Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: sXU5aF5+ElscwKlL5NX+NWTekFzbesLemUj9HSEJBAg=
Subject key identifier: 30:80:7A:BD:06:10:04:BF:2D:53:9F:A3:05:FF:D8:F8:FF:7B:8B:2C
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 019510903679EEA8F6EBE01BDC115E9CDD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 21:00:41 +0000
Manifest this update: Sun 16 Feb 2025 21:00:41 +0000
Manifest next update: Mon 17 Feb 2025 21:00:41 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: lj8teJHxXyiwgwC19Y9MxexSXz6OUxkhx+fOud2d1EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:36:79:ee:a8:f6:eb:e0:1b:dc:11:5e:9c:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Feb 16 21:00:41 2025 GMT
Not After : Feb 17 21:00:41 2025 GMT
Subject: CN=30807abd061004bf2d539fa305ffd8f8ff7b8b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:89:a3:2d:b5:f3:07:21:83:d1:9f:fd:85:
dc:84:85:a6:b6:4b:48:e9:bb:4c:1d:04:6e:43:4e:
88:84:40:5e:ac:ad:57:e8:9c:59:9b:57:58:6e:e1:
62:c5:ca:f4:e4:8d:4d:35:4c:aa:4b:10:02:fb:da:
46:92:60:16:d3:c6:9a:32:d2:f2:fe:47:86:04:d4:
05:c9:f6:9e:c7:45:30:de:2b:ce:7a:96:dc:ad:a3:
0b:40:1e:af:12:41:23:98:44:5c:07:57:d9:ce:e8:
4d:22:6d:5c:91:e9:74:0e:87:84:34:f2:77:b3:87:
0a:df:35:fe:79:94:12:12:b5:e0:7f:ce:65:ec:43:
72:04:82:e1:1f:6b:c1:f6:9f:58:db:b2:51:bb:38:
f7:e0:61:f4:59:cf:a5:84:c1:6d:92:6f:be:ba:80:
ad:a3:52:4a:c3:d7:d8:b1:03:96:81:62:46:72:bf:
48:98:ff:48:36:f2:7d:d6:6a:aa:2e:f0:b6:ad:f0:
47:f3:dc:77:97:bd:c1:a4:d5:e0:3f:0b:02:88:4c:
f9:d9:50:0f:b3:ee:77:3a:96:83:7d:b9:0c:e6:62:
3f:d2:da:cc:e5:f0:c6:99:ff:fc:2f:ab:23:2c:bb:
23:c3:ba:2e:86:87:ab:1c:aa:c6:71:16:cb:5c:0e:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:80:7A:BD:06:10:04:BF:2D:53:9F:A3:05:FF:D8:F8:FF:7B:8B:2C
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7f:79:2a:7e:6d:04:be:1e:f9:b4:33:73:ed:78:cd:fb:85:
27:ba:09:0b:af:e7:b7:97:47:10:05:ee:04:58:99:6f:e9:9b:
48:7c:4c:96:99:4a:35:39:85:88:28:d6:cd:ba:73:90:ee:ba:
cc:ea:fb:1c:8f:50:69:67:04:d8:5b:ca:1e:be:01:bb:a0:d7:
52:e7:bc:92:c5:aa:3c:80:b3:48:80:a2:f4:bb:73:b6:27:82:
17:b7:68:db:cf:f2:20:e9:5d:10:50:ab:2e:7e:a3:6f:45:3c:
1e:04:4b:cd:fd:21:83:4e:3e:cf:ae:de:e4:7a:7d:e2:58:d9:
a2:24:ae:67:57:46:5d:15:89:56:ba:56:81:31:2f:d6:db:01:
f2:4a:0e:17:5f:c6:b6:58:e8:fc:a3:21:41:c9:39:ad:d1:a5:
40:7b:15:8e:2d:03:8f:85:81:73:9c:6c:c8:fb:0b:92:b5:01:
4c:8a:a2:f7:2d:c7:60:4f:ce:cf:58:64:47:bf:d8:b8:29:fc:
05:23:01:b8:1d:c2:fe:64:a6:45:66:4e:be:52:de:7b:91:08:
55:9a:52:6a:6f:3a:52:d6:e2:37:d1:1b:e1:ea:a7:ad:b4:48:
74:25:1e:5b:ac:1a:b4:c7:06:1f:56:42:91:e9:27:df:9f:a8:
e4:61:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:05 2025 by rpki-client