe:5e:85:1c:0d:2b:32:
ec:5e:dd:b5:83:4e:d5:a0:16:4e:e4:f3:62:67:ed:
88:72:18:66:40:6b:7b:f5:01:fb:43:9c:6a:2d:d0:
9d:66:0f:01:e5:db:c4:4e:6d:a1:f7:4b:c8:74:87:
c1:4f:65:96:5e:d2:57:54:6c:4e:f6:d4:c3:a0:e7:
49:d6:ba:4b:db:9c:4e:81:69:27:ce:42:b5:36:6d:
b5:ef:82:7e:80:9a:80:c8:d3:58:91:06:32:b4:df:
0e:8e:90:f3:a4:47:52:cc:fa:ee:82:d0:fe:ef:5c:
06:79:6f:bf:d0:eb:51:7a:a5:bd:b9:db:ce:43:dc:
4c:4e:49:e7:90:a9:bb:88:09:36:36:9b:06:77:24:
ef:c5:34:27:ab:ac:12:06:02:64:26:6c:7e:5a:56:
da:24:81:84:48:65:2e:c8:98:b2:22:32:7a:6c:29:
38:24:36:fe:da:d6:41:d5:27:d4:2e:1a:24:81:a9:
31:81:c4:2f:97:c7:c2:0c:a1:69:2e:0d:63:94:ff:
cf:9b:73:ca:da:56:0a:6d:e0:70:a2:2a:ef:f8:22:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BC:85:06:94:FD:B4:A8:50:63:BA:78:83:F3:86:AC:D3:9D:92:9E
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:54:ca:65:b0:a7:c8:d4:13:ac:07:2a:3f:86:3f:36:8b:7a:
6b:8d:92:37:86:42:bb:fe:20:cc:37:48:6b:03:e6:07:83:b7:
96:14:2a:e6:3e:c5:12:38:17:7c:93:87:f6:73:eb:ed:93:dd:
0a:e2:81:cc:20:42:8f:c1:d6:46:12:67:1e:f4:83:d1:89:5f:
ff:82:b3:46:a0:28:53:90:35:6b:e4:49:62:4f:ad:97:51:60:
4d:3d:23:8a:63:5a:6f:bb:27:79:73:97:0a:84:6e:5d:79:51:
c1:ca:ef:d4:4d:14:ad:a9:0e:8c:b7:e1:7a:a4:60:2e:26:11:
07:ec:d4:56:92:f0:af:a4:44:4d:c8:4f:7c:36:ca:aa:de:9c:
a7:2a:70:e0:c3:86:f6:65:b2:4d:d5:20:8a:ae:fe:60:68:ae:
85:5f:72:cd:ba:73:41:aa:2f:9f:32:82:e5:cf:51:5c:73:ca:
31:07:2e:9c:de:d7:80:41:f2:0c:8e:98:93:a8:1d:de:36:39:
77:15:f2:3a:9e:c7:6d:3d:b4:a4:70:fe:a7:1f:06:ee:fc:1b:
4d:97:92:10:12:58:12:ad:2e:1d:64:3d:15:69:3c:9e:22:2c:
92:cf:43:60:75:42:50:5b:26:fe:9a:e5:24:1e:59:2f:ff:55:
9e:e1:f1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:04 2025 by rpki-client