Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File: G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier: aq2Hwk9NXxAjWRwiwNnbmLAfTTB131HDpWFIUjvEMjI=
Subject key identifier: D5:AF:48:66:13:06:01:90:21:EF:2A:62:53:6C:85:9D:5C:EB:5D:91
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer: /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial: 019747425BF67C6BA99F48763898F124F788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number: 04D2
Signing time: Fri 06 Jun 2025 22:00:20 +0000
Manifest this update: Fri 06 Jun 2025 22:00:20 +0000
Manifest next update: Sat 07 Jun 2025 22:00:20 +0000
Files and hashes: 1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: TR/FBP9jNIdoP8gp6XCll7NuwqERzLvff9aFVeQ23e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:5b:f6:7c:6b:a9:9f:48:76:38:98:f1:24:f7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Validity
Not Before: Jun 6 22:00:20 2025 GMT
Not After : Jun 7 22:00:20 2025 GMT
Subject: CN=d5af48661306019021ef2a62536c859d5ceb5d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:99:52:09:df:5d:4c:97:99:07:bd:0c:17:41:
ec:1a:32:59:b1:e6:c9:d2:dd:70:18:98:b0:1f:f1:
7b:34:c0:5a:97:ac:ad:0f:87:ef:a7:d2:f0:59:89:
b5:c1:41:3b:22:af:b3:3e:32:00:29:b1:31:cb:7f:
e0:ee:55:68:d6:d0:e6:e2:cc:cf:26:04:bc:36:43:
f7:95:1e:59:c0:6b:01:b0:fc:1d:78:61:de:fa:18:
99:5f:60:f5:b6:3a:64:50:01:d0:45:ed:91:c1:ef:
a0:55:a8:cd:fb:98:bb:90:2e:83:87:21:e1:63:b8:
e0:a2:a1:30:97:2d:7f:ee:59:b4:0d:9a:3e:35:2e:
04:5a:9c:7a:19:67:74:15:c0:9e:36:ac:db:85:76:
ac:8a:53:ed:48:5d:31:c0:31:7e:de:8c:d0:1b:bf:
f3:c2:a1:b9:67:e8:9c:80:36:d2:f8:6d:41:38:72:
d6:7f:59:2a:69:e8:e2:f5:15:bd:a1:ea:a0:04:37:
0f:25:72:01:90:58:f9:0d:f9:04:f8:de:2a:af:6c:
bb:61:59:02:3d:2b:b4:20:e4:10:09:c4:70:a7:45:
8d:ac:82:aa:01:fa:e7:1f:3e:fb:92:0b:28:4f:33:
00:7c:6e:50:72:56:f1:fe:d9:97:21:ff:2f:30:78:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:48:66:13:06:01:90:21:EF:2A:62:53:6C:85:9D:5C:EB:5D:91
X509v3 Authority Key Identifier:
keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5a:49:0e:d3:d9:ff:68:c8:24:85:d2:75:20:c9:59:42:6e:
2a:7e:c5:26:30:36:37:9d:3c:2d:bf:02:0d:76:49:77:d3:a5:
16:2c:59:23:b0:60:e2:e5:f0:e6:fb:90:1d:12:99:d0:9e:89:
c2:c7:d3:56:d0:77:a7:d9:08:fa:57:5a:e1:5f:31:5f:16:9a:
2f:3a:1a:34:82:b9:a2:40:52:f1:de:87:2c:04:1f:24:2d:e4:
46:51:93:b2:52:23:2a:da:81:b4:09:06:15:b9:f2:50:2f:42:
a2:2d:13:2c:fb:2b:39:c1:bf:ce:0e:71:7f:5f:9b:b7:61:0a:
c9:f4:35:2c:3b:3e:a3:88:fa:ed:71:13:be:b2:3a:af:a9:1b:
82:66:f5:46:85:2c:10:c2:c6:76:2e:9a:b9:d5:b4:09:3b:1e:
35:44:12:68:8a:0d:d5:de:81:23:d3:85:89:e1:56:a0:10:1b:
16:66:30:21:30:68:3f:67:2d:f5:ba:a8:7b:d3:73:33:da:17:
3d:a1:7f:c0:b5:81:54:39:a0:55:ac:f2:7e:6a:39:0f:80:86:
8c:97:1e:9d:a3:37:f2:85:9d:50:47:92:c6:f9:21:12:c2:5a:
d2:cd:e7:99:8f:57:e0:5d:ea:f9:d0:4d:b7:bd:ef:1a:1a:22:
fd:14:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:30:36 2025 by rpki-client