Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
File: gTpCg40uRe1drUEUYG2XKaZQHSM.mft (raw, json)
Hash identifier: f4m36yT76WV3OpnNjzYoE/n/YdkcqPmtO1vzxJQbuCI=
Subject key identifier: 84:ED:AE:2F:0E:70:88:57:16:1C:94:E3:C9:C7:81:F4:FC:8A:7D:75
Authority key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
Certificate issuer: /CN=813a42838d2e45ed5dad4114606d9729a6501d23
Certificate serial: 01964443F838B58481F8CADF268A87A305C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
Manifest number: 0D54
Signing time: Thu 17 Apr 2025 15:00:27 +0000
Manifest this update: Thu 17 Apr 2025 15:00:27 +0000
Manifest next update: Fri 18 Apr 2025 15:00:27 +0000
Files and hashes: 1: gTpCg40uRe1drUEUYG2XKaZQHSM.crl (hash: yC+VdvtuV2iGTy7PPiVtsbJnk8mgcmYKU3+l2riZZYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:f8:38:b5:84:81:f8:ca:df:26:8a:87:a3:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813a42838d2e45ed5dad4114606d9729a6501d23
Validity
Not Before: Apr 17 15:00:27 2025 GMT
Not After : Apr 18 15:00:27 2025 GMT
Subject: CN=84edae2f0e708857161c94e3c9c781f4fc8a7d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:04:e5:e9:42:96:1f:c7:f0:d2:aa:56:9c:
4c:fc:c3:dc:4f:55:c9:ca:98:9e:be:c7:fd:81:f0:
6b:b9:13:72:8f:bb:7a:d8:c3:03:85:a9:72:01:c0:
4a:77:77:ed:3d:c6:8d:cd:c3:bd:a9:38:7e:a4:c3:
af:84:bf:60:90:86:1e:64:77:b1:90:02:4e:e5:d4:
50:99:6f:74:ae:e0:e9:33:21:2a:b8:4d:cf:ec:e2:
6f:e2:6b:81:cf:01:f8:20:26:d6:2d:85:e2:0e:dc:
1e:2f:dc:a8:5f:d9:a2:4b:1f:dc:5b:95:df:a3:4b:
c8:29:49:f0:c1:07:69:eb:55:da:4b:ec:1a:ea:4c:
b8:3e:45:26:36:eb:7a:05:6a:6f:aa:09:13:a7:27:
c2:ae:8e:fb:ad:9d:61:52:7b:1f:ee:57:b4:e5:a9:
d4:a7:d7:f4:af:e0:ea:91:ad:e8:56:d2:ac:c7:f9:
fb:15:f9:4c:c6:ae:2a:bf:64:cc:ce:2e:a0:49:ba:
2b:f7:9f:ab:e9:9a:95:1d:4f:a3:60:ea:63:d0:89:
18:eb:2b:15:d3:3c:ef:fb:98:a4:d1:99:41:54:bc:
77:d6:31:76:ef:ba:34:fb:cf:77:3e:24:5f:8d:06:
f6:aa:d6:50:14:7c:d6:62:06:f5:e0:0e:fa:b2:1d:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:AE:2F:0E:70:88:57:16:1C:94:E3:C9:C7:81:F4:FC:8A:7D:75
X509v3 Authority Key Identifier:
keyid:81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:28:83:c8:5d:0c:ef:39:0c:1e:5e:9f:a4:f3:55:53:12:01:
f7:ed:dd:40:14:e6:d8:ef:61:74:36:7e:2d:e5:ab:08:63:ba:
02:cd:64:f4:b2:e2:f0:ff:53:10:40:97:21:0e:41:a7:b6:98:
a0:63:e8:9b:a7:fd:db:9c:01:5f:c2:27:95:fe:af:ec:6f:57:
fc:cc:9b:ba:44:eb:40:27:47:54:f4:8d:61:19:68:5a:9f:20:
3e:96:f8:fe:44:34:bf:af:a6:5c:87:26:46:29:67:36:49:bb:
68:86:b6:75:75:7f:f5:d0:ea:7c:9b:ee:ef:da:8d:53:b5:93:
82:73:0e:74:e8:8e:6f:e9:a3:b6:e9:5c:e5:ee:8a:a4:2f:22:
eb:27:ba:d0:fb:b8:75:05:75:54:e2:67:89:2a:43:4b:6a:6d:
32:16:32:93:76:8a:16:4c:d8:9a:24:c3:bb:7b:c4:97:7f:ec:
5b:44:ac:cc:87:59:61:76:1d:d5:db:d9:26:f6:0b:99:98:13:
f4:11:af:92:00:b0:ae:41:9e:d2:32:af:4a:28:c2:f8:b0:71:
0e:eb:cc:8c:15:b4:b0:b4:76:d6:ac:92:d6:3e:ed:be:06:51:
6e:40:3e:a9:74:85:32:5d:81:d6:58:ee:67:b5:8a:fb:99:b1:
00:20:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:32 2025 by rpki-client