Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier: lSX1hF3nB/BAjkMI2DUxHAzgyTxpFfAY0uQtMs12pBQ=
Subject key identifier: 3F:A3:A4:D5:B8:05:3E:E6:E6:5F:42:64:22:AB:E5:F8:73:4A:BB:C4
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial: 019752D95C54EF9EAC406DE28F9C2B91CA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number: 072C
Signing time: Mon 09 Jun 2025 04:01:05 +0000
Manifest this update: Mon 09 Jun 2025 04:01:05 +0000
Manifest next update: Tue 10 Jun 2025 04:01:05 +0000
Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: 8yEjgBK9Cv1Fzt512sBJBegEdvbQ8/kY3cuGmWWz2P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:5c:54:ef:9e:ac:40:6d:e2:8f:9c:2b:91:ca:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
Validity
Not Before: Jun 9 04:01:05 2025 GMT
Not After : Jun 10 04:01:05 2025 GMT
Subject: CN=3fa3a4d5b8053ee6e65f426422abe5f8734abbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:93:b5:0a:c8:22:4b:1a:4f:c4:96:74:4c:
9e:7c:23:9b:47:b1:86:21:d7:7c:09:d6:a6:4b:1b:
1f:62:d2:69:ec:d9:2d:0c:75:68:c1:4f:03:e6:19:
44:ce:c6:2b:2a:c8:18:a9:00:60:02:ed:7d:aa:a8:
8c:04:4c:83:89:f1:19:6f:52:69:59:eb:c6:cd:a7:
43:d5:e4:e6:38:c8:42:7c:d9:61:a5:43:25:db:56:
e3:17:7e:ee:62:bb:57:ed:e1:17:fb:6e:96:0a:45:
da:de:58:62:d5:60:8d:9d:51:59:25:82:a4:4f:7b:
bf:5e:53:b8:d7:eb:2e:77:eb:93:15:d1:57:2d:ed:
62:17:52:c1:4a:a6:16:49:9b:b4:d1:3b:b4:e5:7f:
2b:e6:6e:cd:28:0f:c2:92:4d:77:5c:8e:65:89:9e:
94:37:c1:4d:3e:70:f7:8b:4e:62:cd:b1:5b:63:fb:
15:23:5d:66:95:f2:6a:b8:83:b0:54:34:06:74:b9:
b3:0f:77:20:f9:18:86:6b:8a:96:7f:68:0a:62:0f:
f0:0f:71:61:89:03:08:c7:21:ac:42:c7:4d:43:07:
c7:3e:35:1d:0b:d5:b1:6d:27:6f:8e:07:0a:0e:9f:
c6:95:d0:0f:2e:35:23:86:86:f5:de:f0:10:d1:6f:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:A4:D5:B8:05:3E:E6:E6:5F:42:64:22:AB:E5:F8:73:4A:BB:C4
X509v3 Authority Key Identifier:
keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d9:ef:46:71:0b:52:63:25:b9:11:f6:c0:65:6d:b9:47:d1:
f2:c0:6e:e9:4f:df:de:e5:e3:46:54:df:1d:ee:b6:32:a1:7e:
1d:11:f9:a1:79:de:c3:fc:5e:51:17:b2:f8:a3:aa:6d:a5:12:
51:85:47:4d:f1:a9:7d:39:6e:82:6c:09:7f:7f:bb:4d:c6:0e:
05:d6:4d:a4:7f:28:d7:b4:a4:28:ff:f7:cb:6e:b2:96:0a:43:
92:c4:46:2b:41:9d:9d:7f:04:5e:e7:b4:f6:91:1d:54:b9:6a:
e0:b8:82:c3:97:5f:bd:2c:e2:fc:38:a7:58:2c:ac:d4:5d:43:
f2:21:38:c6:40:1f:2a:d7:23:66:5d:64:b3:d5:0d:20:0d:ad:
68:ec:d0:c2:90:e6:a2:3b:2f:ef:6e:ce:fe:35:92:07:96:e1:
cc:2a:19:0b:f2:56:0c:06:08:e8:39:f0:66:07:d4:19:53:1c:
75:80:d0:f2:92:ee:5f:30:d5:12:05:41:5d:f9:dc:5a:c6:d3:
b6:d5:4c:fd:08:f2:c7:81:6e:01:be:13:4a:56:c6:21:be:c3:
64:8f:cd:e3:5d:9e:c2:11:bc:85:72:bb:35:02:f6:03:5e:63:
de:d5:41:a6:30:16:e7:d6:ba:b2:7b:5d:f1:4e:d8:9e:71:50:
89:24:86:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:54:45 2025 by rpki-client