Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier: xVBG/00tPrtndkE2HIUrbJcz0lexxukxfFzI0K2tMCg=
Subject key identifier: 41:9C:FB:6E:38:6D:30:DC:30:A6:2B:63:FD:01:B9:39:8F:65:A7:23
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial: 0197B8FD7D53D2247A6612EA12FD6F11C674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number: 089D
Signing time: Sun 29 Jun 2025 00:01:49 +0000
Manifest this update: Sun 29 Jun 2025 00:01:49 +0000
Manifest next update: Mon 30 Jun 2025 00:01:49 +0000
Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: h0o4+YSZrlLjubAtxmDiyJoii0JWkPd3CsVM5xgysjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:7d:53:d2:24:7a:66:12:ea:12:fd:6f:11:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
Validity
Not Before: Jun 29 00:01:49 2025 GMT
Not After : Jun 30 00:01:49 2025 GMT
Subject: CN=419cfb6e386d30dc30a62b63fd01b9398f65a723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:83:9f:f2:57:45:77:92:ee:98:b2:ef:44:
3a:29:f2:fb:c1:39:ed:2c:cd:38:9b:65:68:d1:ec:
de:c4:96:ec:24:4d:54:45:da:08:95:9f:65:2c:8c:
77:44:fa:d1:60:06:0c:1b:5e:55:3c:3b:81:19:6b:
71:0d:64:97:77:de:10:12:ee:a2:ab:aa:93:e1:e9:
30:6c:8f:bc:63:46:ca:de:d2:5c:76:14:ec:e8:e9:
41:37:c1:35:8c:92:86:63:1d:08:e1:cc:ab:06:61:
b0:f2:4f:1f:db:91:10:e0:48:0c:f4:c8:d9:18:d9:
92:c7:94:58:67:40:71:46:d6:27:2c:c5:89:92:61:
7a:57:68:27:02:d3:e6:a7:63:06:ca:8d:22:d0:ab:
66:19:3c:47:6b:48:6e:d9:65:92:22:6e:83:50:41:
b7:96:e6:c8:dc:e3:2d:4e:65:a2:ae:dc:80:f5:08:
d2:2b:b1:8a:51:74:08:c6:e7:83:54:c5:4b:b2:60:
d2:f8:5c:b2:02:8d:b8:a4:4f:6f:80:cb:2c:0e:be:
e8:b8:28:af:a0:33:44:e6:06:f7:fb:84:e7:d1:c7:
14:60:d3:d5:f8:10:85:7a:b6:a2:51:5c:f1:30:d7:
0e:7c:45:8a:91:2f:99:1a:63:a5:59:10:d7:3e:fa:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:FB:6E:38:6D:30:DC:30:A6:2B:63:FD:01:B9:39:8F:65:A7:23
X509v3 Authority Key Identifier:
keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:59:84:56:5c:dc:72:e7:5f:f7:57:64:d6:91:f6:60:7c:c2:
84:8e:ab:3e:30:44:9d:cc:59:c7:39:ee:37:b6:76:cd:5e:d4:
a8:50:21:39:ef:4c:5a:e9:85:9f:43:ca:c2:07:ae:3e:df:be:
12:ff:3b:b2:9c:a5:01:e4:05:53:ec:3d:ad:a2:c6:5f:81:1a:
e5:87:da:08:cf:5c:83:88:8c:7c:03:00:dc:a8:3e:df:0c:46:
f2:3c:06:00:5f:80:86:1e:0c:bd:29:9c:f0:ae:44:21:3d:95:
72:31:4c:93:32:3b:c8:c0:7c:2c:60:dd:5e:1f:df:55:a8:7c:
db:ed:8b:47:15:de:dc:05:3c:90:91:df:c8:2d:44:93:a2:3a:
a5:e3:d1:96:51:b6:8c:ef:d3:4f:bc:98:5e:fe:89:c3:57:48:
16:5f:14:00:13:85:8a:10:ce:50:f1:f0:21:d2:d9:bc:d3:87:
a6:b5:98:4d:0c:28:2a:43:b1:03:80:cb:4c:a3:20:bb:fc:ef:
ca:bf:02:24:fa:02:06:2d:71:d8:75:4b:dd:70:e3:3f:68:68:
bb:62:fa:7c:2a:88:85:9f:de:33:fc:61:85:9f:36:9a:ff:b2:
d2:09:d7:69:4c:56:e0:f0:c8:7a:88:e8:9e:67:7a:29:10:ff:
e3:26:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:31 2025 by rpki-client