Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File: GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier: iGsI9iS/Gedjw7yLkI0vTQz7BLsCl2J6+cTbfRCaHgM=
Subject key identifier: 73:8F:7B:AC:85:20:E7:F4:EC:63:8B:CF:C7:68:9F:07:EB:89:7B:4F
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer: /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial: 01965CF0E8CD993B4D49551747126F9397AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number: 0DC7
Signing time: Tue 22 Apr 2025 10:00:14 +0000
Manifest this update: Tue 22 Apr 2025 10:00:14 +0000
Manifest next update: Wed 23 Apr 2025 10:00:14 +0000
Files and hashes: 1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: moMUlVHozfqcXGPFkdVrJIy6Ikw8H325mUQmzPA3D0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f0:e8:cd:99:3b:4d:49:55:17:47:12:6f:93:97:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
Validity
Not Before: Apr 22 10:00:14 2025 GMT
Not After : Apr 23 10:00:14 2025 GMT
Subject: CN=738f7bac8520e7f4ec638bcfc7689f07eb897b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:e1:8f:6a:a7:3f:7d:fc:28:62:a0:61:a1:
58:cf:41:c8:86:e3:b3:b3:fd:a7:61:1c:6d:61:34:
88:70:0d:04:38:6a:11:b2:f0:01:d1:bf:65:d1:8d:
76:35:26:bd:e6:1a:67:5a:8f:f7:74:8a:ab:77:97:
19:b4:5f:b2:57:97:39:11:6a:27:f5:db:53:23:d9:
f7:b8:6a:ea:64:a3:cd:81:77:ff:a8:ac:52:99:bb:
2a:88:f0:9f:49:67:be:a9:09:03:ed:38:46:46:ab:
04:22:16:99:85:dd:b4:e9:ea:18:46:9b:3a:9f:28:
f6:c7:2b:ee:d1:0f:5d:77:f0:73:3c:e6:90:76:d2:
de:da:8b:c5:da:8e:2b:0e:b5:b1:02:df:49:7c:bf:
63:b0:9b:51:a6:cc:97:3c:04:ca:47:ca:84:27:b5:
41:5f:bd:b5:04:2d:96:ac:fc:18:e9:35:db:32:dd:
44:d6:3c:ad:7e:ae:16:ed:9b:76:72:35:19:94:7d:
53:31:84:a8:7d:25:06:48:ef:70:b9:5e:23:c6:b5:
67:a0:f4:1a:a5:6a:12:c0:0a:d5:ab:f5:9e:29:df:
06:eb:d2:64:f3:34:d7:e1:ef:e5:45:9e:12:9d:29:
25:47:4c:6c:4a:44:05:a4:dd:a6:ed:42:5d:d4:5a:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:7B:AC:85:20:E7:F4:EC:63:8B:CF:C7:68:9F:07:EB:89:7B:4F
X509v3 Authority Key Identifier:
keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:66:27:4d:3e:51:19:fc:a1:0b:ec:ac:cd:fd:9e:36:bd:30:
40:d5:8e:3a:82:8b:c9:0b:ab:2f:a3:cc:cd:f4:8d:b5:3d:22:
f9:94:1d:29:2a:9b:1d:73:f0:f4:80:28:9d:28:5d:cd:c8:c7:
a8:75:9b:e0:d3:c8:69:4c:44:41:fc:e0:ef:9f:44:a3:e8:0f:
c4:aa:0f:af:b8:0a:38:8e:01:93:b1:b3:4a:b7:4b:70:d7:84:
0a:ee:03:fa:b2:63:6f:75:04:0f:1b:c8:bf:e1:b7:a7:62:2f:
20:73:12:7c:fd:4f:96:b0:ae:68:d3:20:af:b9:8a:cb:b1:bc:
38:c6:53:05:a3:db:dc:a6:fa:df:01:1a:c4:6a:64:6e:58:0d:
d9:30:b1:f5:14:a2:ec:ea:b0:5d:a4:71:60:a9:93:b7:76:ee:
4c:55:ad:83:15:5f:61:08:bf:ac:a5:51:25:c4:51:5b:da:79:
e5:cf:51:0c:ae:63:fd:24:b6:f4:a6:a6:b5:6b:ee:e5:3e:c6:
d0:94:44:81:20:ed:34:1d:d3:6a:8f:d1:18:16:5a:df:ec:05:
cf:69:37:d7:8b:9c:ea:97:cf:b1:3b:51:9f:66:a8:61:d9:dc:
0c:b7:22:ba:b0:11:43:10:eb:32:eb:d0:58:6b:fd:c2:8d:57:
6a:23:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:54:19 2025 by rpki-client