Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier: kaxsRgGSD9+PC+jAswph0wdDrffBzHt0iq8oyWDCHmM=
Subject key identifier: 36:C2:3E:9F:05:C0:D0:DF:C8:C4:60:94:63:1B:4F:17:54:07:0F:CD
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial: 0196447B3616B76D2DD599C2C9C5692A2ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number: 1234
Signing time: Thu 17 Apr 2025 16:00:47 +0000
Manifest this update: Thu 17 Apr 2025 16:00:47 +0000
Manifest next update: Fri 18 Apr 2025 16:00:47 +0000
Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: 3JmKYsFP0hX7OWs6cU7eZ5F9iKcCkeY+ksTiRYxr4io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:36:16:b7:6d:2d:d5:99:c2:c9:c5:69:2a:2a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Validity
Not Before: Apr 17 16:00:47 2025 GMT
Not After : Apr 18 16:00:47 2025 GMT
Subject: CN=36c23e9f05c0d0dfc8c46094631b4f1754070fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:33:96:fc:6a:af:c5:2f:79:1e:ed:11:7a:
9e:00:9c:7e:25:35:3d:30:82:1c:46:2e:37:92:77:
95:71:e4:11:95:f1:f2:bb:02:47:6a:8f:65:e6:4c:
f3:31:8b:5d:e9:f7:58:c4:9e:a0:f1:48:ac:43:53:
22:41:c4:3a:d5:21:0a:0c:85:2b:91:d7:5c:bc:75:
4a:6a:95:ad:b7:ca:a6:38:48:07:1e:85:c5:08:a9:
39:f0:a6:7e:1f:76:45:12:97:57:83:78:22:35:a1:
a4:a4:7d:03:38:43:b7:46:e4:0c:10:c0:05:11:83:
e2:3f:d8:32:03:93:f8:d5:52:4e:61:73:2a:e9:e6:
2b:31:c3:35:71:44:8a:7f:44:fa:05:ec:d0:46:fb:
fa:f8:74:e2:2e:4a:0e:eb:0b:1b:a9:75:45:42:65:
6f:4f:8c:f8:67:d9:de:98:d1:6b:41:b1:60:ad:53:
8f:dd:b9:f5:6d:f2:7b:f8:99:f4:36:a9:3c:bd:f1:
27:27:b7:25:8e:c8:d2:21:8b:e3:6e:be:8a:d0:30:
70:90:f4:98:10:87:01:e8:36:09:ec:60:d6:5f:4c:
e8:16:a3:d3:ca:80:66:66:7f:a2:7d:90:64:76:03:
61:f3:71:34:ab:f1:49:a4:5d:e9:a0:53:b1:f1:47:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C2:3E:9F:05:C0:D0:DF:C8:C4:60:94:63:1B:4F:17:54:07:0F:CD
X509v3 Authority Key Identifier:
keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:77:ec:cf:70:de:d7:1a:c3:f0:1d:e1:b5:82:e3:db:47:
80:8c:f7:48:42:48:94:5f:7b:60:33:2f:5e:18:eb:1f:2b:d5:
d2:31:16:df:5a:96:ce:44:d2:37:02:fa:4d:ac:f1:47:90:d2:
d8:94:e7:9f:6e:f2:2d:3e:f5:e7:2e:fc:0d:43:7e:c8:95:e3:
96:c6:f4:a4:33:08:fe:37:b7:65:34:b3:f5:4b:a1:de:c4:7f:
05:fa:f9:4c:45:77:59:a6:e1:7a:a2:32:46:7c:bb:cf:cf:ed:
de:6c:08:b5:4b:a0:4a:93:d6:0e:88:77:95:4e:77:5f:1f:8c:
66:d7:85:34:fb:f7:55:0d:b8:95:7a:99:7d:f5:62:0c:22:c2:
00:b4:0e:9d:78:bf:cf:5b:b7:e9:38:d1:15:05:10:e2:66:a8:
80:34:27:17:59:aa:8e:80:f6:86:81:e2:5d:96:2a:ab:dd:49:
71:be:87:25:44:d9:b5:28:87:6d:03:ec:1f:5c:f4:56:30:a9:
3e:64:64:90:dd:55:53:7c:2f:ee:6d:f2:44:63:58:0b:b1:0d:
e0:43:9c:25:be:e1:50:99:58:dc:d6:74:27:52:c2:b6:34:85:
38:49:f2:c4:16:69:24:c8:ca:22:a2:23:20:43:04:7a:cb:55:
5c:a6:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:03 2025 by rpki-client