
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier: 38d+JwCQUyfk5EF5uQPUVjpMKGTiRGJGOmsfj7yp1V4=
Subject key identifier: 72:BB:57:EF:69:58:D2:B1:FA:E1:3D:3B:2E:4B:76:87:C8:F3:00:5C
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial: 019749313B7CCE1E08441489B7CC1BD9679E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number: 12BB
Signing time: Sat 07 Jun 2025 07:00:52 +0000
Manifest this update: Sat 07 Jun 2025 07:00:52 +0000
Manifest next update: Sun 08 Jun 2025 07:00:52 +0000
Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: zhAzpy6hjXcKexBgygGlOCp8raqR9rHvJJ9aPTnxE2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3b:7c:ce:1e:08:44:14:89:b7:cc:1b:d9:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Validity
Not Before: Jun 7 07:00:52 2025 GMT
Not After : Jun 8 07:00:52 2025 GMT
Subject: CN=72bb57ef6958d2b1fae13d3b2e4b7687c8f3005c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:5c:24:0a:ef:df:9d:dd:86:90:47:6c:6f:
59:48:60:de:66:e2:a6:d7:b9:5e:ff:44:51:7a:da:
f1:be:6d:e2:a4:cd:e4:8e:9a:59:c9:84:79:1e:25:
34:d7:cf:73:eb:0e:bb:4c:4e:24:69:ca:34:05:e0:
3b:16:87:c8:fe:d7:d6:22:0e:c8:0c:ba:bf:10:60:
62:9a:23:e3:25:b5:e7:82:b7:12:17:46:e5:fd:f5:
1f:86:bc:ac:ed:1e:2b:73:62:8c:c7:d5:43:32:42:
07:08:9c:35:83:7d:1f:c0:ec:39:85:d3:08:c4:ae:
50:30:1a:c2:fe:00:24:b8:8b:d0:03:e1:fc:9f:eb:
12:d9:0f:d9:a1:66:0f:04:98:3f:d3:41:a7:87:c5:
58:9e:6f:77:10:c6:d8:fe:a6:08:af:ed:30:74:a3:
e6:fa:cd:29:ca:35:19:b6:af:1a:96:a6:50:0a:88:
81:83:48:54:24:12:5b:34:b1:63:df:2b:02:1c:80:
10:ca:e2:a8:35:ab:d2:5a:bd:61:31:97:41:95:d5:
b5:0b:a4:bf:f2:dc:f2:0a:e5:7e:86:77:dc:b3:aa:
80:8d:65:31:76:9f:21:30:e2:6f:37:ce:5c:a8:ba:
51:1b:d3:9a:6c:96:10:42:f6:49:23:27:98:a3:df:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BB:57:EF:69:58:D2:B1:FA:E1:3D:3B:2E:4B:76:87:C8:F3:00:5C
X509v3 Authority Key Identifier:
keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:28:71:d6:44:ab:c8:d8:db:90:63:43:2c:82:e9:ea:48:29:
45:a6:25:89:fa:fb:8d:8a:c0:68:3b:77:2f:d9:60:00:0a:c7:
d7:fa:02:f6:36:59:e7:23:69:5a:3b:51:9c:c7:3f:df:3e:fe:
89:9b:2e:aa:fa:36:95:3e:e4:cf:17:28:4b:f5:ae:ac:30:f0:
bd:56:9c:a3:46:f6:e0:b6:0f:f3:fd:86:a1:cb:b2:3f:52:52:
04:9f:97:e0:23:c1:45:c2:74:7f:34:d7:f3:36:dc:bf:14:41:
4b:b0:0a:c0:9b:16:40:76:bf:5f:9d:f8:7f:db:ce:42:6b:3c:
62:60:a7:b0:61:94:38:d7:f2:5e:dc:7b:ba:e5:3f:c2:12:dd:
35:c8:fa:27:d9:e0:84:34:15:54:06:bc:a1:d8:6b:31:56:7f:
36:53:c1:57:9e:23:8d:9a:e1:3b:bb:a0:0b:f2:4a:7b:d9:d9:
68:6d:b5:b9:03:e5:7c:08:f2:a4:22:d6:7a:f5:ba:8f:0b:6c:
8b:cc:9a:f5:f2:8e:4a:95:fe:36:96:a1:0b:70:2e:02:31:50:
8a:91:34:3e:b2:7b:81:a4:d5:82:ec:ea:6c:31:95:0e:1b:0e:
87:fd:10:31:56:da:da:32:61:54:0d:2d:24:17:b9:63:02:16:
58:87:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:58:42 2025 by rpki-client