Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: NrsYXoI8RkK1X8nRmzEfipNKBmczuliizI7VQTPwmS8=
Subject key identifier: F7:77:75:9E:BC:7A:CA:2D:E8:5B:C4:80:41:6B:48:E6:7B:CA:1C:1C
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 0196108E0BD83076956704769E970E56390B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 0311
Signing time: Mon 07 Apr 2025 14:01:06 +0000
Manifest this update: Mon 07 Apr 2025 14:01:06 +0000
Manifest next update: Tue 08 Apr 2025 14:01:06 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: YBDyC98FykHlAyQQq4SR9AavcuGSGlw6nKm/q5cNAVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:0b:d8:30:76:95:67:04:76:9e:97:0e:56:39:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Apr 7 14:01:06 2025 GMT
Not After : Apr 8 14:01:06 2025 GMT
Subject: CN=f777759ebc7aca2de85bc480416b48e67bca1c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:c3:b1:0c:60:cf:cd:df:b1:df:1e:8e:73:
3f:b4:07:11:df:97:41:b0:95:73:1a:bf:0c:1d:d4:
41:85:9a:c8:78:30:de:f4:15:90:a9:66:50:c0:b3:
aa:98:b8:36:b7:de:64:40:1c:6f:cc:68:e8:ed:4f:
35:6f:12:43:b6:7c:0a:c4:0c:54:b2:a6:08:b0:7b:
2a:f9:2f:a9:be:64:24:26:30:23:f2:25:a2:f4:be:
d8:d8:07:55:97:c7:64:42:b6:0c:12:96:2c:aa:16:
02:06:1a:ea:d6:f1:9f:20:c1:70:64:cf:55:63:f2:
90:c2:10:2f:f1:ba:4c:a7:75:98:26:e5:67:9f:40:
a4:c7:1e:19:1c:e9:7c:81:00:3e:bf:13:3f:80:03:
84:49:4b:12:44:ff:86:3a:7a:91:5e:27:20:d7:4f:
93:9a:8a:64:3e:c3:89:f7:80:bf:84:a8:78:f2:94:
0d:02:10:4f:dc:55:5e:b6:6e:2f:22:70:6c:15:5d:
c4:02:b1:bf:38:54:f2:98:1e:e1:9b:b7:41:40:9b:
4a:ff:e8:e9:cc:54:76:20:bf:d2:ba:7b:b7:5d:a9:
ea:b8:66:87:f1:8c:24:c3:e4:07:f7:fb:ce:cd:fa:
22:2a:5d:10:3d:6b:06:ae:15:1b:55:26:46:01:b6:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:77:75:9E:BC:7A:CA:2D:E8:5B:C4:80:41:6B:48:E6:7B:CA:1C:1C
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2f:2b:56:b5:71:52:2a:2b:44:7b:54:80:97:c3:c2:aa:6c:
1c:8e:6c:74:3e:e3:b1:9b:e9:8b:ec:6e:73:13:02:e7:28:8a:
0a:df:65:7e:08:fa:09:0b:97:5c:11:10:29:0d:3f:e8:22:16:
a3:29:25:d1:ca:43:95:f6:17:26:8f:02:4f:7a:cf:df:c4:f4:
25:d2:ac:2d:42:e1:1f:8e:81:7e:6b:e7:ef:34:d0:ec:28:ba:
15:02:be:f3:df:d1:91:c4:e2:ee:3e:8a:ba:75:66:9b:da:01:
b3:26:7e:14:42:58:1c:71:3e:48:b7:9f:5b:93:f7:4b:62:8e:
b8:80:f1:8c:9a:9c:1e:81:e0:75:a0:3f:d8:51:17:c9:cb:7f:
0b:7c:26:88:d7:f5:52:cc:78:60:48:c4:ad:57:d2:c1:d2:a8:
f4:84:a9:ae:b3:93:c0:8c:86:28:6c:fe:c8:30:d6:48:ae:45:
73:36:ff:a8:9b:68:a6:7e:3b:eb:07:31:8c:5c:7f:17:78:37:
46:cd:e9:e4:25:4e:f8:de:b4:a0:e1:a7:ad:58:b7:a2:d8:a9:
d3:55:51:d6:31:56:68:99:7d:49:ae:95:fe:bf:86:a5:52:9c:
12:22:8a:6c:68:33:14:ce:a6:cf:b9:ba:fb:8e:ee:9c:4e:da:
bd:c3:08:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:50 2025 by rpki-client