
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier: Aqtx5gcvYjywlk5IsE7p4mZDICY/uJfx57N+L7r8ry0=
Subject key identifier: FD:BD:09:0C:DE:C9:89:5D:7E:A3:90:8E:BE:B9:B0:EB:E1:01:BF:AC
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial: 019747E7C9C518874A75EFDED1F638223911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 01:01:02 +0000
Manifest this update: Sat 07 Jun 2025 01:01:02 +0000
Manifest next update: Sun 08 Jun 2025 01:01:02 +0000
Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: a5zBBaUF4PM5v/MVabNXaptZ7OV/W4NRZi9kHTJuCH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:c9:c5:18:87:4a:75:ef:de:d1:f6:38:22:39:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
Validity
Not Before: Jun 7 01:01:02 2025 GMT
Not After : Jun 8 01:01:02 2025 GMT
Subject: CN=fdbd090cdec9895d7ea3908ebeb9b0ebe101bfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:a0:49:9d:37:9d:03:df:1a:a7:52:c0:1c:
95:07:3a:ab:a1:92:4b:62:2d:87:f8:5d:1b:b5:5f:
4f:05:f8:3b:52:2c:f4:79:b5:1a:83:ad:82:8b:9e:
8b:76:fa:10:5c:70:3f:7f:64:f3:58:f3:f6:82:21:
0b:48:54:7e:23:be:b7:24:d7:23:c0:20:31:72:f2:
6f:f5:46:bd:68:c8:f1:a0:7b:2d:d2:f8:2c:58:db:
1d:86:57:b8:83:d4:68:e0:36:a2:1a:4b:b6:25:5c:
08:e0:43:51:91:6c:40:21:f9:ba:18:bb:69:c9:67:
81:7c:a2:2d:6d:f4:93:02:d7:1e:01:50:d4:c2:5b:
8e:e6:3f:21:7f:76:43:f2:d4:ec:df:e6:f6:00:2b:
ea:dd:9c:9c:de:0c:02:1a:b2:a4:3b:49:4f:e2:11:
1c:20:00:5c:90:73:13:06:1c:e3:25:c2:f1:c8:61:
bd:e4:35:e3:4e:d0:ac:ff:1a:dc:e2:06:4d:d7:db:
0c:85:a5:b8:5e:d8:19:38:12:fa:5a:4d:58:bf:0c:
c3:e9:3d:f2:80:7e:24:d4:1c:4a:62:72:af:9f:05:
6d:1c:81:cb:bc:b9:8d:0d:dc:b4:41:b2:9f:44:00:
35:55:6f:7c:23:47:dd:aa:00:bc:da:77:4d:60:4d:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:09:0C:DE:C9:89:5D:7E:A3:90:8E:BE:B9:B0:EB:E1:01:BF:AC
X509v3 Authority Key Identifier:
keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b2:ae:99:1e:29:e1:95:85:95:97:4f:89:ac:a6:a7:4c:87:
1e:3f:45:28:2f:05:3a:5d:8f:73:80:6a:a7:6b:53:40:a5:e7:
c9:16:78:3a:e5:7c:4d:ee:8a:08:98:a7:ca:cb:e4:88:94:b2:
65:63:c1:d5:cf:e9:51:96:6e:00:16:f6:60:b4:89:9a:d8:3b:
64:6a:51:89:ef:57:fb:6d:04:14:db:19:43:09:37:e9:2c:6a:
4c:c4:ab:35:1a:87:94:6d:29:3c:00:ce:e7:a8:4d:fe:bf:a1:
84:7d:14:5b:61:68:93:3c:a1:f3:ca:01:b8:cb:5f:47:2d:f3:
03:d1:7a:1f:e6:89:af:8c:6f:6e:86:19:62:9b:63:86:ac:f6:
9e:60:35:e8:1b:17:c9:1c:11:e6:76:cb:95:85:28:bd:c7:e8:
45:12:df:ed:fd:51:13:01:20:6d:62:35:16:9d:5f:ab:96:dd:
43:91:bf:58:50:eb:c4:36:ae:e8:5b:eb:5c:e3:0e:a4:6e:cc:
a5:73:17:4a:dc:e3:0f:4f:36:95:eb:ac:fa:24:f1:73:d0:c0:
ef:e4:28:9d:d9:4d:f7:fb:da:e6:c9:56:15:22:84:c9:1c:a3:
0a:93:54:73:ff:20:6e:c7:be:58:2b:a6:f1:06:34:e0:b4:63:
e1:e5:c4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:23 2025 by rpki-client