Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: uC2pWtaIMHyn3PMf5qrBHtVjyrp1RmfjzzhOv41Q74Y=
Subject key identifier: F8:9A:63:82:9F:DB:F6:71:AA:E0:58:E7:6F:3A:C9:AE:48:DF:BD:BA
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 0196C3F0E7CE760C908072B0F8450A3C1BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 1533
Signing time: Mon 12 May 2025 10:01:07 +0000
Manifest this update: Mon 12 May 2025 10:01:07 +0000
Manifest next update: Tue 13 May 2025 10:01:07 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: ETXZiprwRx65OQiomSy0Ifnun9E4oCVbUGhT/y1HzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:e7:ce:76:0c:90:80:72:b0:f8:45:0a:3c:1b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: May 12 10:01:07 2025 GMT
Not After : May 13 10:01:07 2025 GMT
Subject: CN=f89a63829fdbf671aae058e76f3ac9ae48dfbdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:4c:dd:17:a0:6d:4e:a2:ff:5a:01:50:07:
bb:50:71:89:af:49:11:84:bf:6c:cb:cc:e5:72:ed:
d0:21:9c:de:48:64:07:16:57:62:7e:c5:f5:ed:71:
13:39:1c:da:f7:25:15:54:76:d0:90:35:24:93:6c:
8b:82:d0:d5:25:b7:14:cf:a9:70:d1:7a:4a:7d:07:
db:d3:b8:11:cb:2d:f4:61:85:e5:bc:da:96:b3:7d:
95:4b:31:ae:99:18:7f:6f:de:d2:6c:e1:62:81:59:
b2:2f:5d:c8:44:f3:52:1c:63:92:da:1b:35:72:06:
de:d5:2e:ce:06:df:f5:aa:8d:42:0b:69:15:21:8c:
2d:ff:4d:2a:35:d7:84:f0:10:85:9e:74:63:ab:a5:
57:41:ad:65:e5:01:57:01:ed:59:30:15:a7:88:53:
2a:14:5e:1e:6e:1a:70:aa:8e:9e:0a:fd:8e:6e:24:
89:f9:cb:30:b5:90:02:ad:f0:40:55:47:cb:6b:2e:
77:df:58:29:04:aa:f6:ef:b4:14:1a:bf:2b:ce:e9:
cb:07:5e:7a:db:6c:ac:2a:0e:04:2a:be:5d:f1:dc:
9f:17:c9:97:5e:36:fa:ef:14:4e:9b:fb:50:67:2a:
67:ef:27:72:f0:2d:3b:0f:ca:57:c9:f0:33:83:99:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:63:82:9F:DB:F6:71:AA:E0:58:E7:6F:3A:C9:AE:48:DF:BD:BA
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:47:12:70:79:bc:fe:0a:5b:5f:c9:79:a9:1a:2b:c0:5c:20:
66:12:b4:1b:8f:91:58:e1:80:5d:a6:0b:bf:27:61:92:6a:95:
90:7c:c2:13:51:5d:fc:15:bb:25:39:f5:00:73:42:1a:2e:2c:
17:de:2b:ab:74:97:d9:49:fd:4a:3f:18:10:94:1e:37:35:fe:
94:8e:51:8a:f4:95:02:d9:9e:9c:e3:d3:53:08:f0:e9:76:85:
ac:93:2b:a7:23:9b:b5:da:64:e7:b1:89:4d:1f:89:cc:47:cd:
6c:ec:65:e4:60:96:f0:3f:aa:d2:a1:f7:d3:bd:c7:d3:6b:c4:
02:11:b3:ca:a2:1a:27:eb:39:74:e0:a4:54:bb:9f:25:55:57:
24:3b:2a:94:91:3f:db:d3:d6:c5:63:cd:b0:98:46:e8:69:ba:
2b:35:e4:30:2f:2f:da:5a:ad:b7:24:d0:67:f9:f2:9f:33:dc:
4c:69:35:f3:5d:27:5b:0c:cb:eb:d7:01:4e:38:b3:fc:89:0c:
a6:38:8f:d2:38:1d:02:db:9f:d8:82:26:2e:8f:14:b9:82:8e:
b4:38:f1:01:39:ba:04:3e:f8:fc:b5:7d:21:6f:1b:f4:9a:f9:
f1:a0:96:44:08:78:27:de:4e:65:0c:5f:f9:26:ec:a8:8f:9d:
12:9f:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:09:33 2025 by rpki-client