Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
File: GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft (raw, json)
Hash identifier: EPPk5ZXNdiZktjAj8E3lQdr7jup+psNOfgIZgDAOqN8=
Subject key identifier: 05:54:00:20:4C:CF:39:D3:76:BC:0B:03:01:BE:5E:56:12:39:A4:6D
Authority key identifier: 18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
Certificate issuer: /CN=1877b19d4847fc3f495af936c5b1a1928c912748
Certificate serial: 019655A6478490EAF553C3D25AD46B744317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 00:01:22 +0000
Manifest this update: Mon 21 Apr 2025 00:01:22 +0000
Manifest next update: Tue 22 Apr 2025 00:01:22 +0000
Files and hashes: 1: GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl (hash: NTS+L3arGiH6GwJqSSVsWH+avqvZbXACRgk1v9uL5Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:47:84:90:ea:f5:53:c3:d2:5a:d4:6b:74:43:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1877b19d4847fc3f495af936c5b1a1928c912748
Validity
Not Before: Apr 21 00:01:22 2025 GMT
Not After : Apr 22 00:01:22 2025 GMT
Subject: CN=055400204ccf39d376bc0b0301be5e561239a46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:b8:3f:ab:75:f6:f7:30:66:26:de:a9:e0:
bb:a7:d2:de:3e:ee:d0:38:eb:a6:f6:12:bb:66:88:
6f:9e:27:6e:14:12:ef:7c:22:68:fc:f6:48:fc:ee:
8c:c1:13:72:a7:c6:23:3a:67:a0:09:ba:65:6b:98:
11:01:c2:95:f6:21:59:23:e5:64:29:a0:f0:59:c6:
70:54:28:9c:74:f3:31:35:03:b0:10:fc:ab:a5:e4:
91:00:ae:73:9d:96:07:44:35:f8:02:18:63:c0:d2:
2f:18:ce:c7:ef:b7:4c:5f:0e:63:d1:ad:6d:e3:dd:
88:5f:ed:87:6a:32:57:e2:5e:17:dd:15:5a:d9:52:
77:e4:59:42:f6:81:70:68:57:9f:43:f1:2b:65:51:
36:58:bb:05:fc:de:44:88:7f:03:42:8e:ca:ff:fc:
fa:ce:6f:8f:ad:f2:02:4a:c5:37:27:d8:27:97:69:
b9:81:ec:7d:c8:ae:a7:8f:fd:da:84:5f:e2:b8:f2:
93:09:52:13:2f:78:9a:5f:63:cc:cf:82:f9:25:74:
0e:19:03:10:81:63:31:75:df:f1:90:97:e5:33:fa:
da:85:4e:a9:36:5e:80:6a:23:f7:bd:13:5b:57:a8:
3d:7d:46:2f:d9:c5:ec:49:4c:e5:2d:b1:7f:96:16:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:54:00:20:4C:CF:39:D3:76:BC:0B:03:01:BE:5E:56:12:39:A4:6D
X509v3 Authority Key Identifier:
keyid:18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:75:35:13:b3:0f:53:10:78:16:8a:1e:01:73:d4:e0:33:cd:
86:ae:fe:70:f1:0e:44:fd:e8:99:c6:41:ed:65:13:5b:4f:66:
b8:dc:48:01:85:eb:2d:2b:94:29:2d:bf:60:15:41:e5:fc:11:
c1:f4:13:6b:4f:0b:a6:88:c6:34:9d:b4:fc:4e:ae:7a:ab:fa:
5c:c1:78:bc:15:0f:60:f2:82:0b:2e:c6:08:8e:05:6e:60:55:
e5:00:ba:57:8b:dd:db:f2:eb:56:f3:12:5c:b9:fa:4b:cb:0f:
c1:d1:79:c5:01:4f:37:4c:26:e5:8f:22:d0:e3:23:ad:33:a9:
ab:f5:e2:6d:6b:40:b2:f6:e8:00:a6:5a:af:28:59:f4:0f:52:
4b:96:05:eb:a1:dd:1e:33:93:7b:cc:21:42:a3:51:6d:c3:0f:
65:28:7c:3b:b9:18:b3:8e:d1:30:f6:c2:27:97:0f:54:74:45:
9d:b7:f2:6f:03:c2:39:4e:8b:da:8f:51:5f:fd:d1:f0:55:81:
3b:b5:5d:a3:50:c8:9e:94:24:9a:67:03:e4:37:8a:1a:81:0d:
c2:7f:e5:11:be:57:fb:62:d5:35:b0:b2:7a:dd:55:4c:d1:b8:
a9:aa:56:ba:9b:10:ce:b4:c6:e1:d1:0c:a7:07:34:49:b7:9c:
db:d9:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:14 2025 by rpki-client