
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: YHYQd4zi79iHBu8ZgXoPaagbRQ4ANi6mkyBp3CPSUaA=
Subject key identifier: 38:A6:90:F9:4B:00:D9:AD:45:A8:C4:BE:10:89:73:94:16:46:6C:EA
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 01974968257563223707BED35DE9491BE166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 03B3
Signing time: Sat 07 Jun 2025 08:00:51 +0000
Manifest this update: Sat 07 Jun 2025 08:00:51 +0000
Manifest next update: Sun 08 Jun 2025 08:00:51 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: wktYmy12mBJvFx0ww1THPL5k11CAOKvZD6fVtO3tdRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:25:75:63:22:37:07:be:d3:5d:e9:49:1b:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Jun 7 08:00:51 2025 GMT
Not After : Jun 8 08:00:51 2025 GMT
Subject: CN=38a690f94b00d9ad45a8c4be1089739416466cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:17:d0:49:ab:8b:52:a6:c4:b1:be:84:02:
a5:e7:6b:1d:2d:89:fb:cf:9b:c7:50:01:3b:6c:cd:
5f:f1:85:bc:a4:56:f5:26:dd:56:1a:48:68:bc:4f:
a9:44:f9:db:e6:29:55:55:95:8c:42:0f:aa:ed:66:
b7:14:b9:1b:9f:2a:08:3b:ac:23:c8:0d:8f:05:35:
c7:88:27:90:4f:8a:66:71:78:d6:46:6f:7a:18:41:
65:80:23:9e:c3:b0:c4:46:71:a6:53:81:cf:9e:97:
aa:5c:df:82:84:dd:72:72:07:9e:e7:6f:d5:3a:38:
d4:c4:ad:c4:95:82:c0:95:07:81:eb:a9:c4:79:7d:
3b:fa:ee:ad:b1:8f:e1:8c:27:a0:c1:7f:b3:cb:a1:
fc:2d:7e:6d:17:ba:7e:01:56:a0:ce:5b:90:20:f8:
07:c4:a5:62:81:09:8d:95:ba:11:85:4c:39:85:69:
48:92:b0:6b:01:48:98:ff:82:34:6b:60:45:f3:cb:
dd:ca:c7:8d:72:a5:20:78:79:00:50:63:32:c9:6b:
7c:4f:d4:71:ac:0d:cd:f1:20:e0:18:83:f2:2d:8d:
af:0a:28:ec:cb:8b:db:5e:b6:42:2f:e2:d4:dd:86:
21:f1:ef:e8:5d:00:b2:10:84:43:06:e8:e6:fe:3c:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:90:F9:4B:00:D9:AD:45:A8:C4:BE:10:89:73:94:16:46:6C:EA
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9d:3b:d9:64:fd:de:e7:ec:d1:8d:1a:a3:02:5a:98:ac:16:
f5:70:f6:62:12:4a:6b:aa:89:3e:68:37:48:e1:11:2a:b6:69:
2a:6d:06:be:7d:f2:19:f9:a7:b6:03:db:76:53:11:63:3b:00:
79:83:d4:bb:86:03:7d:5c:cc:8e:2f:7e:36:0d:fa:66:a1:9b:
58:4b:d7:28:60:dd:41:f8:31:00:37:41:9f:a5:3d:c7:79:59:
40:0a:9b:ba:b8:ae:1a:bb:04:6f:20:c0:02:5e:8e:b3:e4:4d:
09:ee:73:7d:d0:a2:61:d2:da:63:24:03:51:b9:3e:35:ba:a3:
8e:a0:98:74:99:11:12:ca:b2:aa:77:38:ab:f5:ff:cc:17:fe:
07:9f:23:88:8b:98:80:20:39:c3:df:66:4b:f0:f5:2e:4d:0a:
72:77:1f:00:35:2d:51:2b:f5:a9:f9:39:ec:59:59:7f:7a:8c:
23:b3:f9:70:ba:f6:e6:32:5a:ff:94:2a:99:4b:db:1c:72:11:
49:16:9b:a5:66:75:d0:07:5b:1c:30:b5:e8:98:1c:1b:8a:9b:
01:05:ea:14:f4:33:fa:83:d6:e7:26:1a:7d:ad:5e:51:d4:94:
21:c7:33:55:08:ad:9b:fd:62:bc:b0:e9:9a:45:0a:db:17:0c:
64:54:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:39 2025 by rpki-client