Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: Vzf7pBnbugcKqj5eZ5o2PAbuyNaPJi3BnY6/gDseBao=
Subject key identifier: 9D:3F:99:03:C2:84:34:AD:2B:C3:F6:BC:A3:17:BD:EC:BC:69:0B:83
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 01965A2764D5EC3FAB3D162C3A21EB533146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 21:00:53 +0000
Manifest this update: Mon 21 Apr 2025 21:00:53 +0000
Manifest next update: Tue 22 Apr 2025 21:00:53 +0000
Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: VZ/z/jqY2wf665fSp7Twz+KmPjgEr22pyLrd9W6Ub00=)
2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:64:d5:ec:3f:ab:3d:16:2c:3a:21:eb:53:31:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Apr 21 21:00:53 2025 GMT
Not After : Apr 22 21:00:53 2025 GMT
Subject: CN=9d3f9903c28434ad2bc3f6bca317bdecbc690b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:26:63:11:5c:00:32:31:70:bb:b3:3f:75:
37:40:96:eb:e0:7d:62:99:25:6c:92:69:da:be:2e:
ae:0d:1e:29:26:41:27:2f:18:6a:7b:fd:30:c1:73:
5d:ac:3f:3a:b4:b6:e5:8a:90:ec:cb:84:ff:c0:37:
22:c8:80:13:a2:8f:e9:76:1d:d8:64:51:cf:e0:7e:
d9:0d:ce:8b:33:51:ea:16:5f:92:e1:49:ce:dd:97:
24:ad:88:b5:d1:4a:46:df:d7:c0:3f:24:c6:56:4b:
88:1a:45:b5:d7:a1:6b:7d:4a:de:77:69:63:a5:8b:
0d:2a:6d:6d:85:d4:d9:f4:60:2b:40:df:f0:2e:f0:
cb:8d:27:5a:7d:41:fc:f3:9a:08:dc:38:b1:e3:93:
ed:eb:60:c2:75:a7:9c:99:36:b0:df:a7:06:38:3d:
81:88:7f:64:4e:e2:f1:c3:e0:9c:f9:1d:ec:10:10:
ad:65:fb:df:05:22:82:c2:24:a8:06:df:05:e6:08:
83:78:fd:99:d4:ca:84:78:62:03:a4:69:93:60:e0:
b0:74:08:41:5c:88:07:93:8e:70:43:f3:36:a0:1d:
e9:29:4b:05:15:24:6a:85:b5:54:ed:df:cd:10:4f:
7e:da:10:39:98:c2:2a:4f:49:d7:91:20:34:d8:82:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3F:99:03:C2:84:34:AD:2B:C3:F6:BC:A3:17:BD:EC:BC:69:0B:83
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d3:2f:63:49:78:50:22:90:c7:80:b3:8c:fb:48:8a:d6:6a:
34:eb:1c:fc:96:2e:84:98:b2:0f:7a:dc:1a:e9:d2:34:42:c0:
4f:3b:59:ef:74:35:72:cf:07:41:ce:24:bf:07:bf:80:53:5f:
46:22:50:ca:a3:c6:db:24:0f:5a:a1:04:36:e8:d8:36:71:b8:
33:3b:cb:60:9d:40:b4:d6:4e:a9:e7:e8:43:43:e9:94:4f:ac:
8e:61:2e:76:80:a1:34:7a:3c:af:ff:99:af:6d:3d:e3:d9:6f:
a0:f6:e7:48:eb:ca:af:63:98:20:17:60:f3:13:79:62:5b:9f:
92:36:13:1a:a8:51:6e:0b:10:4e:2c:01:1f:5e:a0:05:d8:47:
18:8c:51:db:a0:34:ae:3a:6c:00:26:c6:a3:9a:34:36:aa:71:
72:36:2a:3b:b7:aa:51:9b:1d:54:b5:06:28:fe:40:35:da:ce:
ff:43:68:27:3d:9a:60:fb:10:47:06:70:8e:5e:a5:4b:f9:e9:
72:75:09:9b:9e:d9:e9:aa:52:3c:d8:d9:90:d2:e3:87:6b:68:
da:88:81:92:b0:19:7f:d1:36:06:33:c9:88:bf:26:06:7b:fc:
69:6a:11:83:96:65:7b:2e:88:86:63:d1:bf:54:f4:59:46:68:
9d:e2:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:56:46 2025 by rpki-client