Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
File: GyceKuYih3VSuJ28R016EwWEpI4.mft (raw, json)
Hash identifier: 33xV1+qTYHs2zTJ0VTrorQNmZT5BPvmV6g2Hycsvq4s=
Subject key identifier: E2:EE:18:19:FE:CA:09:7F:D5:B4:B1:62:DE:1C:D2:B9:E4:D6:14:78
Authority key identifier: 1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
Certificate issuer: /CN=1b271e2ae622877552b89dbc474d7a130584a48e
Certificate serial: 01965425397BECB87A98419647B7F974493D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
Manifest number: 090A
Signing time: Sun 20 Apr 2025 17:00:47 +0000
Manifest this update: Sun 20 Apr 2025 17:00:47 +0000
Manifest next update: Mon 21 Apr 2025 17:00:47 +0000
Files and hashes: 1: GyceKuYih3VSuJ28R016EwWEpI4.crl (hash: SZ6IL32FQAcUEsvVySOd3xa4bTprQEyXqudS7zORt8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:39:7b:ec:b8:7a:98:41:96:47:b7:f9:74:49:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b271e2ae622877552b89dbc474d7a130584a48e
Validity
Not Before: Apr 20 17:00:47 2025 GMT
Not After : Apr 21 17:00:47 2025 GMT
Subject: CN=e2ee1819feca097fd5b4b162de1cd2b9e4d61478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:b7:bb:31:35:81:6c:be:d3:d1:d2:91:34:
c4:65:f4:6f:52:6d:ba:9e:c4:61:e2:e1:27:7d:42:
b9:63:5e:18:f7:9d:be:c3:7d:f2:12:b6:c2:5b:02:
28:1a:7f:49:c1:e3:ae:7b:d8:06:20:96:00:27:20:
6c:75:97:de:14:81:6a:8e:92:17:71:46:8f:0a:8e:
c2:f1:2b:d1:6f:25:d9:98:14:60:4f:e7:9a:ae:c6:
a1:de:8f:0c:80:fd:cf:2e:0b:9e:24:2d:bc:d4:7d:
06:55:93:a2:90:45:dd:71:d5:e5:bc:f5:e0:cd:13:
cb:d2:6b:d9:33:a8:d0:2d:9d:69:f4:42:71:6c:71:
bb:dc:e7:eb:18:61:6a:7a:58:d2:f6:a0:b1:45:af:
1d:26:17:e0:9e:5a:d6:71:0f:37:27:43:4d:3a:97:
a3:50:cf:bb:7d:67:37:fb:f7:d3:23:e8:2e:fd:92:
ab:3c:3c:97:3b:5e:6a:d9:09:fd:7e:62:43:71:55:
d2:c4:27:bf:11:a6:09:c2:66:26:bc:c0:e2:36:f6:
93:52:27:bb:3c:36:5a:ae:c2:4a:f9:66:8a:c6:b1:
65:a6:3f:21:92:53:09:e4:2f:89:8a:d6:49:d4:4d:
96:58:bc:d4:52:73:6f:f4:f5:d9:73:ab:48:80:81:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:18:19:FE:CA:09:7F:D5:B4:B1:62:DE:1C:D2:B9:E4:D6:14:78
X509v3 Authority Key Identifier:
keyid:1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:03:ef:86:b1:54:b4:43:4f:9c:5d:07:a7:91:ac:5c:af:25:
0d:7e:82:73:15:a6:27:df:55:fd:65:76:3e:3b:19:90:e7:34:
a8:ff:57:53:f1:14:bc:8b:19:2a:fc:32:44:e6:b1:3a:d8:44:
5c:96:fa:b2:9c:2f:dc:23:5c:f8:6b:a3:0e:2b:61:35:5a:45:
8b:01:d7:ec:95:fd:04:99:c5:08:07:44:fd:2e:1c:94:33:05:
fb:ca:d3:27:52:dd:e4:ca:bd:70:7b:2f:43:d3:65:81:88:e0:
6f:f4:20:0e:d6:ab:0f:e6:46:18:d0:c6:31:0d:17:d8:78:ab:
28:ae:3d:9c:4f:68:0b:5e:32:81:0c:60:58:e0:fb:70:bf:2f:
31:86:3e:ba:10:c8:0a:bf:9a:19:42:8d:02:f9:b8:4c:74:7b:
62:db:8e:47:14:63:08:70:19:16:7a:35:62:63:cc:7e:ba:f4:
02:0a:33:d0:73:1d:5f:57:77:bc:9b:67:63:5b:3e:f8:8a:76:
e8:2b:c8:f3:cd:66:1c:65:1e:d2:00:00:25:4f:7c:0a:1f:0e:
df:1f:11:94:a6:93:32:ba:11:75:9c:14:e3:ae:f5:5c:51:cc:
cb:18:b4:2b:03:e8:2d:d2:be:ab:a5:5e:ac:67:a8:4b:b7:54:
4b:61:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:23 2025 by rpki-client