Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: 0NKEktKw7DINBeDHfHnqR9gAQcrZ+ehF7Q0oCG5y09Y=
Subject key identifier: B8:94:23:C7:1D:6A:91:DF:55:8A:85:FF:90:37:4E:4B:B9:9B:74:F7
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 0196BE9358602878E37A171A5FC07151BFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 09:00:49 +0000
Manifest this update: Sun 11 May 2025 09:00:49 +0000
Manifest next update: Mon 12 May 2025 09:00:49 +0000
Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: yJ+eyWgb7++uT+ZBgSCdMSfHL4vfYANDG9zVjhb/Sos=)
2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:58:60:28:78:e3:7a:17:1a:5f:c0:71:51:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: May 11 09:00:49 2025 GMT
Not After : May 12 09:00:49 2025 GMT
Subject: CN=b89423c71d6a91df558a85ff90374e4bb99b74f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:30:c3:3f:b5:c1:af:db:c1:81:14:6a:8a:
f0:18:ae:6e:18:33:f4:12:b8:83:3d:7f:e8:88:d4:
d0:7c:56:47:d6:ad:6e:68:45:07:7d:ed:78:bf:c6:
70:65:1f:e2:77:54:5d:b4:48:c2:46:aa:e4:8a:4f:
8f:c6:cd:12:d3:25:fa:68:5b:60:a2:60:4c:7c:ef:
46:7f:6b:f5:72:fc:e9:06:24:dd:f1:45:11:cd:63:
40:f3:56:8b:81:0f:6e:53:ef:8b:4d:7f:fc:71:63:
2d:f2:1a:33:78:01:06:94:af:35:f8:99:8b:7e:78:
e7:78:1f:f1:52:c3:74:a8:1c:da:8a:af:de:d2:88:
d4:39:f2:8e:1b:c1:d9:b6:6e:36:89:28:cb:47:0d:
d6:7f:b6:2f:23:6b:7e:fa:b5:5e:06:76:d6:f6:1f:
9c:8e:e0:cf:54:8c:c5:08:8d:c3:dd:32:00:7d:9f:
13:e2:6b:f8:1e:5b:21:a0:c5:c5:3c:26:6a:23:6f:
58:2a:a5:50:f9:2f:1e:00:e3:64:56:d9:db:bd:d4:
6f:26:5b:70:37:91:b4:c6:9b:f9:bb:fb:6e:7c:8b:
6e:0a:68:f4:ac:6f:7c:1d:28:98:fa:a4:ff:01:f9:
d8:27:26:5c:e8:01:55:a6:87:a2:ae:6d:11:b7:4a:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:23:C7:1D:6A:91:DF:55:8A:85:FF:90:37:4E:4B:B9:9B:74:F7
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4f:c3:b1:d1:0d:ed:11:6c:37:92:f7:38:ff:a1:40:9d:60:
04:02:11:ab:09:03:0a:17:5f:f8:6f:3e:87:32:d5:f3:ae:df:
6d:79:47:0f:1e:ab:58:03:f7:4e:7e:92:75:02:1c:fa:ec:f5:
d6:7f:69:51:78:1e:56:bc:3e:f2:3b:57:39:9f:54:6b:57:9a:
97:94:19:65:8c:8e:b9:6d:30:be:a5:2e:ea:0a:4f:9b:cd:41:
ba:3f:ec:0e:1a:96:83:b7:4d:73:91:0f:b2:57:67:8a:91:57:
63:17:27:49:ee:75:d4:c6:71:d2:83:8a:5c:4b:44:02:e8:47:
bc:7f:3c:0a:4f:57:a8:a1:50:05:65:92:48:d5:66:a6:e1:13:
45:b8:da:49:3e:2b:91:7b:ab:49:3c:46:3e:94:a0:a3:57:25:
a2:79:ad:58:b3:e1:92:c3:60:5a:18:51:a8:e5:e6:a6:eb:1a:
f4:02:4b:99:7c:71:ce:73:b1:fb:ee:bc:26:47:ed:f8:f2:51:
b3:42:31:d6:8a:4c:4b:35:d5:d1:e5:03:41:dc:61:b3:de:05:
e9:3f:3d:78:07:64:d7:e1:6a:58:8a:2d:68:ed:8c:ba:a6:c5:
2d:6c:34:f9:52:a1:04:92:cb:8b:62:0b:b1:c4:bd:d8:38:ba:
b1:06:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:43:15 2025 by rpki-client