Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json)
Hash identifier: bRoKRMX3Rq06SPVJMt5GwtEHug/NAU+8wAPM2fHxldM=
Subject key identifier: B8:E0:FE:F1:93:E5:BA:A7:D6:D6:85:2A:8D:E2:7D:1D:49:25:2A:D0
Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Certificate serial: 01976102543B8B9DA23E6990337C8F3EED34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
Manifest number: 1010
Signing time: Wed 11 Jun 2025 22:00:31 +0000
Manifest this update: Wed 11 Jun 2025 22:00:31 +0000
Manifest next update: Thu 12 Jun 2025 22:00:31 +0000
Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: q7ay2ZWZohJpH183aYmrW05tYbqA4U79nKu9zthqilI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:54:3b:8b:9d:a2:3e:69:90:33:7c:8f:3e:ed:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Validity
Not Before: Jun 11 22:00:31 2025 GMT
Not After : Jun 12 22:00:31 2025 GMT
Subject: CN=b8e0fef193e5baa7d6d6852a8de27d1d49252ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:77:77:eb:e0:be:2f:0b:08:70:7a:f0:40:
f9:21:98:6e:04:73:f7:ca:22:57:49:72:3b:25:18:
14:51:d4:8d:56:a7:9f:14:4d:13:b0:7a:69:a3:7a:
9e:cc:98:65:38:9f:6c:72:10:4b:16:0a:ff:73:6a:
2b:03:c9:b7:df:16:5d:72:12:4e:50:f5:11:ac:c3:
d7:b2:8e:32:d7:de:ca:15:df:d0:d7:e9:35:47:1d:
4c:82:d2:f8:e3:78:89:0f:67:04:32:b3:23:d0:91:
bf:9e:be:55:7d:e4:48:b5:8c:d2:f8:a7:78:1a:97:
ed:ff:5c:58:60:73:ee:59:d8:7a:33:fd:44:1d:67:
14:27:ba:11:07:9b:9b:43:ae:76:2c:e8:54:80:08:
11:c5:76:db:8a:ce:29:b5:82:dc:df:9c:6b:e5:dd:
cd:8e:6c:6c:fa:75:16:73:b8:36:61:5c:f1:38:c5:
13:08:52:56:31:d5:6f:ea:ed:39:c0:b3:ac:29:79:
40:30:8f:87:19:55:27:25:18:6d:f3:64:53:5a:7c:
4c:ca:0e:3c:32:48:41:f4:d9:ff:e8:ce:ed:c1:db:
12:52:08:53:56:30:6b:81:42:ee:ac:cc:42:d4:63:
d4:29:95:ed:5d:ea:04:e5:13:8d:4b:07:db:31:72:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:FE:F1:93:E5:BA:A7:D6:D6:85:2A:8D:E2:7D:1D:49:25:2A:D0
X509v3 Authority Key Identifier:
keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:10:75:b9:fd:f5:0b:3f:78:b1:1e:74:89:71:b2:c1:11:23:
d2:f1:1d:94:b4:e2:7c:87:57:e7:f7:a0:4a:6d:c7:9b:14:b6:
b0:d0:48:eb:f3:c6:3e:d0:75:2c:b2:f5:09:a3:2c:32:b2:e9:
a7:f3:3e:59:6b:cf:e2:b0:6e:17:d5:f3:87:1b:c8:d7:0a:97:
86:2e:06:e5:1a:f9:30:c0:63:50:dd:8d:04:0c:d5:b8:0b:f8:
b9:cf:67:0b:a5:59:48:42:22:c3:f7:04:eb:38:07:90:9c:47:
4a:16:2e:80:cd:aa:d7:5a:cf:11:50:37:44:cf:27:7b:e4:73:
c8:bd:6e:15:11:03:dc:81:a4:b7:6f:4f:10:c4:10:55:0d:d2:
c6:cf:3c:71:ed:8c:95:2b:62:fc:29:4e:6f:31:2f:88:9b:e0:
9d:57:1b:05:db:9c:7f:bd:94:d3:dd:81:45:be:93:86:e4:64:
31:3f:28:64:ee:16:e9:c0:c0:8f:0a:20:1a:37:b0:76:7c:79:
6a:95:27:c4:1f:1e:3c:61:04:9c:34:a2:75:29:80:7e:cc:ed:
6d:43:91:1b:a4:63:c9:67:33:77:cf:0e:97:32:6f:79:2a:c5:
88:06:8b:14:57:d3:ad:e3:d8:b1:a0:ec:6e:ba:87:f1:b4:b2:
42:64:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:18:06 2025 by rpki-client