Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: /gMjsVMUgtazGMuxjnDWCZtnqNkdJLpzBbYAWT0g66E=
Subject key identifier: D4:05:3B:B1:91:8C:8A:48:D0:31:3C:64:09:F2:E1:A0:2A:E6:55:82
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 019759EE18F57B627B736EFC141BB9D9C686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 1517
Signing time: Tue 10 Jun 2025 13:01:05 +0000
Manifest this update: Tue 10 Jun 2025 13:01:05 +0000
Manifest next update: Wed 11 Jun 2025 13:01:05 +0000
Files and hashes: 1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: rLP036fUPie7jT+jL5L8pfDOE4nB9x4E9atYk13Wlys=)
2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:18:f5:7b:62:7b:73:6e:fc:14:1b:b9:d9:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Jun 10 13:01:05 2025 GMT
Not After : Jun 11 13:01:05 2025 GMT
Subject: CN=d4053bb1918c8a48d0313c6409f2e1a02ae65582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d2:39:00:53:29:48:f6:37:45:a2:0b:95:13:
20:59:90:0b:95:9a:7a:c2:96:f1:1a:90:a6:7b:91:
a0:03:8d:f3:42:6b:06:e5:0f:c6:da:8f:81:c4:df:
e4:28:66:6d:c3:38:8d:9e:df:97:e7:12:bd:86:e5:
10:3c:c4:40:b3:a3:5f:f0:b1:f3:0d:b1:a5:e3:c9:
ab:f5:d0:9e:59:3f:f2:76:d3:f8:25:62:4e:0a:be:
ea:32:50:a8:2f:e3:06:cb:8e:89:01:c8:bf:bd:20:
0a:d4:d6:b0:6e:51:60:df:e0:1f:c5:9f:70:b9:24:
e1:33:0a:18:15:89:04:f9:d4:a9:37:5c:15:4d:ff:
be:1c:ac:36:dc:48:fc:ae:cc:d7:6e:e3:0d:93:90:
40:99:b2:69:b4:5d:fd:95:bb:de:4c:e3:85:3c:1a:
94:b3:eb:aa:68:ac:f0:67:da:78:6e:7e:49:db:e9:
dc:32:c6:0b:76:ce:65:08:57:2e:b3:30:2f:73:23:
27:ee:99:a4:39:02:3c:37:58:75:99:97:ef:10:33:
b0:55:53:c7:1b:3e:43:b7:be:52:d1:c9:47:d1:56:
b6:64:dc:90:31:53:e6:7c:00:e5:8e:72:77:5d:ca:
46:b4:77:31:48:48:2b:dc:7a:fb:83:f4:0d:f7:02:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:05:3B:B1:91:8C:8A:48:D0:31:3C:64:09:F2:E1:A0:2A:E6:55:82
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cb:9d:96:6a:4f:6f:3f:c3:44:bd:79:3f:ff:e6:b8:05:77:
db:47:3a:6c:79:f3:12:4c:68:52:54:8c:d3:b0:01:37:72:d4:
d4:32:28:14:54:98:ad:61:a3:a4:c4:3f:76:b2:88:7f:fb:f0:
01:72:61:ed:b5:64:19:b2:ef:8c:a4:58:25:24:1a:d8:93:b0:
f6:92:25:b3:58:94:b5:38:05:56:63:54:7b:27:1a:8d:30:2f:
7e:d1:05:28:f4:8f:7d:45:41:50:c0:80:7e:9c:23:6f:50:a5:
70:ec:81:b8:bc:e1:68:6a:a3:d2:35:8b:fb:9f:80:25:e9:b9:
4e:92:44:e5:a5:54:39:a4:19:83:73:48:7a:8a:94:aa:9d:9c:
6d:f5:a8:1e:9d:91:ea:50:cc:a4:0e:30:09:37:1f:fc:8d:cc:
3b:da:c1:93:ad:6c:a5:08:40:c7:f9:94:f4:fa:a6:fd:67:57:
99:96:7c:f3:a2:cd:2d:5e:0d:bd:d2:ac:e7:5c:b4:07:35:3c:
15:4a:54:20:2a:c4:44:0a:7d:e1:4e:30:cd:f7:1a:26:78:e7:
c4:01:83:50:8b:ff:f1:0a:dd:39:c0:0f:73:e2:e8:19:50:b9:
8d:45:e2:a2:d9:d4:2c:33:71:ab:ef:8a:18:fa:6d:65:d5:01:
b5:5d:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:54:21 2025 by rpki-client