Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: RQlzgULrkLauZkwRFkaFBzwZ/lCCDJXb+jFPD+/Q5Ac=
Subject key identifier: D2:14:2D:6A:E8:BF:CC:F3:DA:AC:96:95:9B:38:CC:C8:7F:8B:35:65
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 019748F9EAC5960F868EA70E4F4BFB43194F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 01E2
Signing time: Sat 07 Jun 2025 06:00:27 +0000
Manifest this update: Sat 07 Jun 2025 06:00:27 +0000
Manifest next update: Sun 08 Jun 2025 06:00:27 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: 7iTawM5kNXp49E2P7iPWfQFNm+/Bmj3aSAclGkIpUC4=)
2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:ea:c5:96:0f:86:8e:a7:0e:4f:4b:fb:43:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Jun 7 06:00:27 2025 GMT
Not After : Jun 8 06:00:27 2025 GMT
Subject: CN=d2142d6ae8bfccf3daac96959b38ccc87f8b3565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:a8:5f:ae:c1:db:da:00:da:ee:4b:57:2e:
64:5b:fd:2d:ed:0b:74:e7:e5:87:83:5c:65:4a:66:
a7:ed:0d:8e:33:3c:64:d8:3d:55:1e:68:a4:e8:32:
b2:8e:c4:ed:4f:07:12:17:f3:0c:b7:52:f2:87:ae:
e4:3d:1f:ad:a3:c5:41:69:01:13:1a:a0:e9:88:8f:
d0:f4:aa:35:13:00:e2:7d:3d:c5:66:a8:fd:92:38:
a2:18:37:4e:45:b2:45:2c:6b:0b:52:a1:3e:6f:76:
61:79:5e:d2:d3:76:56:3e:a4:d0:4a:89:5e:a8:23:
73:a5:d8:8e:e5:69:c6:e9:65:31:17:d7:66:8f:8d:
2d:5b:0f:b5:1d:d5:34:c2:50:24:be:67:28:a4:64:
c3:f6:b9:43:ab:98:c0:51:15:21:4d:a3:cc:89:a4:
84:19:31:6e:ab:6f:5d:f6:d9:5c:9a:0e:1c:0a:1e:
44:4d:25:5d:f2:c9:a2:a0:7f:cf:d5:fa:78:22:b2:
e3:33:07:a8:a1:4a:3a:25:70:3b:00:8b:61:5f:e8:
ec:eb:7d:23:c7:d2:52:8c:85:41:7e:c1:f6:67:e9:
c3:b1:76:5d:cd:58:32:58:5c:c1:5b:da:81:d1:28:
2b:09:88:3a:3a:12:03:18:f8:1c:74:1c:8b:92:3d:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:14:2D:6A:E8:BF:CC:F3:DA:AC:96:95:9B:38:CC:C8:7F:8B:35:65
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:23:bb:10:9f:5f:8e:08:5a:96:d7:78:9b:3b:46:59:88:92:
14:1b:74:23:1f:33:6f:a9:0e:6c:35:17:df:38:e3:ec:94:14:
38:3d:42:c2:df:24:48:e8:38:0a:3c:1b:53:37:77:ca:55:6a:
b3:41:fc:87:b3:da:e0:cf:dc:31:f2:65:0a:a1:d3:2b:03:f3:
cb:cd:b9:1b:c7:b9:11:ca:23:b7:be:2a:b2:84:3a:74:d6:13:
88:06:5d:18:d4:03:41:3f:f1:16:3f:f6:8a:58:10:d1:90:27:
09:c7:23:c2:a1:e7:0f:fe:f3:d4:80:49:13:21:96:99:fe:a2:
bc:7b:51:e8:30:eb:c4:bc:40:84:1f:cf:c3:ee:4c:b5:75:d3:
a4:b0:1e:c2:60:c8:25:6b:5d:b9:f7:86:42:2b:b9:6b:59:15:
4a:d5:86:0c:4f:92:49:b1:bb:54:1d:bf:c2:aa:03:1c:ec:e8:
75:45:cb:83:f5:c8:35:a5:d8:04:48:c1:8a:8d:a0:ff:c1:8e:
bd:34:46:69:6c:17:41:1c:ca:a4:83:c0:be:55:35:e6:6a:7b:
9d:19:3a:4a:61:e1:45:e3:3c:72:6a:e7:d8:9e:da:54:ec:30:
2b:19:43:0d:ed:ba:16:14:82:2b:f9:80:a5:ad:c0:b4:e9:37:
2a:fa:bf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:27 2025 by rpki-client