Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File: GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier: 1wphlaqiId3sqA7xImYonGZNsBhjGn3k1C1fFo7QZWs=
Subject key identifier: 00:DB:CA:EA:04:AF:9E:14:EF:E1:25:8B:C9:78:3B:7D:65:60:A8:73
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer: /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial: 01965D9679354BC51660C2D60E3B8F0F7E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 13:01:04 +0000
Manifest this update: Tue 22 Apr 2025 13:01:04 +0000
Manifest next update: Wed 23 Apr 2025 13:01:04 +0000
Files and hashes: 1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: Z11pKGkBvSUvXeop76J0xB63Wr3YDVwTYZoipbU8wkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:79:35:4b:c5:16:60:c2:d6:0e:3b:8f:0f:7e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Validity
Not Before: Apr 22 13:01:04 2025 GMT
Not After : Apr 23 13:01:04 2025 GMT
Subject: CN=00dbcaea04af9e14efe1258bc9783b7d6560a873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:5b:1d:41:03:19:1e:b3:c6:da:60:14:50:
93:9e:99:7b:5c:d2:27:18:98:1b:02:c1:c1:9f:de:
51:cb:ca:b5:84:f9:57:0f:9d:f0:04:cd:12:04:8b:
a8:75:a4:9d:82:50:c7:5c:3f:ec:d2:7b:1e:3a:e4:
cc:6b:38:02:4c:ea:b3:35:a5:90:09:f4:2e:6d:c9:
35:7b:d3:8c:b4:1d:9a:96:c7:e8:d0:67:d7:e5:62:
56:16:e7:87:b6:f2:3a:df:9c:35:05:27:c2:42:97:
c0:1a:55:cc:b1:ff:2a:3a:e9:d1:f0:9e:8d:6a:69:
3c:98:bb:54:5c:ea:dc:15:b8:39:be:69:63:3c:9d:
a2:65:4b:75:05:bc:6d:00:8f:46:e5:f6:e4:66:15:
e4:62:22:87:e9:d9:bc:24:5f:9d:52:c0:88:4c:59:
4f:1d:cb:26:ba:99:c8:2e:31:82:a2:c7:3f:11:d3:
64:a9:dd:f7:09:af:3a:21:5e:31:ce:ff:c9:b9:1f:
b1:43:34:45:fa:11:b8:e7:04:0f:c1:d3:d9:ed:90:
cd:ea:f1:66:2e:cb:43:5e:d6:86:75:42:00:54:ff:
a8:b3:c7:cb:27:54:90:fd:c8:f5:f8:d3:52:e0:94:
4d:4f:f9:83:78:f5:0d:c8:d2:f1:3a:ee:ae:9d:d1:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:CA:EA:04:AF:9E:14:EF:E1:25:8B:C9:78:3B:7D:65:60:A8:73
X509v3 Authority Key Identifier:
keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:30:bf:82:f3:73:fd:24:b9:5f:d9:37:5e:57:92:11:53:e6:
98:cf:25:50:df:a7:de:c1:6b:68:dd:27:fd:87:5f:58:f4:a7:
80:36:cb:a8:4b:f9:2e:ce:f9:6c:d4:fa:3f:b7:fa:a8:e6:47:
f9:a9:e4:62:04:c0:4a:1f:f7:ee:cd:a4:4b:6c:65:95:d1:86:
dd:36:eb:8c:3d:81:2b:13:32:df:02:7f:db:c7:13:11:c2:a9:
94:4a:6c:0f:e7:c2:88:42:64:d7:10:0c:7f:90:51:7c:4d:0c:
58:d6:23:13:f9:cf:a9:34:8d:8c:a0:32:19:d5:9a:90:9d:85:
8f:7c:83:52:f0:14:50:e4:a3:5f:4f:80:5c:fc:86:22:93:c4:
d5:79:fc:e2:09:3c:f8:6e:b8:4f:9e:1b:30:c0:0f:db:bb:1c:
96:e4:8d:62:da:02:45:19:d1:3c:4b:ab:d2:ca:ce:c8:32:af:
8b:c0:85:60:69:6a:e9:dc:1d:0a:24:e8:0f:3a:10:cd:4b:a3:
37:74:34:ed:12:59:ff:6c:17:88:01:9d:b9:c7:62:e1:88:d4:
3c:5b:8b:04:61:2f:89:ce:cd:7d:ea:50:0c:25:b4:64:e3:1d:
fd:5e:5b:50:84:58:25:69:c0:31:3e:66:0c:f0:66:63:cf:77:
b5:eb:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:00 2025 by rpki-client