Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
File: gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft (raw, json)
Hash identifier: fjP4ZrLi+NX8L4dquac2N1/IrWS3f3o8W0ZF3OfhTyQ=
Subject key identifier: FA:76:CB:14:74:37:FE:49:4C:2A:F2:09:CE:FF:47:A3:93:2A:A4:4C
Authority key identifier: 81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
Certificate issuer: /CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Certificate serial: 01984A0A2BCF958CB1113710F5603D822C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
Manifest number: 0448
Signing time: Sun 27 Jul 2025 04:00:37 +0000
Manifest this update: Sun 27 Jul 2025 04:00:37 +0000
Manifest next update: Mon 28 Jul 2025 04:00:37 +0000
Files and hashes: 1: gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl (hash: 6oYMYAZmvUFrg6V3C7BTjS5oR4TqcwXE9JnnY3ffYVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:2b:cf:95:8c:b1:11:37:10:f5:60:3d:82:2c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Validity
Not Before: Jul 27 04:00:37 2025 GMT
Not After : Jul 28 04:00:37 2025 GMT
Subject: CN=fa76cb147437fe494c2af209ceff47a3932aa44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:8f:32:95:5c:87:fe:a1:87:20:b0:07:ad:
bb:d6:03:36:df:f7:bf:18:5d:2d:3d:a5:10:93:19:
77:fa:56:06:9f:b5:08:bd:49:db:ab:33:4d:0e:56:
d0:36:26:44:be:55:a0:d9:4c:fe:5e:7e:e9:64:67:
83:9c:f2:27:b0:4c:a3:82:4b:3f:12:c7:69:3d:70:
ad:5f:71:89:aa:6a:a9:61:71:89:97:e3:cd:64:24:
76:23:a8:3e:a4:46:c3:f0:84:d8:d3:17:b4:d3:4b:
25:e3:df:9f:98:10:38:b1:ec:ae:6e:a8:34:e3:55:
3a:5d:bd:0f:87:2e:b4:57:0b:fa:43:5e:19:6d:20:
f1:5a:44:21:3e:67:bc:f7:ec:57:10:10:37:ea:94:
76:08:36:88:0d:a8:32:e0:9f:06:98:f9:12:69:3f:
00:83:e7:57:83:9c:0f:66:a3:ee:62:bc:92:df:80:
52:82:7b:70:4c:35:d3:91:4d:57:d5:9c:40:0d:79:
9b:92:44:01:06:97:4c:f9:36:91:d1:ec:92:3a:1b:
6c:55:29:62:13:01:da:dc:b8:80:5f:7c:55:51:62:
83:15:09:ac:24:b1:2f:9d:89:10:1f:65:80:a7:b0:
3e:6c:07:50:f6:2f:96:47:96:bf:e8:e8:a9:e5:52:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:76:CB:14:74:37:FE:49:4C:2A:F2:09:CE:FF:47:A3:93:2A:A4:4C
X509v3 Authority Key Identifier:
keyid:81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:79:a2:b7:55:a9:4c:13:d9:5b:c0:3c:59:80:3f:1e:c6:1e:
e3:22:54:ee:56:20:f6:56:aa:2e:b7:8d:ef:37:54:de:72:5a:
06:d2:24:25:5f:8b:43:95:ba:42:09:3a:d5:22:1b:20:1e:9b:
1c:f7:c4:04:47:fb:39:a2:9e:09:98:af:93:fc:9b:db:09:b2:
03:f0:16:15:53:3b:0a:f5:a8:80:c6:fe:5f:f2:30:1f:51:75:
fd:ff:45:85:c5:d9:bf:33:70:79:95:d8:5b:21:3b:f6:dd:15:
40:21:03:a3:0e:77:e7:82:62:21:74:48:80:85:ea:21:98:ba:
c5:fb:16:e9:4a:6e:23:1f:c2:38:f0:c8:27:f1:d3:09:3f:df:
d7:20:cb:dd:7c:9e:4b:6b:66:bc:ba:48:1c:40:be:61:e2:e4:
bd:9d:8c:27:02:54:16:0b:d9:1a:54:03:d5:2d:96:a4:f5:01:
96:a9:06:58:75:39:00:de:6d:2b:42:e8:f0:9f:08:63:e0:ec:
02:d3:9d:18:e4:2d:ef:ab:b1:8e:e8:f1:b1:9c:9a:06:93:f5:
80:20:35:3d:43:c7:e1:99:f1:c1:3e:31:5c:f7:54:5a:c8:23:
f9:d7:51:59:7e:b2:e4:98:6c:d8:7e:c7:77:80:8c:08:58:ef:
5b:92:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:47:26 2025 by rpki-client