Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: svHgK5mm3G5BE4CastSrunFioehahM6FUpz+QQzMEE8=
Subject key identifier: 55:95:37:F5:B8:AD:3E:4B:EA:C3:65:B8:76:3D:40:CD:14:99:77:48
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 0195903CEF566677E8DD29F5A56963CD6371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0AC5
Signing time: Thu 13 Mar 2025 16:01:07 +0000
Manifest this update: Thu 13 Mar 2025 16:01:07 +0000
Manifest next update: Fri 14 Mar 2025 16:01:07 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: flLadN4E6Krnp58wXNj9TgIiS1rIY4U1JfA7f14CDB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:ef:56:66:77:e8:dd:29:f5:a5:69:63:cd:63:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Mar 13 16:01:07 2025 GMT
Not After : Mar 14 16:01:07 2025 GMT
Subject: CN=559537f5b8ad3e4beac365b8763d40cd14997748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:df:d0:c1:2e:13:53:3e:54:a8:c9:bf:9b:
5f:f2:8f:2a:db:34:e8:af:bb:f5:76:93:c9:c9:96:
45:84:6c:e7:ee:29:3b:83:2c:02:5e:94:1f:14:7d:
87:3b:cd:a5:83:7c:3c:0d:2b:71:81:98:b4:15:f9:
24:db:1f:9f:c4:b3:09:28:3a:ed:66:76:6a:2d:22:
a6:53:f2:9f:26:8b:6b:9b:2a:15:82:8f:60:22:13:
79:6a:38:d1:05:f2:0b:24:f4:28:3e:5a:55:85:b2:
f7:36:de:a1:cc:43:61:ba:26:70:c7:f5:2d:35:e8:
38:5f:54:7a:ee:8d:97:46:a3:93:8c:ea:bb:3c:a1:
f8:05:76:56:d2:0c:de:5e:19:81:6d:fe:ec:ee:05:
13:82:42:28:87:41:95:0d:66:4f:a1:39:58:78:1c:
ec:f4:22:71:e9:64:68:ae:66:a7:73:bc:d3:9f:47:
73:e1:9f:bb:5a:2f:5c:66:31:73:3d:9b:28:84:4d:
d5:89:fe:61:f6:b7:40:e5:56:e1:cf:93:cf:70:70:
d8:3b:9c:cf:a1:ec:75:59:62:31:97:ce:73:76:c7:
de:da:69:f9:62:2e:d5:59:16:c7:10:30:17:4d:6b:
3a:6c:e3:c3:d3:e4:08:af:be:30:73:9f:00:f0:bc:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:95:37:F5:B8:AD:3E:4B:EA:C3:65:B8:76:3D:40:CD:14:99:77:48
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ee:fd:f5:30:80:4d:a6:9b:ff:56:99:c1:8b:94:6f:ab:8c:
cc:b6:6f:4f:ac:c0:cc:60:7e:e5:5c:8c:39:f5:73:d4:ae:7b:
f8:33:38:8b:8c:95:6f:9d:9b:25:1c:3a:7c:25:6c:50:a5:c9:
52:a9:b6:44:2b:c1:d0:e3:23:67:a2:a3:13:41:3d:cb:ca:9b:
0a:0f:5b:4f:fe:dc:6c:85:65:63:a4:1d:54:6c:dd:91:ee:24:
d3:60:2b:12:8e:3a:dd:b1:de:1c:07:de:14:4a:f0:26:6d:45:
73:04:87:52:a4:60:93:4c:28:a7:b8:36:ea:d5:b0:14:6e:1b:
fa:5e:86:a0:fe:a1:5c:46:53:26:d3:e6:8f:c1:96:5e:d9:59:
0d:5d:91:76:ab:df:de:2c:18:d8:d4:f5:96:4f:db:60:b9:91:
cd:1c:45:59:23:e5:13:20:e7:13:48:ec:04:d0:72:9c:ca:28:
6d:b6:2a:62:59:f1:68:ca:0c:58:ac:ce:5e:ff:49:e5:d9:bf:
5e:d1:9b:88:91:af:b4:2d:52:09:77:54:76:94:4f:ef:b5:b1:
a9:5b:ad:2a:90:34:81:3a:4e:21:ff:d6:89:6b:89:55:22:fd:
8a:53:d0:05:62:2a:95:38:69:f1:39:81:fe:dc:33:5b:5e:91:
02:dc:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:41 2025 by rpki-client