Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: SUk7c0Pf3E3KWVW21Y1sah/rbhXaOlfKM7FT8If89xM=
Subject key identifier: 8D:59:5D:B8:F9:56:10:66:0E:98:26:0C:AF:B3:25:D6:11:2D:D7:0F
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 019757C87016200593FC59117CC7BFE7BE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 1580
Signing time: Tue 10 Jun 2025 03:00:43 +0000
Manifest this update: Tue 10 Jun 2025 03:00:43 +0000
Manifest next update: Wed 11 Jun 2025 03:00:43 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: 93HcpxMpXjYplF1xPl6zSmJur7pvouMyVyIwJE3ciXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:70:16:20:05:93:fc:59:11:7c:c7:bf:e7:be:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Jun 10 03:00:43 2025 GMT
Not After : Jun 11 03:00:43 2025 GMT
Subject: CN=8d595db8f95610660e98260cafb325d6112dd70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:bc:8e:6d:81:9a:fd:2d:a8:ce:2f:a1:75:
c2:e9:94:43:ee:48:a0:41:fc:c3:d0:d9:a9:e7:58:
65:3a:34:6f:ff:91:84:2f:22:c7:98:5e:7d:0a:ec:
18:87:4c:5d:b2:74:bc:db:c2:1b:07:40:20:53:87:
94:f0:85:07:8a:21:77:55:b7:4e:91:8e:74:65:8c:
95:f1:41:a0:bf:bf:74:02:3a:c4:90:fb:21:f4:0d:
e7:5b:d8:9c:ba:7e:93:b7:94:d7:d2:07:28:03:f5:
de:86:e7:ea:ac:ee:b6:48:87:bd:da:4d:d5:cd:f0:
d5:12:8e:00:dd:d5:23:f9:59:6a:15:16:ae:c9:7f:
ef:1a:57:5e:6d:73:ce:27:45:15:1b:6a:ef:3c:00:
84:44:6a:fd:87:1a:3c:12:4c:b8:95:25:9f:05:46:
f7:23:6f:eb:0c:06:0a:5a:c8:83:37:6c:70:d8:ec:
bf:79:89:3d:cf:a9:e1:60:39:8c:18:ed:8e:7b:10:
33:22:ad:ad:fc:b5:e1:0b:99:11:aa:75:e6:48:44:
c7:63:84:c6:a5:47:c8:e4:8e:62:35:b5:fd:a1:85:
63:48:80:a0:ba:e1:33:e5:10:66:4e:f8:fa:a5:93:
fd:92:fb:6d:50:14:e2:97:b9:9b:6e:ca:5b:1c:81:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:5D:B8:F9:56:10:66:0E:98:26:0C:AF:B3:25:D6:11:2D:D7:0F
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e6:82:80:b6:0e:ea:87:0c:f4:bc:21:53:94:55:44:a3:38:
c5:4f:80:d7:a6:90:49:f7:99:f5:63:41:72:0b:02:9d:2a:3d:
9e:83:4a:e0:0a:ba:39:64:91:f7:05:78:f4:51:75:2c:71:74:
53:16:de:d4:cb:bb:f9:62:9f:1f:02:19:da:0c:10:b4:03:47:
8c:b1:99:8a:72:c8:70:b2:4d:83:dd:96:09:4f:6f:8b:46:02:
70:f5:6b:8d:3c:70:21:08:02:84:26:23:ff:c9:49:11:c2:29:
c6:90:e1:63:2e:aa:07:8c:80:f2:eb:13:dc:11:b1:74:37:85:
79:05:f9:88:4b:aa:31:ad:da:28:f9:22:d1:4a:ac:3d:06:53:
0f:6f:ab:16:d8:d5:d7:63:63:de:7f:5d:df:d5:5f:1f:60:57:
6b:d2:38:c4:e7:58:9d:20:b2:6c:9e:48:76:79:e5:ef:08:1c:
91:9b:48:33:1f:ff:06:c3:2e:d6:12:a7:3a:f6:94:dd:c8:6c:
56:36:8f:e7:9a:e2:4b:74:56:44:e3:3f:84:6e:ac:3c:76:ba:
10:44:b9:68:dc:e6:6f:fe:36:75:b2:44:a4:58:97:e8:4f:89:
2f:58:e8:43:83:c3:39:d9:0a:59:1b:39:43:8d:a3:14:1f:2a:
62:0f:42:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:49:21 2025 by rpki-client