Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
File: GqwOVjNDfnAN-YWImWKGzydis5c.mft (raw, json)
Hash identifier: E2pV12oy7ZuXWOLfJUjnseJXgJR3JlGC63wnjNyHuB0=
Subject key identifier: F6:B3:7A:1C:CE:DA:01:36:84:08:DB:84:CA:6C:B2:D2:DD:9F:DA:BD
Authority key identifier: 1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97
Certificate issuer: /CN=1aac0e5633437e700df98588996286cf2762b397
Certificate serial: 01974A436C5C7DE33B5D16F71E739682FE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
Manifest number: 31
Signing time: Sat 07 Jun 2025 12:00:21 +0000
Manifest this update: Sat 07 Jun 2025 12:00:21 +0000
Manifest next update: Sun 08 Jun 2025 12:00:21 +0000
Files and hashes: 1: GqwOVjNDfnAN-YWImWKGzydis5c.crl (hash: e3fDcXUzJRK1NjgDSP6aNFePnmtMqe7OQLTnwNTAV4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6c:5c:7d:e3:3b:5d:16:f7:1e:73:96:82:fe:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac0e5633437e700df98588996286cf2762b397
Validity
Not Before: Jun 7 12:00:21 2025 GMT
Not After : Jun 8 12:00:21 2025 GMT
Subject: CN=f6b37a1cceda01368408db84ca6cb2d2dd9fdabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:3d:85:d7:10:48:be:a0:c0:73:4c:0a:dc:
b8:79:15:0c:82:90:73:b0:fe:e0:0d:e1:96:7c:de:
8e:ab:77:86:67:c6:6c:d5:86:b8:d5:6b:22:54:78:
64:90:b9:ec:ab:4a:d8:93:b8:b9:8a:c0:a1:61:f7:
fe:f7:88:4f:55:05:6a:96:ba:f8:6f:88:50:07:cb:
e5:ae:8b:f1:6e:b4:dc:bc:4e:ef:dc:cc:6d:a5:dc:
eb:40:01:cf:25:45:f4:02:f7:f0:69:ec:37:f9:90:
46:b3:d6:ef:57:38:8a:bd:b6:7d:90:56:ea:24:22:
e5:95:76:7b:85:57:30:5c:7e:4d:ff:29:8d:e0:16:
64:96:71:72:4e:32:50:68:62:06:18:2c:82:c0:e6:
07:2a:37:0b:4f:31:c3:f2:88:0b:f9:ff:60:82:1c:
e1:c1:32:07:58:ea:9c:93:eb:e2:cf:1d:43:cd:0a:
fe:c5:2f:46:96:dd:d7:ef:a6:5b:bd:62:d7:89:dc:
4d:0e:a5:77:c9:2a:e9:b0:ba:4b:20:6b:cb:0c:92:
10:34:e6:b7:05:1a:03:66:c5:24:45:cd:fc:89:44:
99:6a:1e:8d:27:34:cc:67:4b:42:4a:89:a2:ef:ca:
4b:72:60:5c:54:44:30:34:2a:32:10:d5:88:23:42:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B3:7A:1C:CE:DA:01:36:84:08:DB:84:CA:6C:B2:D2:DD:9F:DA:BD
X509v3 Authority Key Identifier:
keyid:1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b8:39:31:90:87:13:b6:18:e3:c1:25:09:4f:99:68:fa:dd:
08:0f:b5:18:d9:39:51:cb:50:97:f4:5a:08:0a:1a:06:2d:ea:
14:d3:55:f8:50:09:b2:2d:80:bc:ea:d6:57:61:97:bf:f3:63:
9e:43:f8:e8:31:e9:95:10:bd:91:4e:a2:4a:fe:30:91:11:42:
c7:6c:ca:34:c7:7c:16:09:49:64:19:6b:2e:f7:ff:97:da:c6:
42:ee:56:1d:fd:c7:d0:ed:58:c0:b7:1e:6f:79:bc:dc:da:d2:
cf:ec:45:18:dc:31:2d:e7:cc:0d:14:a4:a1:36:d0:8c:d0:36:
22:b9:74:af:ca:b2:93:ad:99:4d:29:50:b3:13:17:05:0e:43:
b4:68:71:24:43:3a:7a:10:27:bd:29:19:8d:bb:70:78:a5:66:
61:cb:a5:8c:cf:68:23:e4:5b:4d:cd:6a:8a:62:3f:b1:6a:21:
38:bd:31:12:a5:a5:44:6f:88:ab:77:c8:4c:66:cd:05:ac:ee:
1c:22:05:36:e1:02:28:f0:d0:ff:00:ef:4d:c9:3d:4d:d4:1c:
81:c6:17:65:4f:32:27:95:96:15:4a:bb:7a:c2:01:e1:e3:df:
4a:c3:d3:b6:c2:f3:c0:a1:9d:99:73:a6:ee:f9:c9:c0:28:c9:
e0:11:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:24 2025 by rpki-client