Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
File: gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft (raw, json)
Hash identifier: zHyoGOmhw+3D9J0ot45zP0jlSHznQRstUeggn+qOBPM=
Subject key identifier: 0D:9D:FF:74:AC:55:16:5C:4E:1C:87:E6:78:A7:EC:25:29:3B:17:FE
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Certificate issuer: /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial: 0197B88FF624A000A25508C07A1FA50D638C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
Manifest number: 08E1
Signing time: Sat 28 Jun 2025 22:02:11 +0000
Manifest this update: Sat 28 Jun 2025 22:02:11 +0000
Manifest next update: Sun 29 Jun 2025 22:02:11 +0000
Files and hashes: 1: gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl (hash: 3/BW4XQYE+iXSdSTF2BWmy0cJ3phywU7pmKIpJxPMGo=)
2: h8JOFdoRpj6qGDNJuivBHNvrSRk.roa (hash: Vj2EQ4BWrvbCavVD4y/JlI7mb4cVKOnw+wqYqtWQ88Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f6:24:a0:00:a2:55:08:c0:7a:1f:a5:0d:63:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Validity
Not Before: Jun 28 22:02:11 2025 GMT
Not After : Jun 29 22:02:11 2025 GMT
Subject: CN=0d9dff74ac55165c4e1c87e678a7ec25293b17fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:fa:8c:46:ac:4f:32:e1:9e:b1:54:0a:a5:
f1:71:fa:a7:5c:7b:4a:3a:d1:6a:df:19:73:56:4a:
78:d9:f4:8c:58:63:ce:81:b6:0e:a5:ff:f9:51:e6:
c8:70:8a:b2:56:54:80:bb:59:5c:f0:49:58:71:94:
7b:ee:dd:4d:3b:a2:48:2e:82:00:72:a7:e3:3a:cb:
22:fa:da:4c:a1:ec:8e:f0:39:a1:b7:85:7d:52:43:
b8:2c:a2:52:8f:78:8a:d0:38:1e:5f:20:cb:60:d2:
4c:da:0b:3b:0e:d3:55:06:53:41:f8:fa:6c:1d:bb:
a6:a6:33:1a:7a:1f:ae:b3:1f:38:97:51:f9:2f:33:
33:b5:f9:a4:e0:7a:51:ed:42:82:a4:11:1f:c1:6d:
b0:c9:df:f9:8d:d8:60:80:7b:5c:e1:24:c8:71:f0:
8c:02:74:2d:3b:83:6f:9d:fb:ec:24:e9:34:b8:86:
63:f8:f3:3c:aa:18:6a:5b:c6:ad:8d:5f:72:36:05:
71:0d:6f:0b:fc:57:d8:2a:02:78:6c:e5:ec:22:93:
0e:03:33:b8:d7:32:c3:cf:f2:4c:d4:66:90:85:33:
eb:35:9b:7f:1b:fa:5e:44:94:eb:c5:2e:b9:6f:f3:
64:7f:82:27:36:1f:10:fd:2c:ab:f0:a1:67:a1:62:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:FF:74:AC:55:16:5C:4E:1C:87:E6:78:A7:EC:25:29:3B:17:FE
X509v3 Authority Key Identifier:
keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6c:08:92:af:77:19:45:b6:73:18:7a:51:dc:92:bc:30:9b:
12:29:5c:bf:cd:d1:33:b7:37:8e:53:23:64:56:7e:7c:23:0f:
60:60:39:68:8c:6a:c1:e4:95:49:61:3c:f3:c6:fb:9e:8f:dd:
d1:5e:bb:9a:d9:f3:9b:5d:9a:da:27:44:17:61:2a:f8:3b:9d:
1c:b9:b0:40:57:1e:a1:2e:32:be:56:b0:4b:e8:5e:6a:eb:95:
93:e6:28:ad:89:ec:b7:cf:d5:c1:25:1d:6d:b7:fe:72:e4:0f:
b2:bc:68:c8:09:f5:22:4c:38:c0:ba:86:fb:e0:24:9a:0e:82:
3f:d7:b8:ce:ea:7f:eb:c4:2d:d6:0e:c3:8b:6c:ea:53:a4:77:
5f:c2:88:a2:be:5d:ff:27:cd:d3:a5:8f:1f:49:cd:be:f1:fc:
50:78:75:92:da:f0:b5:6a:00:0c:5c:ac:3d:96:9f:dd:62:f3:
b8:e0:6a:b0:16:ca:5c:d1:c2:53:f4:34:8e:ac:eb:c2:47:cc:
73:68:9b:2d:14:bc:1f:c5:c0:9d:35:5e:a9:c0:9d:c5:1f:55:
5f:54:66:b3:1a:58:f3:e0:90:db:d3:43:ef:81:d4:f7:50:e8:
5b:2e:b1:4c:51:b9:bc:d7:70:dd:9e:32:25:08:fd:3c:ce:77:
cf:83:08:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:14:05 2025 by rpki-client