Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: LeqeGbKaWHPJi0JsdbvsyOeel6fTCkfa2U0zAsCJkes=
Subject key identifier: 58:4B:12:BF:F8:27:B9:7B:F7:AE:86:1D:E8:5D:19:26:96:B4:1C:4D
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 01976D3E2742FD85519A464385D8814D233F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 13A8
Signing time: Sat 14 Jun 2025 07:01:18 +0000
Manifest this update: Sat 14 Jun 2025 07:01:18 +0000
Manifest next update: Sun 15 Jun 2025 07:01:18 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: dgCbTjQ6yqGqo0F1n0gzGz+NdR1fBaJuMxCp1BECY5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:27:42:fd:85:51:9a:46:43:85:d8:81:4d:23:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Jun 14 07:01:18 2025 GMT
Not After : Jun 15 07:01:18 2025 GMT
Subject: CN=584b12bff827b97bf7ae861de85d192696b41c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:bb:80:8e:1f:89:6b:92:a8:14:c7:99:84:
5e:97:d8:58:68:c2:20:0f:6f:80:88:a1:e0:8f:a1:
06:7d:f9:6f:23:e3:2a:5c:69:f6:9a:6c:80:c9:d7:
4c:15:4d:56:51:87:82:3c:a1:4d:34:57:f8:e7:79:
a6:fc:42:be:75:af:0a:2d:76:df:ec:01:b5:c7:aa:
18:ad:89:6e:79:90:31:3a:23:60:cf:84:38:2e:d3:
99:2e:68:86:7b:f6:48:6b:99:0a:63:97:69:0e:0b:
61:07:57:f3:9b:9a:a2:bd:7a:cc:92:80:b3:ce:6f:
db:3b:b7:20:a2:79:92:7d:03:cd:15:9e:68:b7:7e:
20:0d:ae:2d:cf:92:30:02:9f:e6:9e:5b:d4:04:87:
f2:ab:74:e5:26:fc:0e:32:bf:89:ad:83:a3:26:70:
41:84:e6:5a:30:23:27:56:eb:7b:d6:5e:bb:4a:cc:
8b:d4:df:2c:ac:24:be:9a:ff:84:85:05:c5:48:29:
4d:27:0a:48:4e:24:dd:e8:28:ea:bd:97:a6:af:02:
25:3f:c3:a9:3d:1b:4b:33:b4:ad:42:b7:c1:35:ba:
48:28:88:5f:22:50:af:6f:f9:c8:b6:6b:2f:9f:81:
c3:c1:e5:b7:01:84:ad:fb:ee:3f:19:40:03:5d:e6:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:12:BF:F8:27:B9:7B:F7:AE:86:1D:E8:5D:19:26:96:B4:1C:4D
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:af:7a:57:b8:01:02:30:0c:0d:ea:f0:6f:95:26:3a:e9:e9:
f2:a5:ab:4c:a0:69:4e:9c:c1:56:6d:d9:42:a8:d1:27:dd:65:
9c:8d:59:4c:14:dd:04:49:0c:5e:47:07:d9:4a:bb:ed:e6:be:
3e:f1:ff:02:d6:da:57:6f:a3:8e:37:83:c9:2f:5f:ab:f2:c8:
6f:5f:26:07:2c:a3:47:80:44:4d:fd:cf:c4:98:c6:cc:f9:14:
bf:ee:4f:7d:08:f2:21:5e:d6:e1:19:58:3b:f6:c3:fe:9d:63:
b9:07:f1:a8:ff:d3:d3:5e:bc:07:fe:8f:be:98:25:71:75:f5:
3e:fb:3d:21:9f:70:2a:4c:5d:94:dc:f2:b3:dc:a7:57:0e:be:
1b:7c:e4:9d:95:62:03:f5:27:aa:bd:5b:20:27:21:c9:22:69:
7f:b6:96:49:af:9a:2d:b9:a8:e4:16:78:ca:08:b8:65:43:9e:
53:b0:a4:91:d0:47:cc:33:20:7f:67:80:cc:b8:b6:8e:e4:83:
f8:07:73:b3:0a:47:44:a2:04:e7:77:30:43:d3:d0:b1:3d:e1:
e9:42:5f:5c:67:72:6e:64:73:a3:b8:c6:61:28:92:97:e6:70:
59:70:b5:33:fa:b7:1a:99:59:ab:b0:fb:64:fa:13:bd:5a:4b:
bb:30:91:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:12 2025 by rpki-client