Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: Zsd445IH2BbmD1lpuEPVS6mDHaj527L76hddWQU9ShM=
Subject key identifier: D3:39:DC:CF:C3:D2:65:66:C7:C3:10:7A:9B:47:50:BD:2F:FE:A1:6B
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 019745C280A6270E60BA4439C5B8CB05E5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 03CB
Signing time: Fri 06 Jun 2025 15:01:03 +0000
Manifest this update: Fri 06 Jun 2025 15:01:03 +0000
Manifest next update: Sat 07 Jun 2025 15:01:03 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: XAbZJTaxBNUVedZOrt6QrYAlgFB5OnezmlFc4NyZ6vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:80:a6:27:0e:60:ba:44:39:c5:b8:cb:05:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Jun 6 15:01:03 2025 GMT
Not After : Jun 7 15:01:03 2025 GMT
Subject: CN=d339dccfc3d26566c7c3107a9b4750bd2ffea16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:e5:c7:c5:b0:65:f7:08:49:8a:a9:8b:47:
9e:f6:3b:13:aa:17:d5:25:ae:c4:4e:ee:2c:78:9e:
d7:f5:c2:8f:a2:9e:69:b6:58:aa:7b:26:93:32:97:
9f:66:f9:ff:1f:0f:fb:4e:59:23:17:67:7f:0c:b8:
25:2c:8f:7e:e0:bd:34:87:a0:0b:e2:0b:65:f8:c6:
5b:28:b8:06:4c:38:cc:3b:75:d7:4c:87:9e:95:13:
40:b6:0b:75:ef:4e:44:50:d9:ed:7e:62:ea:0b:80:
1c:6e:18:9d:b2:e9:14:9b:8c:51:36:64:54:b5:cb:
8d:8c:e3:e9:08:7a:b7:8c:ee:7f:4d:43:5a:5f:42:
cb:ae:55:d2:66:e6:22:19:ea:ea:41:23:05:20:6f:
d9:81:2c:6a:c7:38:f6:95:78:5a:1a:4c:6c:83:73:
d8:16:f8:c6:0c:9e:6f:86:7e:26:fc:c9:14:ac:f0:
67:e4:40:41:e8:a6:84:36:87:9c:1b:53:ce:60:e8:
33:37:0c:af:ba:66:cb:bc:37:28:e2:fe:6e:2f:87:
bc:45:92:8e:c6:e2:4a:34:a6:16:f2:1a:c3:ba:f6:
2f:96:d4:b7:2a:66:1a:4b:6f:39:4f:40:9c:a8:6f:
4f:7c:e9:f7:17:96:08:da:62:a6:6e:61:b1:05:58:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:39:DC:CF:C3:D2:65:66:C7:C3:10:7A:9B:47:50:BD:2F:FE:A1:6B
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ad:c8:2b:19:67:95:43:fa:44:31:61:f5:44:bd:7d:9b:c1:
2d:c1:18:b6:c1:73:1c:f9:9c:aa:ae:e4:78:18:5b:2f:be:56:
36:ce:50:21:b9:2b:85:24:a8:e8:9f:30:15:cb:54:4c:01:6f:
a6:2b:62:d1:5b:87:ac:35:41:07:80:71:93:05:e2:c5:88:f3:
ad:ca:aa:50:8b:ef:ca:63:bf:32:11:08:ec:9f:b1:a4:2e:dd:
67:5f:b5:b9:3a:b9:96:b5:80:2a:f4:14:97:a6:90:48:5f:fd:
60:c7:f6:10:67:ce:ca:7a:62:63:ec:49:47:d2:a4:ab:ff:55:
ac:35:6e:42:b0:93:61:d8:83:b1:60:b9:88:c9:2f:57:5e:db:
2a:51:72:1f:78:16:f3:32:d9:63:af:0a:5e:c9:42:b3:4c:31:
d5:33:66:7d:52:48:93:d4:90:c0:3f:94:6b:4b:0c:a2:62:f8:
d8:72:ec:b9:df:9e:6f:13:b2:2c:b0:40:34:b2:8d:67:5c:4c:
22:8a:e1:0a:c1:73:c7:21:9b:ef:3e:11:96:61:ab:27:7f:1b:
0f:b5:78:95:fc:8e:f4:a9:1a:36:39:45:86:59:b7:5b:7c:67:
94:72:22:8a:8f:65:35:78:9f:1a:7b:d1:6f:3f:3c:45:68:6e:
42:ee:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:59 2025 by rpki-client