Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier: hHrNVVMtvL7eq7YpRVE3fWNa2pwzkRiHv2PtwedAA1w=
Subject key identifier: B1:AC:FF:ED:B7:9B:7D:47:87:39:5F:44:3D:61:5F:5B:61:4A:5C:D5
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer: /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial: 019654256A902614CAE5CBBB8791A92D7900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number: 022D
Signing time: Sun 20 Apr 2025 17:01:00 +0000
Manifest this update: Sun 20 Apr 2025 17:01:00 +0000
Manifest next update: Mon 21 Apr 2025 17:01:00 +0000
Files and hashes: 1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: 28zVv/2qoNZXlQHxgdPzyxdHYCwmpn1w0n4PDODFSpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:6a:90:26:14:ca:e5:cb:bb:87:91:a9:2d:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Validity
Not Before: Apr 20 17:01:00 2025 GMT
Not After : Apr 21 17:01:00 2025 GMT
Subject: CN=b1acffedb79b7d4787395f443d615f5b614a5cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:62:90:b5:33:d3:d3:ec:cc:1c:38:82:76:
d2:41:2a:c5:34:70:ce:37:7d:73:01:58:6b:04:ee:
6a:07:d6:93:55:29:ca:ab:1e:41:6f:50:3a:dc:10:
39:15:90:2e:07:5a:c3:97:cb:d5:8a:91:7a:38:26:
5f:f0:f6:bc:b3:24:65:03:6e:ee:c9:ff:66:9d:3f:
cb:21:75:c4:65:b3:ef:13:11:06:b6:bb:df:dc:f5:
df:90:b0:1b:44:ef:b1:17:1d:fa:3d:7b:e5:5c:4e:
c7:cb:ad:3f:4d:8d:ad:7a:d3:5b:49:2d:6c:be:b0:
3c:f1:83:2a:d8:2c:23:0a:cc:d3:df:25:14:20:90:
40:8b:b2:d2:b0:6e:87:0e:48:b4:c4:63:67:41:b1:
8c:47:6e:b9:be:e3:3a:05:62:d3:f3:ec:3c:31:3e:
7c:13:56:8a:c6:e4:f6:e9:67:7a:3d:69:00:25:a9:
aa:7b:2d:b8:b6:70:e0:c5:b4:24:e7:b3:67:34:1e:
91:21:bf:54:37:0b:07:23:4f:81:70:47:f5:f3:3d:
10:e3:51:91:dc:4c:0a:fb:39:72:ee:5f:91:56:2c:
5e:12:79:0b:f1:2b:62:d1:43:87:02:cb:9a:15:8b:
f3:f5:6a:c6:db:aa:fa:63:c1:6a:98:07:f7:e9:3e:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:FF:ED:B7:9B:7D:47:87:39:5F:44:3D:61:5F:5B:61:4A:5C:D5
X509v3 Authority Key Identifier:
keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bb:7a:03:b3:67:53:51:ee:df:7e:61:cb:a9:7e:b5:8b:37:
0f:75:5f:8b:a4:b1:ec:4b:20:56:0d:8f:42:c8:fd:54:b9:5e:
1b:e1:cb:a6:f8:99:45:02:dc:a2:ce:45:0b:10:0d:c7:22:3c:
2b:51:b0:3d:c4:49:fa:57:5f:de:d8:e2:29:0f:e6:f6:a3:a5:
f3:8a:23:a9:ec:df:4d:a4:81:af:5c:6a:3e:d3:4f:cf:84:77:
71:d8:fd:4f:3b:ba:f4:49:bd:67:b0:20:cb:98:e3:d6:73:e8:
85:81:6e:d9:0d:f7:f7:e5:1c:f9:e4:b9:39:5b:a7:a8:c0:64:
05:0e:8e:1a:35:f8:5b:bf:53:82:76:3b:d8:80:24:7e:14:6c:
8e:36:bb:17:a1:f2:d7:e0:10:8c:b0:31:8b:10:2b:eb:90:15:
5c:ef:a8:a0:e4:41:d2:5b:2d:09:46:1f:25:b0:04:b0:30:84:
7a:66:de:eb:8b:e4:f9:8a:08:f4:62:32:a6:2b:d0:d7:1b:04:
a8:37:c9:95:da:24:60:bf:60:a3:31:36:cc:ba:4e:d9:78:90:
dd:f9:fa:a2:20:24:ee:f6:cb:31:5b:1a:db:c4:6b:81:7c:5c:
62:e4:e2:2d:8f:a5:33:94:27:29:65:37:4a:fb:b1:c1:42:f5:
1b:c1:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:01 2025 by rpki-client