Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: Yw3SArpylMLg19bzNcL7gJ8hZQxfyc+jN4Vv6Dtf37M=
Subject key identifier: 93:F1:AA:6B:4A:7D:BC:01:F7:33:AB:36:63:72:23:17:1D:90:AC:D1
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 0197B70F23AC86BA2163BBBCDBD915DB48F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 021B
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: 4SgHRi2Wd8ENtjvDBhwVaIb/FoCkb6w7ZEqbHYsKWgg=)
2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:23:ac:86:ba:21:63:bb:bc:db:d9:15:db:48:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=93f1aa6b4a7dbc01f733ab36637223171d90acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:9b:38:5f:43:06:eb:4e:59:1d:34:f7:6b:
f5:66:19:20:d9:3c:13:41:91:f1:85:78:aa:cb:48:
ec:6b:87:e7:6c:7f:be:d1:d1:f8:3b:da:8e:68:73:
ad:72:e2:a9:34:1d:36:9e:95:6e:5b:49:cc:da:67:
22:8e:f1:1b:82:52:87:78:e6:02:47:a0:90:3d:d5:
4a:c0:a3:34:29:d3:cd:1e:78:87:37:77:fe:4a:7d:
8c:eb:bb:e8:be:f8:ac:40:ee:62:96:3c:5f:49:1d:
8f:0e:6a:9c:f8:28:30:cd:7e:8a:73:2b:fe:45:31:
84:f8:90:3c:b5:42:a7:ff:81:61:ea:7a:38:1d:29:
43:bd:a2:9b:ba:ce:a3:be:c2:c3:05:78:23:36:93:
6d:1f:64:15:ed:d9:59:12:d9:06:5b:b1:db:63:9c:
7f:a9:a9:37:56:09:58:33:fc:db:2b:a2:a1:f8:e9:
dd:e6:61:10:f9:0b:7c:f5:29:36:6a:ef:f2:63:57:
6c:72:69:15:f0:95:0d:c7:12:68:dc:84:b5:6e:fa:
b7:2e:ab:9d:2b:54:94:ac:3f:ef:d9:63:45:bd:13:
1c:44:af:79:01:c4:a2:55:3e:b6:e3:b0:52:22:39:
fe:5a:52:39:c7:96:14:65:93:4b:6c:d0:07:5e:94:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F1:AA:6B:4A:7D:BC:01:F7:33:AB:36:63:72:23:17:1D:90:AC:D1
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:aa:ea:21:80:23:3d:d4:8b:b0:bd:00:e8:22:e9:10:1b:e8:
46:a6:37:3e:d0:5f:cd:3c:78:08:8f:7f:77:d8:4a:ac:fd:fd:
15:8c:c5:da:97:0e:79:88:e7:59:ab:36:63:ba:34:d7:7f:c3:
6f:3b:02:79:d4:05:e7:ed:82:3d:b2:27:d3:d1:ab:c3:42:e6:
47:81:eb:64:e2:0e:e8:85:7c:20:09:5d:12:81:ef:70:4e:93:
06:f8:ab:63:ab:86:6b:21:1f:25:91:b9:c2:8c:1c:27:83:1a:
50:f6:98:e5:f7:f5:f8:c4:90:5b:c6:00:54:33:85:a0:6c:42:
5d:bc:7a:89:a0:f9:bb:e5:de:67:1c:17:d7:68:33:73:f5:e4:
70:06:34:e4:43:79:d4:49:1c:f0:11:52:6e:d0:65:90:ad:11:
78:34:e6:68:89:f9:3b:12:d9:f6:b4:e1:5c:b4:ee:59:2c:4c:
ec:d1:2e:86:e2:b6:5d:1d:07:99:9d:0f:06:c7:09:af:76:78:
9c:cb:7e:95:fd:12:d9:e3:c7:7f:be:d6:c0:a7:be:37:a2:07:
00:eb:93:18:b2:4c:53:6c:7d:88:70:d7:39:9e:fa:a7:2f:8c:
33:2b:2d:bc:b2:6a:94:93:c9:eb:41:87:a0:f0:5a:87:54:07:
ee:bd:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:33 2025 by rpki-client