Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: AsnbQ96BZK+m4aT6lkRFMKEprXXMzUEofk7Qk1pLCmU=
Subject key identifier: 3E:F3:47:3E:D8:94:36:3E:95:E8:94:22:97:07:89:E7:39:E9:71:94
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 0197469E7D9312887FF0E08936316D2E75D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 1394
Signing time: Fri 06 Jun 2025 19:01:21 +0000
Manifest this update: Fri 06 Jun 2025 19:01:21 +0000
Manifest next update: Sat 07 Jun 2025 19:01:21 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: ztedxCjLHN0daysXqaxSc1BRdHNNZO+DNThiiU671xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:7d:93:12:88:7f:f0:e0:89:36:31:6d:2e:75:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Jun 6 19:01:21 2025 GMT
Not After : Jun 7 19:01:21 2025 GMT
Subject: CN=3ef3473ed894363e95e89422970789e739e97194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:50:1f:8c:06:d6:96:f8:df:45:b0:ca:08:
bc:f6:17:49:04:f8:65:ca:6a:21:5c:d9:10:81:06:
89:6c:de:a9:b1:68:86:0a:44:4f:e9:c6:dc:27:e1:
85:ef:e2:f2:11:b6:ce:7c:52:d3:16:ef:4e:76:ad:
5b:e0:5f:05:00:e7:42:f4:97:e7:be:44:2e:a0:a7:
d3:42:0b:ff:60:10:2d:0b:db:75:d3:75:eb:1c:d4:
0c:81:4e:fc:83:e5:86:33:78:33:4b:86:4a:30:4c:
59:2f:f4:17:bf:42:83:f2:be:93:a3:76:cf:7a:b0:
2b:01:c0:a2:e8:6f:21:7f:e8:90:15:c9:cd:11:42:
74:35:2f:d8:c8:41:c9:08:de:11:b5:ea:03:15:b9:
7f:47:80:b7:17:57:60:a3:0a:98:cc:82:c8:59:a9:
09:15:be:27:73:5b:d4:5a:91:f5:8e:e0:6f:ea:d5:
84:33:b3:05:29:d2:c1:43:95:2c:37:b8:7f:7c:a9:
ef:83:da:8b:42:37:ed:97:69:aa:09:34:ea:a0:87:
bf:81:b2:84:04:c1:c1:5e:cb:f0:f2:7d:d8:bd:07:
23:1e:43:9d:92:2b:7c:9f:2e:34:d3:44:eb:5e:41:
71:73:7a:33:18:e3:3b:7f:6d:cb:86:00:28:3f:b9:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:47:3E:D8:94:36:3E:95:E8:94:22:97:07:89:E7:39:E9:71:94
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:70:da:d2:b2:ca:b7:a6:7f:81:d1:b5:fc:0c:91:03:21:75:
36:62:47:59:61:5a:02:6c:c1:3c:8d:00:7a:53:04:52:4f:0d:
2b:ab:68:c7:76:04:bf:d8:be:28:08:76:d7:af:d9:b7:71:50:
8a:48:74:8a:3b:69:7b:1b:6e:f0:36:10:29:2a:ae:d3:3b:f7:
85:e8:a8:0b:0f:74:1a:0b:83:76:9e:4f:88:9c:b6:68:f0:4e:
ef:3c:bc:a6:8c:4f:b8:72:25:a1:2e:de:50:e4:b2:e6:37:f4:
44:a4:e5:7a:9f:23:4e:94:a6:d2:54:5e:75:df:92:18:52:e1:
0a:7a:e0:49:ec:f8:e4:e8:ea:a6:4b:95:17:4e:e2:7a:62:d7:
67:ca:16:5e:ca:79:42:90:66:76:f1:40:e6:8c:2b:2e:98:26:
96:89:c4:ee:21:c2:c8:2b:0a:b2:d9:6b:22:b0:82:09:4d:2a:
7c:c9:ad:9e:6c:18:5f:04:28:2f:f2:e1:4b:c4:8c:b0:75:a6:
27:7f:1b:fd:49:d5:68:ba:d2:23:a8:d5:45:1c:67:59:15:ae:
a7:38:a7:cb:f7:14:be:a0:50:b1:aa:75:ec:9b:6c:7d:a4:46:
3a:24:42:50:bf:97:d2:67:86:b0:68:7e:ee:ea:49:bb:16:73:
64:6c:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:42 2025 by rpki-client