Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File: g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier: aT2Ou9fqn8y3luv2Z0KA3rnAGvz/74HsFrXaX7EDC3w=
Subject key identifier: 3A:B7:E4:F3:CB:85:E0:C2:AC:67:5A:8C:43:A4:97:5B:EC:69:F6:32
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer: /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial: 01965500847027A7AF17882174E3DC438B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number: 02F7
Signing time: Sun 20 Apr 2025 21:00:19 +0000
Manifest this update: Sun 20 Apr 2025 21:00:19 +0000
Manifest next update: Mon 21 Apr 2025 21:00:19 +0000
Files and hashes: 1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: 1U8XP9qVHlHKUiXmumel8sg6rP5fPdvFCW0o1BNdEz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:84:70:27:a7:af:17:88:21:74:e3:dc:43:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Validity
Not Before: Apr 20 21:00:19 2025 GMT
Not After : Apr 21 21:00:19 2025 GMT
Subject: CN=3ab7e4f3cb85e0c2ac675a8c43a4975bec69f632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:9c:d1:fc:67:5d:38:70:eb:6f:7f:62:31:
f3:00:8b:3f:8d:c4:fb:94:16:89:f2:dc:24:e5:0d:
21:35:4a:49:42:25:e1:be:4f:56:ac:3a:6a:a6:3e:
7c:ea:01:97:42:15:6d:be:8f:a7:80:ae:82:9e:61:
ef:0c:17:e3:a5:c3:e8:8f:70:21:99:15:d6:60:29:
29:28:6e:38:9a:ec:4e:24:fb:34:32:4a:51:07:e4:
75:4b:d5:27:2b:c3:a5:5f:85:22:f7:84:46:09:00:
ee:e8:69:4f:3b:e2:ac:e2:ca:09:91:cc:ec:3e:7d:
f1:f6:31:05:3f:d1:a6:06:be:99:22:bc:f8:c6:84:
0e:26:82:a7:77:b9:45:88:b6:38:9a:6c:c3:d5:54:
cd:d9:02:1a:35:8a:d2:60:96:e9:6e:15:b7:ce:51:
b5:dc:af:d2:8a:ff:da:35:f9:04:4c:ea:38:4e:71:
2c:5a:20:9e:da:0e:89:68:7b:36:8f:b0:a4:70:67:
8f:bc:2e:13:db:b5:fe:f4:f5:be:c0:29:80:a1:00:
d3:12:2f:ee:90:24:9d:20:57:f8:5d:f9:a5:a9:33:
d8:c9:bb:9f:60:fc:42:c3:7b:41:e3:49:01:e4:47:
e8:e2:9c:29:9e:bb:5b:87:b7:5b:44:62:f8:43:1c:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:E4:F3:CB:85:E0:C2:AC:67:5A:8C:43:A4:97:5B:EC:69:F6:32
X509v3 Authority Key Identifier:
keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1b:a9:52:19:86:0c:87:bf:72:20:db:96:b7:6c:96:2f:9d:
9d:6d:6a:f3:5c:6a:97:5c:31:c7:ba:c6:8e:30:4a:d5:b0:48:
30:89:53:76:4e:4b:62:26:c1:fc:23:fc:1b:cd:10:0f:9e:8e:
38:87:59:69:78:0c:f1:b5:56:0d:0a:9a:ac:61:ca:32:90:92:
ad:09:9f:32:cf:c6:45:68:55:00:44:3f:2f:12:03:cb:f0:18:
f7:0a:af:21:87:72:c3:93:8e:28:2f:4d:d9:32:6e:f2:a4:71:
04:a1:a8:e7:ee:fe:67:fb:bf:ee:b3:d9:53:ea:33:bb:90:24:
0f:31:31:4d:bb:f2:27:31:d1:56:df:de:c5:7e:81:db:b8:19:
97:c2:a9:19:82:5e:4d:a5:e6:61:4e:47:1a:bf:b8:6e:9e:50:
0d:c4:ea:15:b8:60:ed:40:92:b4:57:11:e3:51:d7:3b:14:89:
8a:92:ba:1a:d4:16:cb:63:d1:fd:14:10:fd:be:c1:fe:e3:49:
8b:5a:70:ea:30:88:ff:7f:b6:24:c9:fb:d8:17:7d:7e:ad:c0:
22:51:43:56:f6:e2:bf:7f:35:02:30:34:5a:ae:e9:4e:f2:e8:
b0:69:e3:55:aa:33:1f:19:2b:b9:d9:c3:29:fc:27:38:4a:3b:
9a:82:cf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:37:56 2025 by rpki-client