Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier: KQMdmLFltevub5uoCO/Bx3Zut7YAEloqZnnx9+uhqUk=
Subject key identifier: A9:DE:83:95:D4:79:DD:45:99:43:80:37:FC:CD:AF:31:EC:05:AC:65
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial: 01965793D5CD327DDAD5E5748CB7E103AEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 09:00:28 +0000
Manifest this update: Mon 21 Apr 2025 09:00:28 +0000
Manifest next update: Tue 22 Apr 2025 09:00:28 +0000
Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: x5r8YOglEFkR6OFaiXmDH21ZYSaOTvsk+VjB+yBedgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:d5:cd:32:7d:da:d5:e5:74:8c:b7:e1:03:ae:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Validity
Not Before: Apr 21 09:00:28 2025 GMT
Not After : Apr 22 09:00:28 2025 GMT
Subject: CN=a9de8395d479dd4599438037fccdaf31ec05ac65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:55:a8:a2:4e:f3:56:7f:91:12:fc:02:a5:04:
de:73:03:f9:da:dd:43:60:cf:9b:23:25:6e:ac:b7:
83:08:01:05:5c:84:e0:78:72:d8:d2:81:8e:81:53:
ef:62:15:80:3e:aa:b0:32:6f:75:c9:79:dc:93:b0:
53:86:3b:09:9a:38:47:c9:48:16:29:e7:af:2a:b8:
ef:b9:2a:29:96:1d:dd:cb:5b:33:ab:73:0d:6d:7d:
a3:87:90:9f:39:eb:fb:28:1f:40:6b:3b:78:96:56:
9a:ce:ad:39:a4:e6:86:ef:0e:d3:59:d2:69:cf:36:
f5:42:8d:69:ae:ef:a8:2d:fd:16:1d:95:1f:44:dd:
ae:37:fd:76:78:dd:bf:c1:5f:67:50:1d:91:ee:27:
a5:cc:ea:87:12:f3:95:1f:05:d4:2e:f7:1f:fd:ee:
70:7d:4c:fd:dc:ea:5d:e0:16:59:10:75:59:42:bb:
58:f3:cd:6f:4b:96:89:fc:9c:6b:88:92:2a:b8:fa:
59:02:30:c6:c1:91:d1:06:29:c6:3f:27:c0:14:2f:
96:4c:f5:5f:0c:75:07:1d:66:ba:d0:22:f6:f1:ad:
c3:bb:9e:67:e7:90:24:e7:a0:69:3c:cf:24:f8:d8:
7b:05:62:40:b7:f5:f2:e2:7d:72:1e:b6:75:a9:f5:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DE:83:95:D4:79:DD:45:99:43:80:37:FC:CD:AF:31:EC:05:AC:65
X509v3 Authority Key Identifier:
keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fa:2b:7a:aa:1f:7c:26:77:33:80:b3:91:9e:55:59:1a:d0:
fa:85:ca:62:fa:e8:45:f9:60:8b:fc:40:47:04:83:fd:66:2c:
3e:b4:4c:84:b3:c0:4b:a3:2a:12:53:e9:67:57:10:08:77:b8:
f5:42:a3:12:af:91:9c:2b:07:fd:9d:f5:60:97:cf:68:11:a1:
a1:18:6a:e3:3a:6b:b7:35:7d:70:b1:91:63:5f:e3:01:a6:28:
9b:fc:db:d7:af:4a:d8:0b:86:b9:88:61:0e:3c:78:80:b1:84:
69:59:26:75:55:ce:60:cf:d3:60:e8:f8:93:82:c6:15:73:ae:
ee:86:da:ce:bf:34:8a:e9:6e:a1:09:29:71:a5:88:5b:8b:34:
24:80:5a:7e:bd:0d:68:ad:55:17:95:bc:5e:05:2e:c6:1f:6f:
86:83:bc:73:66:d0:97:76:9b:8b:91:b8:b3:7c:93:8f:f3:17:
ac:1a:e5:28:8d:3c:dc:cd:a0:fe:72:58:d3:ce:31:8d:c7:3a:
88:e0:58:34:85:78:86:90:50:fd:4a:dd:bb:de:2f:e9:38:46:
f2:86:43:b9:64:60:6f:2c:5d:82:5d:4d:c5:cc:e4:e9:58:e9:
27:6b:fb:d6:be:55:17:2a:83:80:fb:fe:e0:c2:98:99:c6:10:
28:70:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:28 2025 by rpki-client