Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier: EztCvAoJPanOM7LIf9VSaBhhEwVp5J2bAGwEjTaf568=
Subject key identifier: 1D:4E:DC:8D:EE:F5:10:D9:AA:47:D4:16:C2:A6:6B:77:6F:CF:7F:DD
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer: /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial: 0195903D8D3603282740F463B4C53A79FE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number: 047A
Signing time: Thu 13 Mar 2025 16:01:47 +0000
Manifest this update: Thu 13 Mar 2025 16:01:47 +0000
Manifest next update: Fri 14 Mar 2025 16:01:47 +0000
Files and hashes: 1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: lygt4pvipGHcaQDqubKgy0CoL4uGp/I6nVr2fkDJ43c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:8d:36:03:28:27:40:f4:63:b4:c5:3a:79:fe:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Validity
Not Before: Mar 13 16:01:47 2025 GMT
Not After : Mar 14 16:01:47 2025 GMT
Subject: CN=1d4edc8deef510d9aa47d416c2a66b776fcf7fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:bf:8a:8b:9c:e0:98:1b:18:6d:bd:e5:9a:
f3:54:3e:d8:5c:fb:72:f3:2e:f0:d8:45:a0:31:e8:
54:d7:55:5e:28:38:58:19:28:45:ed:f4:5a:8f:98:
85:09:60:35:8b:fa:45:13:f4:5f:78:69:33:9c:b3:
5d:f6:80:59:91:46:51:d9:35:85:31:75:7a:7a:ed:
43:e3:93:74:fd:20:f4:51:dc:b8:90:a1:7c:f4:84:
a7:78:6a:0e:18:bc:41:e0:6d:62:45:d8:a3:6e:17:
06:ab:7e:5d:77:68:d6:39:46:64:b8:a2:73:4b:a4:
d6:6b:b3:85:51:44:dd:cd:1d:98:e9:d0:72:f1:3b:
c2:64:a1:69:f2:6a:6c:85:c7:af:d8:cc:d4:c8:f2:
db:60:70:6a:2d:85:ad:43:c8:90:08:49:ae:42:3d:
f1:22:23:53:b3:b2:79:ec:4f:5c:7b:54:6c:ae:45:
32:9c:d5:0f:fc:fb:16:19:85:53:83:c7:b5:60:72:
94:1c:7a:af:a6:1a:51:15:43:af:20:81:0c:28:27:
1f:80:0b:29:f6:ad:4d:48:b7:a1:34:ac:40:af:ec:
e6:32:4c:87:35:f2:37:d4:77:dc:a8:34:08:5c:18:
6e:72:06:ef:ba:d3:3c:96:e8:4d:1f:09:13:06:12:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4E:DC:8D:EE:F5:10:D9:AA:47:D4:16:C2:A6:6B:77:6F:CF:7F:DD
X509v3 Authority Key Identifier:
keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7f:f0:80:ed:fb:3c:75:9d:35:76:06:ff:17:a1:b4:2d:11:
73:ba:d1:d0:bd:f5:03:9d:15:3b:94:3e:46:eb:be:a9:93:f6:
70:36:b2:01:94:30:9b:fa:ea:c1:b8:3f:97:53:a4:4f:37:19:
e6:fa:a2:a7:c8:4a:92:78:19:f1:7b:61:ae:75:c0:45:19:11:
aa:be:92:f5:21:67:b0:8d:30:dd:e8:5c:d5:3b:b0:11:82:8f:
c8:d9:17:4c:e2:0b:7e:c3:65:94:71:c8:29:4f:2e:90:4f:82:
96:27:c0:75:9b:5d:d1:63:c6:33:70:55:a7:97:c8:18:f8:0b:
5c:18:5f:20:cc:34:75:ee:f1:54:b6:58:68:9a:d1:a3:d8:53:
35:91:00:19:a9:ca:bf:29:2c:d4:d6:7b:d6:fd:13:76:68:23:
85:f3:6d:ef:59:c7:65:25:53:2e:63:74:bf:f2:49:a5:da:a3:
13:72:2e:ec:a9:ef:aa:bd:5d:87:24:38:77:dd:97:b8:4c:90:
e3:0a:28:ec:8f:db:a4:f3:9d:f4:f5:17:13:f0:cd:5f:e1:34:
ea:81:c4:3d:4f:52:52:ca:a8:ed:0f:69:17:1e:8d:24:eb:c2:
a1:f0:f9:8b:46:81:50:7b:a5:e4:34:b4:ee:8a:f0:24:27:20:
21:e7:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:00:12 2025 by rpki-client