Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: AtH+G4USW8PwZuzLYk3Mcq3itty1AeQsn5vDHBrSPWs=
Subject key identifier: 6F:B6:41:43:74:3D:DE:FB:59:AC:F5:56:26:F3:CF:E6:62:C4:2F:CA
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 0196545C199E7DFE9231F3954B7977232924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 034E
Signing time: Sun 20 Apr 2025 18:00:43 +0000
Manifest this update: Sun 20 Apr 2025 18:00:43 +0000
Manifest next update: Mon 21 Apr 2025 18:00:43 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: duPTk/wPJkEWZmTu0EKLuosRqvZe64V9QzLHPqvnMDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:19:9e:7d:fe:92:31:f3:95:4b:79:77:23:29:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Apr 20 18:00:43 2025 GMT
Not After : Apr 21 18:00:43 2025 GMT
Subject: CN=6fb64143743ddefb59acf55626f3cfe662c42fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:8c:31:be:45:f3:82:66:75:3d:36:b6:a0:
44:02:6d:cf:fb:03:81:49:5e:27:5f:4f:07:bc:44:
61:a8:d2:d7:1b:6c:ab:42:24:44:13:47:95:eb:ca:
58:23:c7:cc:29:9d:8f:bb:7f:c5:b5:09:58:cd:55:
83:3c:fb:14:9a:c7:3f:51:0c:96:53:fa:a3:3d:62:
f6:f9:dc:c5:81:6c:67:72:28:e2:74:99:fa:ff:bb:
cb:c3:c4:f4:ff:14:69:35:0f:e7:17:7c:96:a0:ff:
e7:15:b8:87:aa:9d:53:6d:e7:fd:93:17:fd:c3:31:
43:d2:d5:d9:51:34:d1:35:d2:77:4b:95:32:91:9c:
85:a0:e2:69:38:fb:8d:9f:f2:94:19:13:24:b5:c0:
a5:7d:ea:9f:bd:cf:d5:3c:df:c9:34:40:26:af:e1:
fc:8b:6f:5f:73:2c:73:fd:48:36:95:51:65:ef:c9:
30:73:e3:0f:78:d2:81:c8:6b:7e:2b:fb:ff:70:67:
01:fb:98:86:46:95:0d:4a:d1:5c:43:8a:87:a6:c8:
14:dc:a1:5b:b6:d8:fc:96:9d:ee:24:dd:c4:71:d3:
be:ba:6c:53:2a:4f:2d:b5:88:e3:80:8d:0c:ec:0a:
68:e9:50:8b:c5:a7:6f:12:4c:c4:de:78:33:6c:73:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:41:43:74:3D:DE:FB:59:AC:F5:56:26:F3:CF:E6:62:C4:2F:CA
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5d:60:c7:63:f6:27:45:dd:bd:51:17:18:3a:e9:89:19:af:
2f:7c:95:cb:96:6c:73:7a:d9:f1:04:c4:04:e1:6c:82:ed:f1:
ac:48:b8:fb:5d:0d:28:91:ae:6a:51:d3:14:81:68:63:7e:23:
62:df:6d:97:61:f7:b3:eb:49:3a:62:b6:41:f9:9f:e4:47:f5:
e4:16:77:9f:ec:cd:0d:57:6e:b2:c3:9c:75:a1:c5:4d:09:03:
23:ed:9e:16:eb:aa:10:6f:71:9b:8b:3c:d4:a2:da:cd:9e:aa:
9a:3f:78:ed:6d:24:d2:08:65:cd:d1:47:d8:6a:9b:fb:eb:5a:
0a:30:4a:0e:9a:c3:fc:7a:16:7c:dc:13:9f:94:31:f6:0f:b6:
1e:d9:05:aa:67:50:de:7a:7f:09:de:65:46:33:52:e1:b1:7f:
6f:73:0d:50:2d:66:65:72:00:2a:a7:cf:36:e4:56:22:b4:79:
15:82:12:b8:54:81:87:e9:5f:0d:6a:db:24:23:87:91:a6:a5:
be:c0:7d:32:d7:d9:6c:2f:e3:6e:44:d7:44:3a:73:d4:1a:75:
b2:09:a3:de:b6:35:3a:cf:82:9a:e1:df:8b:83:b6:74:79:93:
2b:7f:48:b5:69:53:58:5d:ea:ad:8b:ea:07:4d:51:5e:08:d4:
9b:ca:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:47:55 2025 by rpki-client