
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: ugl/fLnRuNtX0COSIZUQU6ZMV1Zat17RmCHWi+GZlPo=
Subject key identifier: 5F:6C:32:2A:E3:3F:0B:87:EA:70:A5:6C:93:D6:B0:D0:D0:31:51:66
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 01989E5FD5AC70EEC498AD0930569B7A275A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 1446
Signing time: Tue 12 Aug 2025 13:02:17 +0000
Manifest this update: Tue 12 Aug 2025 13:02:17 +0000
Manifest next update: Wed 13 Aug 2025 13:02:17 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: I4Kg1dUMvNFvHrHOk0ivoFTBKyJVTjIHst4c5GjjBqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:d5:ac:70:ee:c4:98:ad:09:30:56:9b:7a:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Aug 12 13:02:17 2025 GMT
Not After : Aug 13 13:02:17 2025 GMT
Subject: CN=5f6c322ae33f0b87ea70a56c93d6b0d0d0315166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:f7:53:75:fc:8f:ee:02:26:73:c2:fe:9c:
b8:ff:ce:40:d2:41:e8:45:01:15:a8:08:26:df:37:
7a:c1:8c:13:ff:e6:05:f3:c2:9d:fb:d2:a8:e4:2a:
44:cf:50:84:09:3d:70:b1:52:39:e9:8e:3d:a2:d0:
65:53:b3:f5:e8:2a:81:ea:43:8f:8b:30:45:b4:f4:
d7:4c:d0:52:26:e8:29:fa:99:f0:05:4b:fb:e6:3b:
4c:f5:63:0a:d7:f6:a5:85:e0:60:c1:7e:61:89:68:
96:e6:79:df:74:a1:d3:c6:25:15:a4:55:13:02:cf:
e2:2b:b8:ed:41:2d:98:7c:40:3a:9a:f3:20:49:b2:
1a:73:d7:0f:ea:71:33:35:04:ef:9d:59:0b:bf:ab:
71:3b:c5:57:29:51:49:0f:0d:44:5f:b0:0e:f8:4c:
ac:0b:b4:ad:1c:9e:ae:91:dc:50:46:74:68:20:e2:
13:f0:7e:df:54:3a:d8:a9:12:d9:0e:08:60:26:f7:
ca:11:8b:dd:6d:d3:6a:5b:fd:7d:0e:91:0a:8b:2d:
94:5f:e2:cf:0a:a3:ed:75:ec:9d:3b:cd:c0:d3:57:
c0:d1:b0:a8:b3:5d:13:2e:28:7a:85:7f:66:33:c4:
0d:46:89:9f:cd:43:48:2e:85:7e:d3:b3:c7:e7:88:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:32:2A:E3:3F:0B:87:EA:70:A5:6C:93:D6:B0:D0:D0:31:51:66
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:76:81:bd:1c:dc:96:f1:6a:3f:5f:b7:aa:21:7a:4f:b7:0f:
6f:5a:eb:92:67:a1:e5:c1:da:6b:98:d9:f0:44:b6:2e:18:c7:
6b:0d:7f:bb:4d:7a:4a:99:02:de:df:bb:b5:46:db:d4:b7:73:
d9:3f:82:7a:46:bc:15:ae:5c:c4:fd:fb:01:8f:88:0f:00:28:
ca:c6:97:9f:f5:b8:00:1a:33:75:ac:d5:00:7d:51:61:af:e0:
13:99:bc:f2:55:c9:83:f3:ca:7e:ca:b0:b8:aa:02:b3:4a:b2:
94:4c:f2:16:b1:ff:00:9a:b9:de:f7:c0:6f:71:e6:ec:db:bb:
36:56:5c:8d:0a:43:59:14:ac:96:b2:2c:b5:0f:73:cf:85:16:
6d:f2:6b:b3:98:25:77:22:08:ee:6d:11:65:8e:aa:3a:c0:4d:
0e:50:b7:81:4e:c5:68:52:47:bb:5c:74:d2:43:0f:e9:f8:68:
a1:86:12:fb:cb:46:61:ba:2e:6d:e0:47:9d:92:2c:0a:21:a7:
91:67:18:61:25:4d:84:fb:c8:39:51:40:2c:5e:26:be:1f:1e:
44:d9:15:4a:55:13:87:c8:73:8f:5b:b5:cd:3c:25:c1:7d:ec:
84:9f:7d:a2:c7:21:f0:e8:63:7e:b3:88:93:14:eb:48:36:87:
39:b1:dd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:57:46 2025 by rpki-client