Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: 83QPTxECCDNwvL9b1CyamGdzSDDEY5gGDm98fnb6DsI=
Subject key identifier: 4F:C5:AB:82:8D:5B:A3:71:B9:90:60:AD:E0:A0:18:56:FF:EC:0C:48
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 01965801DBC9D2406858074F210900086554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: F8
Signing time: Mon 21 Apr 2025 11:00:38 +0000
Manifest this update: Mon 21 Apr 2025 11:00:38 +0000
Manifest next update: Tue 22 Apr 2025 11:00:38 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: IZEZPl81OnffRBfEF+qmoXbbBpa+IhwDou3DfzDYUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:db:c9:d2:40:68:58:07:4f:21:09:00:08:65:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Apr 21 11:00:38 2025 GMT
Not After : Apr 22 11:00:38 2025 GMT
Subject: CN=4fc5ab828d5ba371b99060ade0a01856ffec0c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:c6:4b:b6:d8:2c:2f:eb:50:80:0d:8c:98:
46:ee:6e:7d:7c:62:45:a9:25:34:ad:2b:0b:b5:25:
42:aa:0d:85:d9:c6:b2:a0:22:45:4c:af:3d:bb:07:
41:b5:50:71:45:61:62:9b:86:62:5a:60:73:9b:8b:
11:9c:bf:eb:50:9e:a2:23:dd:8f:17:c2:89:81:c1:
5d:be:bc:99:cc:3f:1d:19:45:b2:51:e4:9b:ba:cc:
3c:7a:db:ee:89:1d:5f:99:3b:e0:98:b6:62:0e:ea:
ad:cb:cd:d8:6e:5f:02:36:de:7c:53:13:93:c8:c9:
56:67:d5:2a:6a:20:f9:65:ea:d8:32:6b:a0:51:42:
36:6b:46:17:3c:12:a3:3d:3c:c2:2a:38:b0:f5:4e:
9c:a4:3c:5f:be:8d:11:92:00:ba:50:b0:b8:69:b4:
bb:26:bd:59:f4:23:aa:a4:2e:28:37:ff:70:f2:e6:
17:67:cd:f1:bf:45:33:7a:8f:e8:84:26:eb:34:64:
c1:30:6a:c8:48:52:c2:d8:3d:52:f7:aa:bc:ad:ec:
d8:fd:09:98:1d:a5:b8:51:21:a0:74:d3:a0:95:ff:
3a:0b:51:15:9a:25:bb:82:28:cd:cc:b6:b4:a3:e8:
8b:d7:bf:e5:e1:3b:49:ca:14:9d:ba:2e:99:97:63:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:AB:82:8D:5B:A3:71:B9:90:60:AD:E0:A0:18:56:FF:EC:0C:48
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:37:b7:3c:ca:95:e7:ea:d8:22:57:6e:87:a8:69:ea:c3:2d:
96:26:52:ff:d0:c5:2f:68:6e:e0:62:3c:64:69:86:f9:c7:7c:
60:8c:fc:f0:00:c1:6a:e8:29:d9:0a:b0:cc:92:99:c3:8c:2e:
6b:e8:3d:f3:e9:48:73:98:3a:37:fd:61:35:5c:08:2b:3d:88:
6e:25:d2:93:60:80:ec:e8:97:e3:1a:6a:71:b6:3b:cf:d7:e5:
df:1f:d0:a9:46:3d:61:b8:1c:3d:b0:3d:c2:47:e2:69:f4:2f:
60:dd:3c:35:8d:4d:fe:1f:ed:3a:c4:dd:f9:86:98:47:2f:1c:
51:84:d0:df:2d:88:7f:be:01:c7:3b:42:c9:13:86:eb:6b:93:
4f:6c:b3:97:6f:89:23:cd:a4:2b:17:eb:92:d3:e9:ab:e6:e7:
3b:98:f8:84:df:4c:1f:28:6f:78:23:ad:f0:2d:4c:5e:ee:4c:
86:d2:80:0d:4e:0a:66:24:a5:9a:f2:b1:5d:c4:2c:26:df:2b:
10:0e:fe:20:bd:b5:29:e8:73:e9:63:4b:28:ce:e0:e2:b6:ae:
51:e6:1b:fa:47:1f:55:19:be:64:ea:c2:ac:b8:98:28:d3:80:
3e:0c:56:17:99:76:78:24:82:44:45:49:a7:b5:97:5f:46:a1:
b3:18:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:23 2025 by rpki-client