Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
File: gTpCg40uRe1drUEUYG2XKaZQHSM.mft (raw, json)
Hash identifier: CKFJCgCgMt2Lc4AjWAwME3sNgKQQccIy6hAGhRsPxkY=
Subject key identifier: 24:0A:29:28:C4:F8:09:1E:CF:98:B9:22:BF:F4:F1:76:C4:68:17:8E
Authority key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
Certificate issuer: /CN=813a42838d2e45ed5dad4114606d9729a6501d23
Certificate serial: 019748FA00AB90F23FF1459C221B55FF2FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
Manifest number: 0DDB
Signing time: Sat 07 Jun 2025 06:00:33 +0000
Manifest this update: Sat 07 Jun 2025 06:00:33 +0000
Manifest next update: Sun 08 Jun 2025 06:00:33 +0000
Files and hashes: 1: gTpCg40uRe1drUEUYG2XKaZQHSM.crl (hash: NuR7kdJHoYZZdhm2XelwUSRahN2SeJO1e5TEHMb2HSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:00:ab:90:f2:3f:f1:45:9c:22:1b:55:ff:2f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813a42838d2e45ed5dad4114606d9729a6501d23
Validity
Not Before: Jun 7 06:00:33 2025 GMT
Not After : Jun 8 06:00:33 2025 GMT
Subject: CN=240a2928c4f8091ecf98b922bff4f176c468178e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:49:87:82:4d:68:ac:82:f5:fb:82:3a:c7:
5b:9f:ff:2f:af:6a:e3:62:cd:e5:7e:b4:b4:bc:6b:
42:28:2c:e7:58:c0:4a:9c:5f:71:ff:a7:53:50:69:
f0:2e:35:c2:34:fd:9e:48:d6:70:72:a6:f6:a6:4c:
5c:aa:0a:16:ef:0b:39:f8:91:8b:c8:cb:f9:94:01:
0a:ce:3e:60:7a:ef:e6:ba:74:2b:5c:48:9e:a4:00:
1a:27:a8:ec:8e:5f:db:10:22:35:16:bf:31:bc:5c:
33:63:d0:27:dd:0d:f4:5e:ce:11:fb:8c:98:c3:8e:
17:df:d3:a4:88:b6:16:39:e4:aa:80:b5:3e:8b:2e:
b7:4c:a2:53:42:0a:0a:74:ac:f8:a1:44:de:1f:26:
d9:30:e0:2c:ca:46:0a:e2:9b:eb:60:d3:92:c8:f6:
6e:b4:14:2f:07:bf:8d:c1:f4:6b:9c:e1:73:76:54:
ac:9b:ab:4a:0b:60:be:98:e9:70:f3:d1:b5:24:0d:
de:45:3e:d9:00:79:a4:c7:63:cb:db:15:1e:b0:04:
17:43:53:2c:a4:eb:e4:d9:fd:70:3a:dd:85:e8:73:
5c:b6:b2:15:b7:b9:82:f8:44:f6:c0:98:3a:6b:60:
46:23:fc:0b:16:8a:01:f7:c5:f8:f2:e3:5f:82:15:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0A:29:28:C4:F8:09:1E:CF:98:B9:22:BF:F4:F1:76:C4:68:17:8E
X509v3 Authority Key Identifier:
keyid:81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:79:68:ae:d4:20:e4:ab:e9:8a:d4:f6:13:38:5e:e2:87:04:
a4:b2:58:aa:93:52:e2:60:77:71:cc:b1:db:e5:59:f7:a8:8a:
18:cd:1f:14:04:6e:6a:27:00:6f:df:96:c4:3a:5a:b9:21:ab:
ef:1c:a8:3d:ff:79:e0:8e:f4:d6:ea:f2:70:09:20:1e:a3:27:
c6:50:f1:3a:94:c7:9f:d6:33:b7:77:24:74:cc:33:c7:60:99:
32:3e:79:cc:5d:8b:a8:d2:28:c5:9e:ce:49:a5:a1:01:0c:d9:
54:40:a3:3c:4c:8f:bc:a7:0a:09:eb:47:48:88:7d:12:2e:a0:
36:7c:76:a7:42:c4:66:cf:d7:e4:7b:55:05:db:f4:41:e3:d3:
4a:8d:6a:2c:3d:e2:3f:77:dc:8a:dd:e3:83:68:43:86:b7:a7:
2f:ab:a2:21:c5:9d:14:32:98:57:ea:69:b1:fb:40:39:07:fd:
0b:9b:83:44:fa:06:f5:f4:3c:cd:12:65:01:8e:72:cb:ac:ed:
f8:a4:15:22:41:fc:54:1a:de:c5:73:5c:aa:50:cb:71:5b:b9:
c3:26:41:01:9c:af:ec:d1:1b:e9:8c:67:b1:5e:4b:b1:00:96:
86:f0:3b:87:91:bb:36:57:80:33:f6:cd:66:b1:22:3c:c1:c9:
51:3b:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:30 2025 by rpki-client