Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json)
Hash identifier: +8NC0MRcMolVhRV8efhF8ZAz75YA3WMO5U80VUgiorA=
Subject key identifier: 6A:FF:FD:70:C7:B3:11:B0:76:B0:A8:2A:57:D6:B7:23:E8:C8:D5:F8
Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Certificate serial: 01965C4C1F6929845B86CDD43F2B2FB77CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
Manifest number: 0F89
Signing time: Tue 22 Apr 2025 07:00:14 +0000
Manifest this update: Tue 22 Apr 2025 07:00:14 +0000
Manifest next update: Wed 23 Apr 2025 07:00:14 +0000
Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: ESnBsav6nQQe+RuDmibnnkt51dTuTETRsFMS1RwsRD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:1f:69:29:84:5b:86:cd:d4:3f:2b:2f:b7:7c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Validity
Not Before: Apr 22 07:00:14 2025 GMT
Not After : Apr 23 07:00:14 2025 GMT
Subject: CN=6afffd70c7b311b076b0a82a57d6b723e8c8d5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:56:c7:1a:28:65:b1:08:8f:9b:7f:57:26:
59:e6:15:f9:60:65:76:63:ab:a2:f5:d0:1b:e7:42:
b9:b4:68:a1:73:bc:0d:27:11:f1:6d:26:7e:83:81:
6b:8a:94:35:21:f4:28:da:46:85:ad:1b:25:0f:3c:
5b:9a:05:f2:1b:59:ad:c4:41:1c:8f:a0:f7:a6:80:
92:c4:66:24:fb:71:58:2d:e6:ce:bb:ba:6b:b7:a9:
9d:06:2b:25:eb:8a:7b:c6:f3:30:4d:f9:df:f3:94:
12:c9:ac:b0:77:73:2f:82:fa:b2:ea:40:1a:db:5e:
5f:64:6c:ab:11:da:3f:a4:0f:4e:28:99:f4:4d:d8:
02:a4:37:38:27:02:63:39:66:8f:30:30:f2:b7:e8:
c9:5c:a3:6d:92:0b:e9:2d:ef:f5:2d:49:f7:3b:db:
35:ef:84:9b:6d:55:ce:0e:e2:37:21:69:62:65:70:
56:3b:77:04:b5:dc:a5:d1:d1:43:ce:ee:94:37:2a:
61:29:65:14:aa:3d:c8:38:06:dc:f7:c9:6c:40:2b:
15:b6:5d:27:20:65:5b:3c:e8:39:b4:53:82:b0:e7:
33:a0:1a:19:3a:97:7a:3a:7d:5a:55:e5:a3:5f:21:
1b:dc:7c:3b:dd:ad:25:72:18:d1:83:1e:fd:6b:36:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FF:FD:70:C7:B3:11:B0:76:B0:A8:2A:57:D6:B7:23:E8:C8:D5:F8
X509v3 Authority Key Identifier:
keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:13:8f:52:0a:59:f1:54:dd:0a:30:30:bb:a3:c7:3c:34:
46:ff:e4:93:80:7d:42:46:cf:28:55:07:0c:f9:85:b6:c4:97:
7c:57:6f:af:10:08:f5:64:57:21:14:ed:46:4a:3f:0f:43:fd:
30:ae:b6:50:03:01:32:26:29:38:ee:22:56:45:70:73:fa:a5:
94:62:96:9c:2c:10:2f:1f:b7:44:05:2c:3f:ee:b5:22:97:68:
b2:4b:b9:f2:32:e4:e4:f3:88:66:70:05:4e:99:e1:33:03:82:
dc:94:8f:30:9a:cc:ba:a4:82:e6:53:8f:0b:54:72:52:f3:9d:
98:48:b5:ad:5f:08:b4:fa:23:89:1c:f2:cc:60:7a:ad:70:3d:
50:8a:0c:15:7c:63:bd:8f:40:25:4e:96:db:27:00:2d:eb:fa:
08:1c:97:9e:cd:30:98:67:a6:30:bc:ce:e0:5d:21:26:6b:c1:
07:ee:ad:4f:67:30:c4:0b:c2:9a:10:63:30:12:31:8b:14:bf:
34:27:28:e2:8b:af:0a:f2:62:e8:5e:99:97:2a:fa:d9:d9:5c:
46:af:7f:94:5e:88:c5:09:8b:7a:70:ab:3c:32:79:88:3c:89:
06:ee:f8:37:5f:c7:1a:b6:09:b1:0d:dd:ba:e9:e1:20:78:c5:
b2:85:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:08 2025 by rpki-client