Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
File: Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft (raw, json)
Hash identifier: nAamoI1swIFmnsITE13fd7RIVQW6UyHg/pgGVrgWV0k=
Subject key identifier: 39:6C:3B:2A:88:16:B9:48:67:35:45:D4:3E:C1:FE:B7:7E:3F:B3:25
Authority key identifier: 1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
Certificate issuer: /CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Certificate serial: 019848F7A2E7F73AD633705A3ADFAD19D66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
Manifest number: E7
Signing time: Sat 26 Jul 2025 23:00:45 +0000
Manifest this update: Sat 26 Jul 2025 23:00:45 +0000
Manifest next update: Sun 27 Jul 2025 23:00:45 +0000
Files and hashes: 1: Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl (hash: KHllwgeBZ4dC1ZiQ3fZdLxHINCrSjBN/vLyU+FxrkdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a2:e7:f7:3a:d6:33:70:5a:3a:df:ad:19:d6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Validity
Not Before: Jul 26 23:00:45 2025 GMT
Not After : Jul 27 23:00:45 2025 GMT
Subject: CN=396c3b2a8816b948673545d43ec1feb77e3fb325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:04:2b:24:e3:33:ef:c2:d9:c8:9f:e6:33:
60:e6:38:8e:e7:99:1e:9c:41:7d:67:d7:63:f2:2f:
95:a1:5f:a1:75:61:a2:28:38:ac:01:09:bd:82:ac:
90:e5:83:2d:e2:29:b6:2f:07:d7:b8:87:41:d9:06:
14:79:56:fd:75:d7:eb:90:4e:8f:ee:ec:4b:76:f5:
75:c9:fa:44:44:02:a0:33:dc:56:3d:d4:b0:bd:31:
08:7d:f7:fb:b7:53:a2:3c:6e:63:f7:1b:07:aa:26:
f3:ba:92:d4:da:0e:f1:1b:c9:43:58:19:04:e1:dc:
9e:9f:ba:69:54:ff:f6:a9:3d:11:d7:c3:51:11:00:
ec:03:08:41:88:05:de:38:d4:6f:78:b6:6d:31:39:
b2:b3:d5:89:51:ff:7a:79:0e:8a:cd:1d:58:3c:69:
d7:eb:36:a3:bf:d3:4f:48:86:0c:31:06:f5:36:4e:
97:58:d8:8e:03:bf:4a:ed:86:a0:da:a5:77:19:4f:
19:f0:78:98:bd:65:b9:04:b5:bf:ed:48:88:a5:e0:
30:97:65:65:fb:b5:b0:3d:c3:08:e0:a1:dc:5d:4c:
b1:6e:b7:c5:a0:37:84:92:cf:08:a2:f9:53:e6:08:
3a:58:a9:01:1b:a1:8e:5e:23:d6:2f:07:e6:76:2e:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:3B:2A:88:16:B9:48:67:35:45:D4:3E:C1:FE:B7:7E:3F:B3:25
X509v3 Authority Key Identifier:
keyid:1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:61:2c:1d:c4:2f:25:0f:a9:cb:63:ba:a7:ed:c4:30:e9:36:
e9:25:df:3c:f4:91:42:ee:75:d6:9c:a2:a7:95:91:5d:ec:08:
c5:83:0b:6a:75:fa:06:a8:7f:c7:6f:b5:18:d9:c2:f9:99:1c:
a2:08:e1:bd:61:9f:6b:30:33:b5:3c:9c:cc:1a:54:fa:37:86:
79:c9:ce:6b:ef:c0:6e:f9:7f:45:3b:f0:80:07:a2:4e:ab:2e:
7b:1f:a0:ca:d2:7b:70:08:ca:be:7f:fe:f3:3e:6c:8d:da:5c:
81:f9:4c:3f:34:04:b3:3f:db:30:b5:b4:93:6d:db:ef:00:6c:
ee:c9:96:98:82:1e:22:b0:a6:4e:58:14:45:cc:6a:84:93:ff:
49:85:81:fa:a9:1b:bb:ed:f2:c7:4b:b1:7f:2a:39:b4:c8:95:
4c:6f:c5:68:4d:f0:dc:4f:de:bb:ae:d9:80:77:f4:0b:b9:8f:
a5:95:0e:4b:63:8d:88:66:ce:19:94:01:32:ce:f1:57:42:9a:
0d:a5:cc:e7:4b:78:07:72:59:7d:73:50:b2:e8:12:97:e9:07:
38:aa:a8:9c:28:5d:e9:bc:fd:d6:a2:2b:3b:f5:0a:d9:09:33:
69:2d:3b:d2:83:1b:31:55:37:9c:19:5c:fc:33:e9:10:97:bb:
a9:85:f1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:40:38 2025 by rpki-client