
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File: Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier: erkMZpUPOKhFYO2mU2VRPw/dHgk99dxM94yv2VJzo9k=
Subject key identifier: 2E:E4:10:9D:72:5A:F3:C6:B4:4D:80:3E:E8:00:5D:5A:8C:82:2D:EB
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer: /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial: 01969F3F6138EEA30B1790CE748E14DA7E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number: 02A8
Signing time: Mon 05 May 2025 07:00:53 +0000
Manifest this update: Mon 05 May 2025 07:00:53 +0000
Manifest next update: Tue 06 May 2025 07:00:53 +0000
Files and hashes: 1: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: U1bJsTarOfP3+v8rW9a+PplLmBeOHCzuvvGDi8ZaLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:61:38:ee:a3:0b:17:90:ce:74:8e:14:da:7e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Validity
Not Before: May 5 07:00:53 2025 GMT
Not After : May 6 07:00:53 2025 GMT
Subject: CN=2ee4109d725af3c6b44d803ee8005d5a8c822deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:ef:03:c1:04:6b:11:bf:12:d3:f6:84:5c:
16:a8:82:fc:8e:b4:01:8e:a5:0c:ca:50:b2:29:9f:
8f:4f:25:0f:86:df:23:95:04:33:22:a2:77:d3:f6:
34:55:ea:fe:bb:83:b7:08:7c:92:ff:bf:8c:88:0e:
ec:6b:cc:91:65:7c:2e:ca:1a:4f:39:39:ab:0a:81:
6d:79:68:a9:46:68:8f:16:e0:7f:6b:d0:cd:f3:6d:
60:4f:4f:d4:9b:d1:ca:33:62:ba:a1:eb:20:45:cb:
e7:e8:30:33:29:36:5a:8e:9a:1d:b8:71:7a:e7:44:
d4:9f:88:59:a6:bf:78:00:df:9c:3b:3b:3b:2d:f0:
3f:12:c2:88:c6:68:a1:23:e0:dc:e5:74:50:f7:b2:
af:a6:82:5f:f1:7b:09:0b:00:e5:41:2f:22:09:aa:
11:88:cd:1c:a8:e9:5b:14:eb:c0:d3:8c:30:2d:f7:
e8:23:19:56:d4:e2:fd:06:7c:c9:1a:1b:89:94:b9:
89:08:8b:15:e3:78:4d:aa:62:64:5e:5d:03:73:8e:
6a:f8:4a:4f:cb:9b:17:90:03:41:ed:be:2e:90:08:
9f:14:49:44:e3:19:ef:38:d2:c6:a4:9e:4b:8b:ef:
47:48:1e:e3:af:3f:35:5b:d3:ac:4d:37:20:ac:86:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:10:9D:72:5A:F3:C6:B4:4D:80:3E:E8:00:5D:5A:8C:82:2D:EB
X509v3 Authority Key Identifier:
keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:80:10:70:d6:c8:7e:e2:71:13:5a:07:28:73:d8:ea:70:b7:
13:c5:95:54:dd:ae:f3:b4:04:ea:ab:35:1f:39:d2:ed:a9:83:
8b:32:11:05:c3:f9:ce:af:6a:8d:fc:b4:a8:67:b8:d2:cc:92:
07:fe:9a:e1:62:55:46:b9:9d:06:da:fd:f8:75:40:bc:b2:cb:
5c:36:1d:ff:01:2a:50:35:ce:e2:53:84:69:2e:1f:78:33:17:
09:42:2b:69:6d:c7:f9:b3:e1:7f:d4:4a:f0:45:42:61:37:08:
86:cd:42:7f:a2:d8:d6:65:85:15:c2:5d:d0:c2:66:98:b4:09:
aa:db:39:aa:d6:c1:0c:51:17:8a:64:55:d9:ad:f9:eb:a1:8a:
7d:ee:8b:b2:6a:39:80:5e:96:11:79:24:bb:d5:df:ad:9f:be:
6a:1c:4d:61:c6:e2:f0:c6:f0:99:a3:2e:46:e3:6f:c8:bb:c1:
d7:51:4f:56:aa:06:5d:53:36:13:be:4e:9f:03:0d:f5:79:09:
65:88:6a:14:75:9c:fc:ff:0e:64:1e:c9:d6:12:5b:8a:c1:54:
38:e3:9d:27:9e:f6:3d:f5:f6:ce:a1:37:8f:99:1f:b5:c0:2c:
e6:2e:3e:b1:57:7a:04:8e:b0:39:aa:0f:03:5d:d4:13:f6:80:
b3:bc:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:38:28 2025 by rpki-client