Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: xOKqx4tH63zB1QQBrZy/G9ULZdwptMNbRaqTzoliNWU=
Subject key identifier: E8:AD:EF:4A:C8:43:FA:7D:C4:14:E2:FB:14:1F:F8:63:A2:73:D7:AB
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 01974B8D97C28EE7D90FF51F001C7401052F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 89
Signing time: Sat 07 Jun 2025 18:00:59 +0000
Manifest this update: Sat 07 Jun 2025 18:00:59 +0000
Manifest next update: Sun 08 Jun 2025 18:00:59 +0000
Files and hashes: 1: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: 04NgZQ1HBmvIm67TleP8l166+YC69/sLMLyaXl2u1sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:97:c2:8e:e7:d9:0f:f5:1f:00:1c:74:01:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Jun 7 18:00:59 2025 GMT
Not After : Jun 8 18:00:59 2025 GMT
Subject: CN=e8adef4ac843fa7dc414e2fb141ff863a273d7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:5d:c4:a3:d0:1e:21:24:8d:1e:86:9b:2f:
f6:be:40:7c:b1:2a:ac:46:c5:1b:17:f5:69:62:2f:
32:79:40:d4:41:58:e8:2e:a0:fa:4a:b6:51:37:af:
1e:b9:7e:22:a6:0f:c2:f5:89:4f:16:d3:43:f4:93:
b2:69:d6:78:f8:84:e5:32:98:d7:96:bb:ec:97:21:
9a:88:d8:59:81:36:1d:8a:94:76:2d:62:26:de:41:
1b:13:e0:36:e0:33:02:99:c9:ac:cc:4f:1b:23:e5:
83:3c:14:fa:c4:ea:9b:9e:94:44:3e:1b:b6:4c:62:
9a:91:43:86:19:40:a7:67:99:5a:df:2e:b7:23:90:
cd:19:87:ed:8e:51:c1:cd:ff:b5:40:73:a1:71:3a:
fe:ee:6b:22:98:6e:93:76:01:c4:73:12:0a:a9:54:
d2:c4:2f:c6:f3:a2:9b:da:29:d6:16:c1:2b:05:89:
e7:94:25:57:6d:1b:25:2a:36:d4:eb:cd:d6:10:7c:
72:06:7d:d9:05:7e:4f:5a:3d:64:a6:90:53:b3:3c:
e5:24:42:d2:c1:e3:3a:ba:c2:74:a1:3d:a9:d0:ff:
25:ad:a2:6f:20:ba:d1:91:b5:a4:6d:59:e6:91:0f:
c8:e9:d7:56:97:a9:24:27:d1:7f:2d:73:fc:d8:e1:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:EF:4A:C8:43:FA:7D:C4:14:E2:FB:14:1F:F8:63:A2:73:D7:AB
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1a:ca:85:4b:b0:5c:de:e1:8a:67:85:fd:5f:13:af:bb:91:
af:84:36:6e:31:d0:ac:64:cc:b5:85:cd:34:f3:3b:42:42:2e:
6a:7f:92:23:2e:01:53:fb:e0:07:c6:1b:84:aa:00:f9:51:04:
21:44:08:c0:8c:19:39:0d:74:84:91:e6:62:f3:6e:76:15:cb:
1e:e3:e5:5a:4b:0c:70:c2:19:bf:36:58:3f:37:cd:dc:45:40:
fd:85:8e:bd:ab:45:25:5b:75:ce:ca:18:46:a8:0a:b5:23:4d:
2a:93:55:31:56:37:ca:29:07:7d:74:a3:f2:99:b2:52:b3:8c:
9c:80:8e:b0:11:d7:eb:ae:9d:38:19:c3:cd:f0:7f:19:1a:6c:
33:56:3f:6c:dc:db:b5:32:11:03:fc:61:c2:1b:9f:d3:b5:c3:
15:65:4d:5a:b7:ed:83:49:07:8d:45:61:30:92:0a:06:c2:04:
57:f0:0d:b4:d0:18:56:07:0c:c6:d7:20:4e:e3:41:1b:94:16:
24:3f:a7:00:f5:08:b6:1a:06:e1:b0:5a:61:8e:36:14:f0:b5:
54:30:ce:d8:75:f8:f8:ff:3d:94:c0:6f:8d:12:94:f0:ed:92:
a2:3f:89:ce:df:b2:2b:c7:d8:ef:0b:6e:14:a8:c1:07:fe:99:
1b:75:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:35 2025 by rpki-client