Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: n5L3poynHqntEAj/9KpFdwXM3V7/nOWtz4WvU88ioRg=
Subject key identifier: AE:2E:5A:BD:62:3F:96:63:EA:72:85:23:B3:80:2B:95:26:45:A0:7E
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 0197B7B3499D78E5106ED43B8AC05AFF0C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 0406
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: f9RUgUDRzH8gWYhLycMfAEoHYcqJ5NnR3zDQjew1HRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:49:9d:78:e5:10:6e:d4:3b:8a:c0:5a:ff:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=ae2e5abd623f9663ea728523b3802b952645a07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:b4:3f:8f:e8:74:db:fc:6f:7e:2f:d9:63:
7e:a8:30:42:44:f3:af:33:8b:18:14:52:d6:11:21:
ac:5b:6a:19:4c:80:57:8a:38:0a:ca:56:fd:67:e3:
96:48:31:10:0a:d6:de:a3:f4:b7:ad:fb:b5:10:8b:
04:14:72:11:30:f4:90:67:08:b8:01:0f:39:13:80:
76:f6:dd:91:da:52:8b:38:88:3a:49:8a:3d:e8:c2:
47:32:2a:98:ea:a7:15:1f:03:07:5c:91:0d:88:5a:
38:bf:64:ee:71:57:7d:b4:25:f8:3e:c1:f9:a9:77:
4c:2a:ca:e6:a6:f7:10:85:95:fe:43:71:f8:58:49:
fe:da:a5:b6:8a:12:0b:b1:8c:d7:54:46:ce:e7:14:
81:bc:e1:f2:cb:59:04:d4:9b:f8:b2:a8:34:41:8b:
e0:4e:bb:11:b1:da:31:7d:8b:39:c7:35:2b:12:c6:
28:e7:58:a7:59:e2:9e:a5:5d:35:24:49:18:f5:c5:
b3:1b:27:94:99:0c:fa:60:70:f6:44:4a:1c:44:23:
0d:35:8a:6a:f4:8f:a3:7d:8d:84:ee:63:e8:fd:c2:
34:d7:ba:2b:1d:d2:73:21:7c:87:9c:fb:69:e0:e1:
2d:15:dc:8b:83:5d:50:24:62:93:b3:56:31:aa:4f:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:5A:BD:62:3F:96:63:EA:72:85:23:B3:80:2B:95:26:45:A0:7E
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f3:3e:3d:d7:66:89:93:01:72:67:1d:cd:e1:cb:bd:02:f8:
bf:d7:97:1c:77:c6:c1:42:0e:69:a6:b1:d0:88:e0:26:ee:4e:
5d:55:48:9f:2d:21:c5:c7:be:4a:e1:c6:cf:f2:3c:53:a0:15:
14:21:cf:d8:5e:f9:10:27:bb:df:d8:fa:69:b5:ad:89:34:13:
cf:0d:15:3b:4b:7b:d0:a5:d4:cf:52:6a:5e:50:52:86:bf:e2:
bf:49:74:9b:25:55:1f:5a:81:e6:30:57:5e:82:29:c1:a7:d8:
4c:4a:b6:3a:57:6f:4a:7e:f3:ef:e6:b7:32:35:04:34:de:a7:
f5:25:e0:4b:72:b0:9c:2b:4d:e0:e9:77:59:eb:ab:1f:b9:ba:
68:a6:87:46:48:a9:5c:d7:04:38:fd:17:00:78:af:c6:25:35:
90:7a:34:26:69:09:db:46:c9:d2:b5:4c:f9:55:aa:23:93:25:
f0:b9:11:0d:c1:b1:ed:26:3f:84:e8:b3:94:c7:47:0c:3b:4d:
43:57:31:67:38:a0:ef:5d:41:52:d6:ae:c4:f9:bc:8b:fb:d7:
14:e9:db:e7:c1:07:83:c7:2c:dd:61:19:11:20:60:88:7c:3e:
bf:98:ce:96:65:34:41:87:3d:a6:12:59:f0:89:9c:a5:ae:ee:
97:7b:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:40 2025 by rpki-client