Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File: gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier: LJLzkIb4YQAOibNZBbCMGy11zWKy/hY2DyG7B/BPiaw=
Subject key identifier: B4:FB:01:95:B9:E2:7A:7F:8C:7C:D7:8A:83:82:89:22:0B:1B:03:FC
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer: /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial: 01965CF17AFEA65A8F1735882BDDF801B73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number: 0DC7
Signing time: Tue 22 Apr 2025 10:00:51 +0000
Manifest this update: Tue 22 Apr 2025 10:00:51 +0000
Manifest next update: Wed 23 Apr 2025 10:00:51 +0000
Files and hashes: 1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: HQbm5Tu3Pla71dfBlR3TQMgI/Sc1IWHTtMYAdmrA0UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:7a:fe:a6:5a:8f:17:35:88:2b:dd:f8:01:b7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Validity
Not Before: Apr 22 10:00:51 2025 GMT
Not After : Apr 23 10:00:51 2025 GMT
Subject: CN=b4fb0195b9e27a7f8c7cd78a838289220b1b03fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:7b:19:4b:bd:6c:df:bc:1e:05:a9:54:8e:
e7:7a:85:94:17:62:dd:ef:2c:bf:e3:32:5c:f2:ad:
81:1c:db:68:55:d4:3e:cd:77:5a:6e:7c:fc:0d:45:
76:f6:80:3b:be:0b:7d:f2:e9:dc:04:76:92:09:61:
06:cb:19:5f:57:5b:63:0e:2e:af:29:12:c7:bd:1a:
1e:2e:31:32:52:17:5a:f0:8d:29:8c:91:67:4e:9b:
6b:e1:ba:7c:c0:0c:2c:76:e2:5d:97:26:a1:da:e9:
37:91:76:a5:15:5a:9d:b2:f2:2a:e0:16:8b:bc:84:
9c:83:b0:d4:7f:ff:41:83:ce:3f:5a:ac:e8:08:d3:
63:2d:a8:98:f5:3a:85:8e:b1:de:56:0f:5a:9e:1c:
cf:71:88:d8:69:d4:71:87:cb:04:38:5d:43:aa:7b:
5a:b5:4d:76:21:9c:47:1a:4e:b3:f0:c3:f2:2a:da:
b7:5d:59:0b:31:68:96:33:25:7f:b0:35:0c:5a:6c:
68:8d:9b:bf:73:dd:bb:08:49:a9:a4:14:e5:5e:4d:
0d:9b:7d:e4:5a:e3:8e:46:71:e7:89:87:2d:56:85:
0e:13:b1:3a:22:22:8b:05:ff:31:9e:11:63:34:a9:
53:71:66:28:2d:82:89:ed:b8:52:14:2a:ef:c6:ea:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FB:01:95:B9:E2:7A:7F:8C:7C:D7:8A:83:82:89:22:0B:1B:03:FC
X509v3 Authority Key Identifier:
keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2d:18:60:7a:f0:6c:8d:e7:be:3f:27:38:57:dd:a0:cc:f5:
70:4d:54:30:c6:c5:9a:3a:00:da:9b:9f:f8:d1:f6:35:21:e1:
41:48:f8:8a:05:52:7c:e1:c8:19:27:9e:d7:4c:ef:69:5c:9c:
7e:a5:d6:9f:85:40:c1:93:15:02:f3:39:7c:83:4a:44:87:ee:
0d:99:dd:88:e1:3d:01:c5:98:40:22:5f:dd:04:6d:83:15:06:
6a:15:07:0b:e2:8b:ec:45:3f:9c:1a:1e:55:1a:0c:a7:d3:21:
f5:d5:92:3c:81:ad:0e:31:54:e7:92:e3:53:1c:0b:16:b7:20:
4c:e4:44:0f:b3:80:40:e9:5c:31:f9:43:a7:da:a7:92:cb:75:
aa:a4:95:5a:e9:30:f8:78:99:45:e7:58:40:ce:13:fd:c8:f2:
bd:10:23:83:c9:50:4a:54:cc:6a:dc:9d:f0:75:88:c5:ac:42:
c5:7e:39:0a:33:58:72:d8:f3:6e:47:b1:02:7a:6c:1e:8b:1f:
6f:3f:65:1a:4a:1f:fb:05:9c:ec:9a:a2:6d:b6:9b:2b:4e:73:
1f:88:d4:40:bf:7c:b8:01:76:8d:40:6b:48:cc:4d:5b:b6:fa:
78:29:e9:8b:ce:0c:fd:90:97:fd:b3:57:f8:d3:58:06:0e:6e:
a0:a5:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:06:13 2025 by rpki-client