Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json)
Hash identifier: z+C7pwhDO4h6tTY3WiLi7Tzqz9SI+zH4uuwAF59DfSQ=
Subject key identifier: 35:3C:84:59:81:C7:4D:0A:C7:4B:E5:8D:87:42:B7:60:40:FF:79:E1
Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Certificate serial: 0196451FF87707AB188E7DADD70F8768A5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
Manifest number: 07BD
Signing time: Thu 17 Apr 2025 19:00:45 +0000
Manifest this update: Thu 17 Apr 2025 19:00:45 +0000
Manifest next update: Fri 18 Apr 2025 19:00:45 +0000
Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: OaawfnJREvE84ss++nIC+ycIE9OTnQVUw0JfZsQ5Q5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:f8:77:07:ab:18:8e:7d:ad:d7:0f:87:68:a5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Validity
Not Before: Apr 17 19:00:45 2025 GMT
Not After : Apr 18 19:00:45 2025 GMT
Subject: CN=353c845981c74d0ac74be58d8742b76040ff79e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:2a:7b:5c:02:8f:25:10:b9:51:e7:92:aa:
23:4e:09:4d:2a:5e:b6:58:13:a8:a8:56:a0:ee:f9:
e9:2b:1f:3d:ce:11:77:a1:61:2e:37:64:6b:2c:a3:
96:d4:40:c2:6f:fc:92:29:eb:1c:bb:39:52:7f:1c:
45:cf:c8:b4:00:7e:3b:c8:6a:2d:0c:29:e1:56:0f:
80:2c:3c:23:93:a1:79:0b:eb:00:f5:27:06:26:35:
44:87:37:f7:9d:cf:44:94:f0:ce:79:1e:32:32:74:
85:de:7b:bb:8d:48:ca:d9:a3:3e:52:e7:53:01:5f:
5f:3c:c5:df:1a:51:d3:00:55:c2:b9:b2:9e:3f:d7:
99:0e:39:c5:2f:69:1d:15:da:d2:40:dc:1f:48:b3:
26:6c:be:c9:df:86:b6:e9:1a:f6:0e:56:b6:11:a0:
a3:96:f1:af:49:e5:95:52:58:2b:34:d4:77:ad:42:
a2:84:7e:6c:15:a9:c1:cd:ce:ff:20:6d:a0:2f:07:
68:ad:0a:8f:7e:d7:e3:e9:3d:26:64:6c:0f:af:c6:
e9:28:2d:49:fc:b7:ea:cc:96:e7:48:98:5f:0b:80:
c3:46:92:23:9a:aa:54:6b:28:3e:74:50:95:a6:16:
e3:8d:cc:ef:fb:c6:55:4f:63:0a:10:d4:63:b3:fd:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3C:84:59:81:C7:4D:0A:C7:4B:E5:8D:87:42:B7:60:40:FF:79:E1
X509v3 Authority Key Identifier:
keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:bf:d7:c9:9b:6a:5f:fb:f4:b3:a9:df:e3:69:e2:0f:70:
41:83:6d:64:5c:90:a3:85:b6:f3:1b:c4:a7:6b:ff:21:3b:df:
cd:39:db:93:85:05:87:35:1e:da:ad:b8:2f:23:26:46:70:7d:
ac:b0:38:d4:d2:b7:cf:3a:62:6e:95:b6:d2:20:eb:6a:fb:1b:
e3:c2:84:b9:82:a7:09:7a:8c:23:82:f1:ce:66:0f:44:39:e0:
d9:d7:41:7b:1a:9b:67:40:71:43:00:0a:23:a2:5b:07:2e:a8:
d6:38:99:77:56:fe:b0:f6:be:3e:23:0b:51:7e:6b:74:e6:6a:
7d:c3:ed:aa:f9:85:9b:49:58:ce:21:93:98:0e:83:4e:8d:c4:
36:59:67:9b:5f:f5:c5:a1:05:6c:25:62:e8:44:90:bd:da:d4:
c8:af:78:4d:8b:86:50:5a:31:0e:c5:27:79:b9:c9:e0:22:ea:
e1:1a:3d:55:f8:bf:0e:f8:f5:f6:a6:29:81:80:ab:f9:c4:cb:
6b:d0:51:13:3e:70:26:8d:cf:be:2e:83:e8:4f:c4:9d:27:e6:
44:af:1b:3a:df:1e:be:7e:67:f2:0e:66:51:06:b1:07:3b:7f:
19:be:4a:eb:34:24:0a:37:d9:c0:09:13:99:ba:f0:e9:93:0e:
1e:dd:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:28 2025 by rpki-client