Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
File: gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft (raw, json)
Hash identifier: mbPF5lLtm2kr+jG7yUtmkmI74rNDhOL36yJRwoSc9lM=
Subject key identifier: 91:F3:E5:14:53:E4:17:30:20:84:04:F2:AB:2A:47:38:2E:FD:9D:A3
Authority key identifier: 81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
Certificate issuer: /CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Certificate serial: 0197493178A6ABF84920098E7E3F158A13B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
Manifest number: 03C3
Signing time: Sat 07 Jun 2025 07:01:08 +0000
Manifest this update: Sat 07 Jun 2025 07:01:08 +0000
Manifest next update: Sun 08 Jun 2025 07:01:08 +0000
Files and hashes: 1: gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl (hash: Mw/wKX8H/GJjXpCwQvs40kygZIyXFOw/gY9IO2ic19k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:78:a6:ab:f8:49:20:09:8e:7e:3f:15:8a:13:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Validity
Not Before: Jun 7 07:01:08 2025 GMT
Not After : Jun 8 07:01:08 2025 GMT
Subject: CN=91f3e51453e41730208404f2ab2a47382efd9da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:59:8d:8b:f6:30:5b:92:7f:80:a6:b7:15:
83:ec:8c:6c:1a:ca:44:80:19:6b:8b:8a:e0:3b:4e:
ad:69:a1:b6:12:da:be:52:6d:a4:54:9e:4d:16:ce:
7a:e2:3b:3a:13:df:ee:49:e7:2a:08:65:98:78:1e:
71:67:f1:b5:3d:03:37:02:c6:97:78:53:55:d8:aa:
eb:2b:86:f5:57:a6:7f:db:0f:ca:a2:c9:78:d4:94:
e6:5b:85:73:26:80:a1:31:2c:fd:c5:15:f4:78:0c:
8d:b7:da:f4:dc:e9:b1:8a:51:fc:e4:f6:42:cb:7a:
c8:02:29:31:05:7d:b1:3d:f8:b4:88:13:de:c9:a9:
1a:40:e7:4d:fe:ab:3e:7d:43:13:13:31:be:37:a3:
01:aa:84:47:24:87:ea:52:c8:a6:c2:8b:cc:be:e3:
14:81:24:8d:68:08:89:fc:c0:e5:cc:5e:55:31:16:
a5:7a:21:69:55:1a:33:60:1d:81:f4:ef:b8:e2:6a:
05:9e:8a:6d:38:1c:6d:0f:3a:9a:55:51:6b:88:9e:
05:ed:90:05:31:dc:93:af:9f:7d:dc:b6:9d:23:42:
15:9e:f5:a3:38:79:90:c5:74:6c:3f:8a:ce:5d:c6:
ce:ef:58:36:00:15:22:76:96:74:81:8e:39:a6:a9:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:E5:14:53:E4:17:30:20:84:04:F2:AB:2A:47:38:2E:FD:9D:A3
X509v3 Authority Key Identifier:
keyid:81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:33:aa:5b:6f:6b:22:78:0e:90:c1:4c:bb:11:7f:91:18:b9:
25:19:21:0b:fa:b6:ca:5c:81:19:e2:a4:37:e2:ee:87:c5:66:
8e:e1:26:66:1e:4e:a1:38:fe:ea:c7:26:14:a7:c0:3f:94:a4:
79:61:44:ad:15:b1:aa:64:35:9e:70:94:b2:0c:65:bf:09:41:
74:d5:6f:d0:6c:d6:bd:74:b0:66:bd:c8:00:91:32:ec:a0:1d:
21:eb:3c:bd:d2:78:2b:62:0d:01:b4:f0:46:ce:84:96:cf:55:
2f:2f:05:20:b8:a8:a6:94:da:65:b8:1d:f3:19:fa:b1:06:58:
26:dd:52:6e:8f:15:33:d2:a4:d8:e9:99:23:5d:b8:32:b5:e1:
eb:0f:af:99:9f:84:e3:36:3d:6c:d2:98:56:d1:5c:56:37:09:
02:38:e4:9a:59:9f:ed:39:c4:e5:35:91:06:48:c6:87:7c:b3:
02:38:7d:9a:ab:42:6e:89:38:d6:34:ff:ae:a3:10:96:a6:5a:
92:bd:cf:b2:16:f3:75:be:cc:9f:27:4f:82:cf:7d:06:76:7c:
19:7b:5b:bd:86:75:41:4d:ab:4c:f9:8b:e4:73:d7:b1:b7:e8:
a0:1b:11:b0:d8:7f:1d:b2:0a:9f:7c:62:64:19:b4:8c:a3:91:
f1:d5:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:08 2025 by rpki-client