Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: akVui/iju24CBrjWddP3bUfmeehUIxeJsfMd9Z24zLI=
Subject key identifier: B3:A3:15:40:15:FA:24:47:E8:BB:F9:44:A7:79:28:19:89:B6:29:E8
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 0197B7B2E174742F725C6FF66B0ABF2DF2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:00:42 +0000
Manifest this update: Sat 28 Jun 2025 18:00:42 +0000
Manifest next update: Sun 29 Jun 2025 18:00:42 +0000
Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: TQXMLbBiDtNBExK6p/dZxzUoLigbuo1qHDyMVXTVDtk=)
2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e1:74:74:2f:72:5c:6f:f6:6b:0a:bf:2d:f2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Jun 28 18:00:42 2025 GMT
Not After : Jun 29 18:00:42 2025 GMT
Subject: CN=b3a3154015fa2447e8bbf944a779281989b629e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:da:fa:b1:ab:90:48:83:07:ff:e5:a2:cf:
76:4a:9a:27:b4:9e:08:f9:3e:f9:fc:21:33:65:8e:
1b:77:ae:30:91:27:ec:13:d1:3c:fc:90:5f:74:99:
ad:d7:8e:80:93:fd:be:46:95:9c:09:74:94:c9:c0:
10:da:ba:79:e1:63:e9:c8:6d:50:91:99:fe:be:d1:
4c:80:d5:c6:4c:5f:70:68:1f:cd:ee:97:9c:d4:df:
2b:92:86:cb:4c:16:b2:b4:0c:fd:87:dc:a9:c4:76:
b5:c2:2d:f0:b9:9c:17:94:c3:13:f5:38:6f:fb:03:
a6:2d:3a:18:80:42:6f:b4:2b:79:e2:db:a0:5e:b2:
bf:2e:a4:9b:92:6d:49:f0:9e:e1:1d:39:6a:ce:b7:
55:d3:e1:70:c7:35:01:b6:9d:5a:b6:88:9d:a6:f1:
33:c5:f8:e4:8d:8e:7c:38:ce:69:67:b6:9c:88:02:
e1:a7:ca:00:05:36:c8:2d:ae:35:9e:a6:06:f8:52:
38:15:20:bd:3f:bf:63:cb:18:0f:af:f2:a0:04:54:
c9:49:fa:31:99:3c:c4:ef:e0:6d:25:04:c4:ee:b6:
f9:5e:a4:a0:47:96:0d:3f:28:ef:4b:af:d3:bb:f8:
57:56:01:f3:bd:26:c6:2c:93:3b:50:61:c7:c8:43:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:15:40:15:FA:24:47:E8:BB:F9:44:A7:79:28:19:89:B6:29:E8
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:02:f5:b6:0a:9b:4f:ba:95:96:e4:2e:db:ca:c1:d6:33:
2a:50:c2:51:ef:fa:b9:9a:a9:aa:9b:7e:5e:c8:7e:f2:58:a8:
f4:73:bc:50:54:23:9d:f0:78:f7:ab:e2:27:31:15:d8:e7:e9:
d3:73:04:6f:ee:62:3f:a8:a6:f5:00:7b:6d:fb:bc:73:cb:2b:
7f:40:f9:ed:93:81:9a:42:57:8d:af:9f:e5:4f:1b:55:06:47:
83:c4:63:6e:2b:56:b2:d1:fc:30:09:0f:2b:92:1b:6d:53:04:
0a:b8:f9:0f:99:43:f3:59:b6:0e:f4:b1:70:f3:d0:53:fe:90:
21:65:0a:59:a6:a4:aa:63:d4:d4:e5:74:4f:62:00:0f:35:4f:
ed:44:a0:4e:67:64:b5:cb:f1:98:a0:36:a9:d9:86:04:51:40:
7a:14:b9:0a:8f:08:84:f1:f7:16:89:40:12:9d:f2:da:21:c1:
8f:b9:30:14:40:94:e1:03:a8:65:60:a8:7c:44:54:c9:5c:ae:
d1:db:e3:96:2a:b6:b6:0c:ae:32:ac:a9:33:e4:ea:0a:4d:4a:
7e:b1:45:13:00:1b:02:50:f7:84:96:58:fc:99:3c:69:ab:f8:
68:1d:9a:ca:1b:c1:78:91:1a:83:42:71:33:3b:47:8b:8e:95:
d5:36:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:25 2025 by rpki-client