Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier: NkUnHVt/+e4svfykMKMC4sQopuzuuN9AUl/8CwoWzO0=
Subject key identifier: F2:B3:03:80:7B:02:B3:7B:BB:33:17:11:66:C6:CE:C6:FD:E9:CB:A7
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 01974D7BC296CEB5E29582F057BC9B073F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 03:00:45 +0000
Manifest this update: Sun 08 Jun 2025 03:00:45 +0000
Manifest next update: Mon 09 Jun 2025 03:00:45 +0000
Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: EL2Ymg6KPXZjd4q9Lhv6TjeicRrxmnNHc4/eN/PlcDY=)
2: iYCONvh_-VwWy1qAcfbIbkJR5L0.roa (hash: Mqum/pcnON+fvDqDFxLCGm1Sd5nnM2fK5bauzDteg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:c2:96:ce:b5:e2:95:82:f0:57:bc:9b:07:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Jun 8 03:00:45 2025 GMT
Not After : Jun 9 03:00:45 2025 GMT
Subject: CN=f2b303807b02b37bbb33171166c6cec6fde9cba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:2d:d5:56:b9:2a:a6:15:56:cf:bf:15:58:
b6:ad:67:77:b0:aa:bb:38:32:82:06:5c:32:21:49:
ec:62:6a:74:93:5c:7f:f7:9a:45:17:27:6e:d9:a5:
e4:4f:e1:49:cd:71:08:c0:72:fc:43:80:51:28:56:
24:6b:7c:b3:06:87:20:e8:2b:94:82:18:23:04:ad:
a7:43:55:bd:68:31:c6:6f:85:ba:db:c5:db:b2:79:
5b:78:2a:74:10:64:77:60:1f:56:9d:b1:cb:80:23:
37:40:1d:f7:79:0f:19:c5:9c:dd:e7:5d:37:1f:08:
2d:4d:03:d3:fc:c8:ea:ef:e7:6f:1b:84:da:a8:2f:
33:a3:85:f5:e1:f0:35:55:6f:13:cd:75:f0:14:a4:
92:14:ff:03:b7:23:3b:71:f2:b8:e9:6a:3a:97:24:
cf:7a:14:e9:0e:6f:e9:64:38:c5:d2:b3:0f:42:d1:
40:25:2a:fe:0a:bf:62:34:51:0d:9e:c0:1f:fe:c6:
bf:b5:00:68:0e:6e:ef:2e:c2:56:f3:ef:78:40:ce:
ea:5a:5b:a7:93:52:d4:00:ca:b9:22:60:18:cd:3f:
a8:ed:92:0c:e6:ae:01:5b:56:5b:f8:49:0a:1a:ff:
97:14:ef:30:6c:4c:35:15:5a:b0:22:25:fb:42:38:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:03:80:7B:02:B3:7B:BB:33:17:11:66:C6:CE:C6:FD:E9:CB:A7
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8b:45:5b:72:eb:40:e6:37:43:59:32:a0:d6:7e:06:8b:11:
e8:82:54:d2:95:3c:d2:bb:29:b7:25:11:80:76:ab:84:ab:34:
9d:a7:f1:ad:30:c0:3a:cb:cf:b2:07:cf:60:06:cc:c9:5e:87:
56:37:31:28:a7:7d:32:52:58:bc:dc:b1:45:fa:21:d9:d1:b4:
da:66:df:1d:6f:8d:4d:2d:88:ba:bd:e0:9d:be:c7:be:c0:d9:
cd:b6:d8:d0:52:eb:1d:08:3f:2b:c1:e1:b2:e4:33:34:ea:38:
3a:21:ee:4a:9b:0e:0c:be:7d:5a:cb:7b:d6:43:b6:7a:04:04:
6a:2d:39:eb:54:5a:96:27:74:81:fa:d1:63:94:a5:59:5c:28:
62:30:53:46:bb:d3:f3:85:b2:e6:37:20:8e:f7:6e:a5:7a:15:
e9:4f:d3:69:25:72:db:3b:8a:b9:e2:05:cd:60:ba:3c:52:f6:
14:66:df:a5:ec:1d:ce:f0:5f:90:0b:3d:53:6a:de:c0:4d:c6:
99:e6:db:1a:ee:69:a5:23:cd:c5:34:5f:64:8b:56:ff:40:7e:
d5:4a:13:28:7f:3e:d4:05:73:e3:a1:4a:09:36:d1:72:a0:3d:
cc:45:b0:d5:56:65:af:4e:15:b2:90:f7:57:61:92:80:b3:c7:
bb:62:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:12 2025 by rpki-client