
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier: zsc4BSczlVkmUrZyxTXbYiZtOFJfYPwCL8VKoj8w2F4=
Subject key identifier: 88:69:B5:AE:E9:B3:A7:A6:16:06:BD:0A:67:B6:67:6C:C1:96:0F:06
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial: 01987F79E27336AE8CFE2CE088CAF9BDA7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number: 05FF
Signing time: Wed 06 Aug 2025 13:02:30 +0000
Manifest this update: Wed 06 Aug 2025 13:02:30 +0000
Manifest next update: Thu 07 Aug 2025 13:02:30 +0000
Files and hashes: 1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: K1keKoQGXU8yMYpGX2uvz8dVZbeWN/55Q8gsmRFVIwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:e2:73:36:ae:8c:fe:2c:e0:88:ca:f9:bd:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Validity
Not Before: Aug 6 13:02:30 2025 GMT
Not After : Aug 7 13:02:30 2025 GMT
Subject: CN=8869b5aee9b3a7a61606bd0a67b6676cc1960f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:ce:ad:63:8b:b5:10:bc:65:7b:2a:70:74:
83:38:5f:19:72:22:7c:b8:d8:52:fc:65:04:fd:6d:
e4:81:ef:f3:7f:2a:77:ab:60:4e:a5:63:a6:47:68:
07:d9:a3:9a:51:e6:16:14:ca:73:69:c1:2c:88:a2:
5c:6e:3e:60:27:47:f8:09:f0:f6:dd:dd:ee:53:76:
b4:ce:b6:85:2a:56:5a:1a:a7:ab:e6:40:29:79:90:
10:fc:a4:c4:f7:87:b6:4c:85:b6:f1:78:1c:80:df:
87:97:f1:da:23:87:ff:41:67:18:2c:09:b1:c7:7d:
78:f8:7f:df:ce:2d:b0:5c:c6:96:9e:a2:87:2b:62:
7f:b5:18:2c:43:46:e0:b9:1f:bb:57:d2:46:33:9e:
7f:58:60:5b:31:d8:c7:c5:8a:93:e7:52:c0:1c:18:
76:81:81:6f:3e:bf:52:47:d0:45:f8:5a:c1:a2:fc:
6c:bd:52:22:ed:87:ea:1c:a8:f0:0f:63:41:3b:30:
cc:78:29:9b:00:05:06:38:a1:f3:4b:f5:74:dc:b6:
8f:29:0d:39:e8:39:87:dc:5d:e9:f5:7d:0d:03:36:
53:7d:50:76:8e:1b:ee:14:3f:74:be:a2:99:a8:35:
2f:ec:e1:00:21:33:e9:f1:cd:51:1f:fa:46:42:d9:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:B5:AE:E9:B3:A7:A6:16:06:BD:0A:67:B6:67:6C:C1:96:0F:06
X509v3 Authority Key Identifier:
keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6f:7f:45:ef:3c:40:75:3e:1d:c7:c6:bb:0c:f6:a8:34:e2:
af:fc:e8:e3:b3:86:d3:f1:ae:9e:e3:e4:8e:c3:ab:aa:00:56:
19:ed:d4:05:b4:2c:ab:13:d9:34:c1:7b:82:f5:ae:07:31:32:
02:82:76:22:7f:39:73:8f:b3:ed:57:fc:3b:16:4c:ec:d4:c1:
2d:ae:f1:4b:6e:01:5d:ee:1c:6d:89:86:47:3c:aa:2c:5e:4f:
fe:1a:b9:a8:46:97:a8:d2:cf:b1:6d:93:a9:37:db:0e:2d:8d:
be:a3:72:77:c1:7d:73:eb:d9:25:e8:5b:eb:1c:41:b9:e3:7c:
e4:f8:44:18:ec:14:51:f8:15:9d:aa:0a:f5:51:f2:bc:ee:5c:
6c:04:b0:fa:b3:00:d5:0f:38:4e:e7:35:cd:68:e4:f0:3b:57:
13:bb:d3:1a:94:56:a3:06:fc:80:db:44:29:70:2f:b1:71:2f:
81:50:49:5e:e9:9f:56:aa:9b:a7:c3:09:01:e5:40:f1:11:62:
73:db:7c:1c:70:03:3a:4d:9a:24:5c:80:6c:45:ea:be:b5:98:
92:80:30:af:45:11:c7:8b:39:bf:f8:48:c6:92:be:88:b9:8d:
70:c3:da:a3:0c:a5:2f:06:dc:9a:c1:65:3a:15:0f:51:ab:35:
6b:28:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:43:01 2025 by rpki-client