Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: GX3lpmpgGcGaklCBAZiMyHYBNbae4VcxGfly49DhkfI=
Subject key identifier: 0F:65:54:8E:E8:1C:52:67:8F:75:07:33:31:C0:FD:FA:DC:F4:8B:BA
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 01965425015A1594E1FD6A1B41E73D7B7815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0767
Signing time: Sun 20 Apr 2025 17:00:33 +0000
Manifest this update: Sun 20 Apr 2025 17:00:33 +0000
Manifest next update: Mon 21 Apr 2025 17:00:33 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: 4ZfH2pZDYIGJrfhgQGnqmHaEcX3/ZP5CgZYFRBITyNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:01:5a:15:94:e1:fd:6a:1b:41:e7:3d:7b:78:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Apr 20 17:00:33 2025 GMT
Not After : Apr 21 17:00:33 2025 GMT
Subject: CN=0f65548ee81c52678f75073331c0fdfadcf48bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:87:db:f5:4f:4f:37:0c:1f:df:b6:7f:0e:
c3:dc:e9:41:f0:55:39:be:7f:6a:39:fd:de:99:54:
ca:cb:7c:cc:79:94:d0:fa:b0:b8:18:5d:ba:48:12:
99:22:e7:e3:62:88:d0:c7:0b:49:eb:83:76:af:75:
89:d7:78:96:5c:3d:04:90:00:b2:09:19:e3:fa:d5:
1d:b0:2c:84:54:de:9b:d9:0e:19:8d:34:f2:a6:0e:
bf:ea:b4:95:14:ae:9f:95:6f:4c:ea:ce:d2:da:45:
87:8f:0c:ff:1f:3b:99:e4:8e:4a:d1:4c:b3:50:be:
a5:55:11:b0:a6:c4:4c:eb:cc:cf:fd:b8:8d:e9:a8:
2e:90:6d:34:d2:6a:ae:49:28:5a:ad:f2:64:1b:76:
18:ec:20:ee:84:05:ee:9f:e3:f2:6b:47:e0:66:23:
c9:ba:80:e6:6d:5b:fd:55:63:c0:43:e9:f7:7f:d7:
ad:7c:5e:4d:c9:e2:67:90:63:08:60:59:f3:b9:80:
a3:2a:5c:60:72:fd:6f:21:b5:a1:49:d2:fd:29:8e:
52:28:a6:0a:4b:a6:e2:5d:ce:1d:67:dd:aa:6e:9c:
99:ae:82:13:df:af:40:99:c8:28:9d:48:e7:e9:81:
9a:9e:96:4f:3d:6d:76:ad:7b:b2:77:10:50:24:0f:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:54:8E:E8:1C:52:67:8F:75:07:33:31:C0:FD:FA:DC:F4:8B:BA
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bf:b4:d6:06:5e:f1:88:d1:4d:23:32:44:47:ea:f7:b3:43:
97:4b:02:f6:38:a6:33:05:f2:d6:6f:3b:7f:26:e3:0a:51:da:
87:13:2a:82:3b:75:7d:11:bd:86:5b:bb:68:58:84:13:fd:3b:
16:c4:59:72:87:51:71:91:ba:21:25:8f:eb:af:63:1a:5c:57:
69:6a:b2:94:39:a4:a4:0e:d0:03:48:17:61:73:d6:ba:d1:4a:
89:84:5e:d3:3c:43:b9:92:9c:5f:9e:21:6a:8e:56:b6:22:a2:
6d:b8:bb:13:b6:bd:d1:d9:66:02:f5:94:28:8f:bc:dc:c9:34:
54:da:a9:68:8c:2d:8a:7d:59:0a:14:35:92:bf:de:e8:41:bd:
fd:6f:d4:d8:db:20:6c:07:e2:28:b0:54:6e:ef:d1:10:91:09:
91:54:28:89:63:f0:fc:9b:35:5b:cd:57:07:72:c3:8a:b9:84:
96:32:5d:22:c6:c5:71:a9:57:1b:95:78:e5:9b:d8:a9:7a:bc:
22:47:bc:e4:cd:e6:6f:be:d8:20:c4:6a:88:94:a9:d1:6b:0f:
1e:9a:bb:e0:40:1a:38:ed:26:4d:8b:6f:87:f7:20:9e:cb:09:
c0:a1:49:97:e2:4b:19:a2:c8:e8:a5:20:a9:d2:72:a3:67:ca:
f1:22:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:30 2025 by rpki-client