Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier: /xGEYihbgZf+xDiMs2Oa9C08bxPCRlkWPukawpCA/zU=
Subject key identifier: D3:7A:B5:5F:9E:15:CF:7B:9B:A8:37:82:4B:E7:1B:36:DB:03:38:CA
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial: 0197B88F1D3A87EF4764AD975BAF37B76546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number: 08E2
Signing time: Sat 28 Jun 2025 22:01:16 +0000
Manifest this update: Sat 28 Jun 2025 22:01:16 +0000
Manifest next update: Sun 29 Jun 2025 22:01:16 +0000
Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: ioJvQAx69ma9DXi6OfsL6CbKoicluHG+HQgZsiOD4Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:1d:3a:87:ef:47:64:ad:97:5b:af:37:b7:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Validity
Not Before: Jun 28 22:01:16 2025 GMT
Not After : Jun 29 22:01:16 2025 GMT
Subject: CN=d37ab55f9e15cf7b9ba837824be71b36db0338ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:3a:e4:0a:f2:5e:43:5f:39:67:17:f2:35:
ff:d6:57:6a:a4:05:5d:17:f2:06:38:b4:80:e4:9a:
1a:e4:13:55:39:b9:7f:0f:c8:0c:13:f7:0a:1d:21:
17:bd:6d:11:79:b3:b8:a5:17:71:a2:77:54:73:0a:
41:02:b9:05:58:69:37:df:3b:3c:fe:4e:6c:01:99:
75:fb:b6:c3:af:ad:17:ba:5c:e2:85:69:80:bd:87:
07:84:75:b8:7e:65:fc:ff:12:0d:04:39:9e:4f:46:
fe:15:78:32:32:15:df:2d:0c:1d:0b:cb:60:74:f8:
a1:79:f8:8e:e2:bd:17:f8:d8:e7:05:5e:e2:e0:bf:
d8:74:bb:56:85:3b:f0:7f:c6:5a:af:79:d8:ed:8e:
e3:92:32:df:e6:19:3d:16:61:c3:a1:fe:0e:88:99:
17:91:71:3c:fb:5e:34:c9:92:69:39:2b:ef:b6:bd:
24:6c:5a:9f:1e:03:5d:24:1a:7d:3e:f6:8e:50:bd:
10:ab:ae:a1:36:63:04:69:e8:c8:7a:2e:4c:5e:23:
54:44:b4:bd:9d:e3:1e:00:f6:75:c1:dc:9d:44:c6:
94:b7:8e:aa:cb:01:3e:95:70:14:96:09:cb:21:b9:
21:82:ce:62:6d:1b:45:ca:10:af:93:0d:ea:23:74:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:B5:5F:9E:15:CF:7B:9B:A8:37:82:4B:E7:1B:36:DB:03:38:CA
X509v3 Authority Key Identifier:
keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a8:15:73:7b:0d:be:ef:90:da:ad:75:39:e0:e6:c6:71:3b:
a1:ad:6e:ee:3f:b2:0f:9c:a1:93:45:ae:12:7a:79:6f:51:c3:
f4:76:3e:6a:74:3d:38:ea:3d:34:38:d7:dc:a3:95:2d:4a:88:
ea:0b:a4:5d:de:25:6f:89:51:9c:f4:c5:81:e1:1c:b7:8c:02:
9e:c3:9b:b9:8b:3e:cd:a1:8e:8f:1a:8c:24:fb:14:1c:4a:95:
3b:fe:e5:87:68:77:1a:a3:a1:bb:f4:b2:58:6f:23:02:69:b6:
f9:26:a1:9f:bb:19:02:3b:96:ff:97:82:b3:24:94:43:2c:02:
c8:76:9f:84:c4:d9:6c:e2:ff:f5:47:05:45:1a:45:cd:5f:e8:
c9:9f:fc:76:4b:f5:c6:43:07:d0:42:cb:d5:b3:ad:8b:03:ee:
75:6d:60:bf:7a:ed:85:6f:6e:ce:4a:93:34:13:29:88:50:58:
c0:79:26:65:60:fa:ad:23:4c:f3:52:e9:3e:90:2b:7c:13:a1:
e4:9f:c2:00:f6:29:73:63:8e:f2:74:07:5e:6f:b2:9d:eb:5f:
75:5b:d9:07:69:c3:e3:01:f9:1e:bd:a3:a1:b7:78:5f:29:df:
03:cd:14:46:1b:16:46:09:c3:8e:96:5f:bd:5b:4f:bd:59:2f:
b3:5d:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:04 2025 by rpki-client