Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier: E9n4LpIEHi5GYDJFQqZsJLQe8w1040MmHw8WVvmvl8A=
Subject key identifier: 84:F2:A1:C9:56:1D:B9:5E:A6:6E:A2:A9:5A:6B:3D:3B:49:BA:D2:5B
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial: 01965F84095AB45A55E4782D0BDC842E63FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 22:00:10 +0000
Manifest this update: Tue 22 Apr 2025 22:00:10 +0000
Manifest next update: Wed 23 Apr 2025 22:00:10 +0000
Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: F5r7IzuXuA7JaCUtibPRZoEFgH9onoRY8Re2AG+EZ1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:09:5a:b4:5a:55:e4:78:2d:0b:dc:84:2e:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Validity
Not Before: Apr 22 22:00:10 2025 GMT
Not After : Apr 23 22:00:10 2025 GMT
Subject: CN=84f2a1c9561db95ea66ea2a95a6b3d3b49bad25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4e:0a:84:1c:92:a2:ca:31:96:7b:a0:2d:42:
4b:c8:04:9f:79:12:53:1f:68:69:ea:e4:1d:9a:dc:
46:5b:e4:d6:44:c7:08:90:8d:de:6d:0a:4e:7e:73:
0e:66:fb:86:59:e5:da:7a:e7:ff:e6:ce:27:6d:e7:
3a:5b:58:3b:f7:01:10:0d:42:8c:5b:d9:82:96:a0:
b2:6a:ac:89:bc:71:56:3b:ca:f7:22:65:50:ba:94:
44:7e:dc:77:d4:63:55:88:98:0a:5c:c5:7f:1a:94:
2b:5d:51:4a:05:a2:ac:ac:c4:95:0e:bc:d7:69:2c:
c0:64:c2:8d:d2:df:0b:a4:60:da:a2:79:46:a7:84:
69:d1:c2:c5:94:0c:81:3d:b4:47:65:8c:3e:f5:6e:
c5:5e:9b:39:48:8c:ee:b9:44:0b:68:52:7e:f5:e2:
bb:0b:2c:97:3f:8b:88:ff:25:f6:34:47:c4:10:98:
c8:99:35:14:3b:4f:96:15:cd:9b:d4:72:93:30:f8:
8e:70:49:f6:ed:c5:54:43:2c:53:d4:cb:c3:8f:39:
68:33:30:76:bf:2f:d5:47:78:31:2c:6d:d4:35:4d:
22:92:b5:83:63:10:5f:96:23:56:08:25:0c:5d:a0:
b6:5f:19:58:12:44:07:72:d4:d4:07:7a:62:dc:b9:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:A1:C9:56:1D:B9:5E:A6:6E:A2:A9:5A:6B:3D:3B:49:BA:D2:5B
X509v3 Authority Key Identifier:
keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:43:b7:f7:f9:fb:c0:54:00:aa:a0:b5:f7:dd:ed:8b:8f:
7a:fd:3c:4c:31:d9:56:18:05:92:ff:88:e3:9d:fa:e2:18:3c:
b3:d5:bc:e7:a2:b5:02:19:a8:06:04:87:82:83:ec:57:59:92:
bd:72:01:79:1b:19:37:a9:06:cb:98:e2:2a:ee:87:ad:d4:54:
9b:1c:45:1f:f7:f8:b3:4c:20:19:13:af:38:27:79:07:01:96:
48:49:58:a5:08:78:2e:d4:a8:db:3d:6e:5f:6c:0f:ac:64:88:
59:2d:b8:a5:eb:fc:b9:fb:19:40:3c:14:bd:a6:a1:86:07:18:
92:5a:58:c8:c7:6a:70:0f:ab:35:95:42:d4:cb:12:f2:5c:87:
cb:49:2e:02:6b:f1:84:c9:09:3c:fa:8a:a9:46:32:ae:1d:1b:
18:34:a4:ed:ab:6a:86:b1:3a:79:9d:ff:2a:5d:34:31:f3:bb:
4e:d1:b3:d7:69:9a:c8:61:82:18:70:c4:a1:0f:1f:24:a6:67:
78:f8:fb:ae:6e:76:87:ff:ab:09:ad:ff:10:ff:1f:0d:f1:a7:
eb:dd:a9:0d:b0:84:0e:b2:de:48:2e:be:b9:0d:0f:f6:f3:1a:
d5:51:d4:31:44:38:82:4a:4d:81:b9:b2:37:54:6f:af:ec:01:
84:cc:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:00:24 2025 by rpki-client