Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: f+3Sgz9M1HUyTf1GfSxSLU15zBPCt8PogeWwnHZ7IvQ=
Subject key identifier: 81:D0:A3:B6:0B:B1:C2:42:19:8B:43:A2:66:9D:75:6D:EB:E7:09:71
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 0196B10E41C852EEA6FF5B7E3F55562D6002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 037E
Signing time: Thu 08 May 2025 18:00:23 +0000
Manifest this update: Thu 08 May 2025 18:00:23 +0000
Manifest next update: Fri 09 May 2025 18:00:23 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: k10rZjQNMD8vjkjVkjtmkSAmnkxqQHXxZme+cuNdh50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:41:c8:52:ee:a6:ff:5b:7e:3f:55:56:2d:60:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: May 8 18:00:23 2025 GMT
Not After : May 9 18:00:23 2025 GMT
Subject: CN=81d0a3b60bb1c242198b43a2669d756debe70971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e9:9e:b9:89:0c:dc:ad:a6:ea:ef:16:d0:78:
59:e0:9a:01:74:f8:db:79:b0:95:2d:91:28:07:9f:
84:60:de:1b:d7:5d:85:c4:cc:a1:09:ca:fe:30:01:
9b:75:aa:a5:59:05:ce:34:83:17:85:78:38:75:d8:
55:eb:9a:42:1d:4a:73:a4:50:2f:ac:73:e8:d7:bd:
35:bf:92:66:0d:a9:25:1a:02:29:99:ca:7b:97:96:
b7:e4:ff:05:cf:83:a1:c4:74:cf:ac:fd:ce:cf:ae:
93:f2:97:09:96:c0:fc:85:83:98:60:ac:32:9b:38:
8e:1d:92:46:01:3f:51:d5:e2:03:69:b8:ce:e9:52:
bb:bc:b4:eb:05:d3:0d:c5:f5:23:b8:17:0c:2d:be:
93:dc:12:26:f1:a7:cd:bf:89:b2:35:60:93:83:cc:
25:48:b4:2d:f0:68:3e:91:31:22:c3:4b:63:50:bc:
e7:5a:c1:f5:c2:71:61:4e:f6:6a:6f:8e:fc:84:76:
e1:80:c3:62:9e:2d:fb:e3:8c:fd:c7:24:77:bf:0c:
8e:d9:1f:22:cd:52:a6:1e:f1:ab:b6:31:e8:b5:b3:
3d:4b:bb:7c:98:cf:e3:97:56:08:27:fb:5f:02:de:
d6:76:2f:ee:66:61:d9:02:49:62:85:b2:dd:89:82:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:A3:B6:0B:B1:C2:42:19:8B:43:A2:66:9D:75:6D:EB:E7:09:71
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3d:24:2c:fd:cf:d6:70:56:18:46:37:04:35:1e:f2:ec:ad:
01:71:af:a9:8c:cd:6a:c4:f3:82:89:59:23:8d:c6:2b:8a:8b:
45:c7:8b:e2:ed:20:0d:7f:aa:ff:50:f7:05:a0:67:bd:b1:95:
76:f1:6b:fe:c0:3d:56:8a:5e:5d:23:51:bc:f4:37:d5:0a:59:
68:1f:b2:04:c5:ce:5c:8d:5d:1c:ce:e8:2c:97:54:11:98:30:
4b:80:9a:86:39:47:e1:9b:c7:39:ff:2d:9e:51:4d:da:46:b4:
ef:db:77:69:ae:b5:e6:8c:d4:64:ba:23:0e:85:b3:db:50:cf:
be:f1:c1:1c:a1:18:08:97:db:b6:a6:35:b6:6f:5b:2b:53:29:
1f:e1:0d:2b:3e:3b:15:c3:c9:68:9a:5b:35:a1:af:d7:b3:b6:
4f:3b:ff:39:ab:5e:d9:0b:bf:c8:e3:c3:96:0c:68:93:8d:4d:
8a:98:69:7d:d5:df:ea:48:69:b2:43:2c:31:57:84:14:00:dc:
0b:01:b2:91:e1:f8:c7:6b:54:1d:62:59:67:6f:d9:bd:67:d8:
52:37:10:99:89:f7:1f:4c:db:e4:7a:8e:94:bd:77:76:5f:71:
e1:e3:d6:36:df:7d:dc:b0:26:af:31:24:14:59:32:ee:84:60:
ab:de:b2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:00:01 2025 by rpki-client