Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier: 43Gyr80VGzHtFTjHFLy0YWKigxtaF+KaeUGWLdR3vd8=
Subject key identifier: 10:0A:EC:DF:88:3A:DF:15:62:33:A9:DE:A6:30:7F:37:94:B7:6D:70
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial: 01974AE916A40EC3EB73FA4214DB0E6E071D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number: 0864
Signing time: Sat 07 Jun 2025 15:01:18 +0000
Manifest this update: Sat 07 Jun 2025 15:01:18 +0000
Manifest next update: Sun 08 Jun 2025 15:01:18 +0000
Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: ueOlEfGNOIZABC8PBKp0jt3pb3h71GRig4GEGYrljOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:16:a4:0e:c3:eb:73:fa:42:14:db:0e:6e:07:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
Validity
Not Before: Jun 7 15:01:18 2025 GMT
Not After : Jun 8 15:01:18 2025 GMT
Subject: CN=100aecdf883adf156233a9dea6307f3794b76d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:f0:fb:15:82:cb:01:99:68:cc:bb:db:5c:
0c:59:6f:16:8a:e7:c7:d1:62:c3:f8:e8:b3:18:2d:
59:84:17:9a:91:07:85:17:ae:d5:e8:be:24:17:79:
e6:fa:b4:e5:ab:58:4b:06:64:55:b7:98:5f:2d:91:
2a:8f:0e:8e:2e:d1:30:da:dc:65:8d:3d:98:8e:e8:
61:98:21:b6:97:eb:46:60:4c:f9:08:5b:9f:55:c6:
d9:34:b9:c3:41:e8:a8:fd:1b:f8:3d:d6:24:78:0a:
37:93:46:2c:9e:47:e2:35:01:5e:b7:42:ae:97:02:
fe:9a:de:ad:b3:e3:a2:4f:ad:44:70:75:6f:ed:c8:
92:e6:f5:0b:6b:b1:94:16:53:5f:df:fa:b9:81:42:
8a:22:4a:90:30:3e:aa:5c:b9:34:6a:4b:d9:81:1b:
a4:43:6b:e1:7d:81:75:7c:ff:10:69:32:63:62:b2:
45:8c:52:d9:eb:61:85:72:c8:3a:e0:4f:79:eb:68:
47:6d:7d:e5:c8:97:b8:29:86:16:29:78:d4:d1:35:
26:c5:4e:cd:c5:9a:56:d4:67:2f:e1:dd:90:a9:29:
33:1c:95:08:af:ec:e2:9d:2d:80:fc:ca:a5:8b:f3:
62:98:a7:76:f9:ad:d1:fd:48:09:29:fb:35:e8:5f:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:EC:DF:88:3A:DF:15:62:33:A9:DE:A6:30:7F:37:94:B7:6D:70
X509v3 Authority Key Identifier:
keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:67:aa:9a:1e:b9:9a:4e:ba:1e:d6:31:02:3e:e1:f3:b1:09:
9f:ce:98:2f:db:71:0c:00:65:27:2c:ef:24:6a:9a:ea:ff:68:
9a:25:9b:bd:48:8f:a1:40:4d:46:39:8a:e9:2c:cc:7e:79:5b:
e9:d9:71:11:b3:bd:6c:9e:17:f1:cf:bf:aa:69:45:60:31:da:
cb:cd:27:cc:a3:50:b2:6e:86:c8:99:9d:c2:0a:ba:b8:49:f7:
2b:28:18:b1:29:a5:92:f5:88:a1:08:7c:18:a0:6b:aa:03:9d:
41:02:dd:4d:0d:4c:96:a6:6b:08:88:d9:92:d9:2b:dd:46:53:
92:32:db:72:fc:92:32:8a:97:e5:35:38:5f:f6:24:2f:9b:6b:
c6:b8:62:76:04:12:cd:ba:9c:2e:2e:81:8f:6b:1e:d2:cc:ae:
ac:37:85:79:8a:11:c5:c8:23:39:8d:a4:f7:59:db:3c:5a:36:
db:53:d3:ca:ce:bb:e4:c7:79:6a:f5:eb:78:11:d2:0c:43:ce:
d9:29:c8:58:43:9e:01:fb:1c:98:60:f9:c6:1a:fb:9d:58:60:
4b:e0:93:86:0e:30:4d:ea:14:0c:1a:03:26:7b:34:7c:b8:0a:
ea:eb:49:fe:6b:90:5b:0a:ac:68:2b:0f:b2:29:ba:31:36:5d:
1f:ed:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:24 2025 by rpki-client