Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: Dzr065g/2baUeoLhlKwcNnaScwytlSOCN5zBE6ftecQ=
Subject key identifier: 7C:7E:FB:BC:1F:F0:8C:51:66:4C:C9:51:66:27:E6:97:58:F0:C3:88
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 019510C7775EF64A501F0B0DAABA5EFD93F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0A83
Signing time: Sun 16 Feb 2025 22:01:02 +0000
Manifest this update: Sun 16 Feb 2025 22:01:02 +0000
Manifest next update: Mon 17 Feb 2025 22:01:02 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: 8dqV0doiJYIsJAmtJiAPbm3WBYuHVwDInlsB5Zd+r0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:77:5e:f6:4a:50:1f:0b:0d:aa:ba:5e:fd:93:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Feb 16 22:01:02 2025 GMT
Not After : Feb 17 22:01:02 2025 GMT
Subject: CN=7c7efbbc1ff08c51664cc9516627e69758f0c388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:07:1f:4e:64:ff:40:d8:7f:65:35:66:5e:
08:83:17:4c:2f:0f:3d:db:0e:f1:8f:fe:3b:2b:3c:
1d:54:2a:64:fa:97:5a:72:48:d6:2d:e7:de:60:10:
f8:3a:f1:4e:ee:6a:2a:fa:d8:b9:45:75:18:15:07:
e8:23:96:d5:54:5b:0c:df:2c:f9:2a:cf:3b:97:f2:
b7:97:df:e6:9c:3c:5a:0b:58:70:fc:5d:c3:77:99:
aa:4a:9c:17:b2:01:54:c3:ac:68:ab:4f:a6:14:d9:
75:e2:c5:cd:43:92:bf:ef:d5:af:f0:68:96:2e:e7:
c1:ca:14:95:5d:e9:7e:d8:37:b0:e1:53:3d:eb:e1:
12:fe:94:f6:76:5f:83:11:09:25:9b:86:87:32:a4:
a7:67:1c:6f:26:c5:a2:82:1f:aa:c3:77:b7:0a:11:
5c:68:05:27:9f:23:79:7a:a4:85:45:be:93:54:e2:
1f:48:9e:88:75:12:5d:ad:5b:4e:76:5f:4e:52:8e:
82:47:13:a5:60:85:26:34:b5:05:3f:91:5b:e5:fa:
c3:41:62:9e:1f:cc:d6:28:50:9c:62:f1:45:3f:a2:
85:6c:d1:a4:99:dc:da:f5:8c:7b:36:bb:9c:02:d3:
5c:ad:c5:6c:72:b7:4b:37:90:c7:7c:92:ff:e9:cf:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7E:FB:BC:1F:F0:8C:51:66:4C:C9:51:66:27:E6:97:58:F0:C3:88
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f6:d2:46:8f:e3:3e:6b:dc:6c:dc:1b:cd:ce:9e:90:bf:bb:
c1:7e:77:f9:f6:74:5f:ed:4e:98:10:34:9d:ee:68:9e:fb:5e:
ac:57:ef:c4:ef:ab:7b:4b:df:74:7e:ac:0a:c4:6b:e4:4e:da:
74:a6:1c:4a:11:85:e6:0c:22:d7:88:44:3e:ac:64:b2:c2:ff:
6c:7c:a5:2f:e5:35:8e:da:4e:c2:65:a3:86:82:62:86:d4:d1:
40:4d:6e:91:0a:2d:06:6f:bc:b8:0e:00:3e:6e:38:f1:b0:ba:
e5:84:3f:4d:dd:95:77:2d:4a:a8:57:d2:25:ad:4b:47:e1:b8:
8d:18:82:40:d5:28:28:3e:ae:5a:3b:ff:58:ad:51:43:e6:f1:
b2:72:ea:f3:de:96:88:68:96:50:a1:1e:ed:29:7c:61:a4:70:
81:c4:38:d2:8d:37:ab:d8:f2:40:4d:72:b3:ab:47:37:6e:b0:
e6:30:68:24:ca:14:2c:76:e2:26:95:0d:4a:72:2a:7a:85:57:
81:2c:4b:59:6f:ba:c1:40:72:87:95:86:72:c6:22:54:ef:59:
5a:87:e1:d0:a2:dc:0b:ac:22:e2:4d:c9:3e:cd:9b:63:5c:4f:
10:b4:29:37:ed:57:e1:da:f8:60:ad:64:45:80:5d:6f:82:fa:
9d:68:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:20 2025 by rpki-client