Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: W0Xf/xeh6qx5CkFHNjGb8GE1Dxd9Cy2sqfxqlNa8Zms=
Subject key identifier: 68:92:EB:8B:F2:2B:EB:B5:AA:03:8E:C8:1E:80:69:8A:CE:0E:BB:16
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 0197B6A0878D633ED678CBF2EDFB1FCF0FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 10F9
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: sn8+zUqD0gSlPIAlZeqw3b9bY8eKA/keM4FELlWMFTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:87:8d:63:3e:d6:78:cb:f2:ed:fb:1f:cf:0f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=6892eb8bf22bebb5aa038ec81e80698ace0ebb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:e7:53:40:fc:92:34:eb:43:98:ae:7d:44:
f8:c9:92:b9:68:93:34:65:6e:6b:a1:4e:4a:33:88:
13:85:3d:d0:9f:1e:3a:b6:27:31:f2:31:ac:0e:cf:
e2:20:be:c9:76:66:18:e8:31:e9:24:1e:e2:00:bd:
b7:5e:83:5e:fe:0b:18:33:23:0a:09:5f:4d:45:0c:
9c:37:60:7e:1b:be:6f:47:0c:04:97:be:f3:5f:60:
f9:fa:73:d6:06:36:5c:4f:aa:5f:ab:ce:43:07:f6:
7e:2d:fb:61:60:35:92:14:7f:d9:d4:7f:d9:73:c3:
87:19:60:c5:8d:77:fe:a8:2f:44:01:8a:da:cb:e5:
e7:dc:3b:51:d3:08:69:a0:76:28:41:31:65:b2:8a:
31:d1:21:39:2c:3d:51:80:6d:41:8b:d3:c1:de:a2:
13:3a:4e:81:93:d6:18:3f:1b:c3:4b:f0:aa:3e:a5:
8a:3a:05:6d:2b:05:73:fd:62:e2:05:69:94:2c:90:
20:83:a5:c7:50:ee:2e:16:f4:80:f0:0c:c6:d3:e2:
a8:42:6b:62:91:4d:47:74:c8:fc:a4:73:0c:9e:8a:
bb:af:f0:dd:ee:dc:7f:be:5c:3d:4f:a4:f8:ba:cb:
f0:53:a1:29:d6:3b:f0:f9:15:2c:69:c1:59:a9:50:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:92:EB:8B:F2:2B:EB:B5:AA:03:8E:C8:1E:80:69:8A:CE:0E:BB:16
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:83:00:bf:7f:97:18:c6:5e:a1:6b:35:c2:a9:48:f0:01:83:
f1:67:e8:d0:a3:bf:f8:05:1d:3c:fd:2e:e7:20:7d:ff:4e:a7:
f8:1c:2b:db:6a:20:e0:6e:86:75:cb:d1:44:5e:83:d4:2f:e7:
33:75:33:ea:98:4a:12:97:a3:83:8b:1d:9a:b8:f9:1e:24:a9:
af:33:97:ad:15:99:14:a0:1d:4b:93:a7:69:cc:96:ce:b9:b2:
9e:ee:cc:7f:d2:44:49:22:11:c5:c9:ff:d8:53:c9:fc:bb:8e:
dd:13:8f:e4:92:da:43:92:b2:b9:5f:e8:d1:4c:5f:df:b3:fd:
a8:84:0e:d2:40:59:ac:e1:69:06:12:67:04:39:55:8e:c1:e3:
40:72:e1:af:13:14:7f:0e:b4:16:5a:4f:ce:b8:f3:47:23:47:
e9:72:8c:0f:fe:14:c1:3f:69:9e:bb:7b:29:57:33:c1:ed:00:
c8:c4:d9:aa:d3:60:20:f9:a6:aa:fa:c1:6a:ca:bf:e6:22:13:
e7:4d:cd:7f:e5:5e:bb:12:12:f9:3f:25:ec:80:30:9b:48:5b:
06:04:59:cd:df:cc:8b:fa:6d:25:da:5c:c8:b6:0b:c7:89:ff:
c3:40:2e:f4:96:c1:a1:63:70:a9:dd:66:a1:f2:6f:d4:f5:eb:
0c:46:ff:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:50 2025 by rpki-client