Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: h/gDEio9r3LI0eFtp3Pcl1A6mhLiTsrZVmAXPRty1mg=
Subject key identifier: BA:00:7F:C9:16:AB:89:C5:33:96:65:90:8F:7D:6B:76:E8:7D:A3:DE
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 019655375452A7C1C4A081B537CE5F520CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 01C8
Signing time: Sun 20 Apr 2025 22:00:11 +0000
Manifest this update: Sun 20 Apr 2025 22:00:11 +0000
Manifest next update: Mon 21 Apr 2025 22:00:11 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: m1I1AJX/H5uL0FHG5o/fypQI1kfIAcCw2ZzLfi0Qorg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:54:52:a7:c1:c4:a0:81:b5:37:ce:5f:52:0c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: Apr 20 22:00:11 2025 GMT
Not After : Apr 21 22:00:11 2025 GMT
Subject: CN=ba007fc916ab89c5339665908f7d6b76e87da3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:aa:3a:24:e5:b0:25:14:f8:53:37:5c:8c:
99:85:34:73:cf:1c:3e:79:98:ce:4b:d8:73:4d:72:
ee:fd:07:ab:b3:e8:e0:f2:60:a1:2c:f5:3d:ac:c9:
69:66:54:51:ba:8d:ee:e3:54:1b:e5:c3:13:8c:3a:
71:4f:20:d6:34:fd:cf:ee:4f:f4:56:13:7e:80:cb:
49:6e:9b:32:06:d2:6d:7a:be:a4:ba:00:52:64:df:
98:64:eb:06:4e:33:ca:17:cf:55:a9:f4:5f:57:fc:
c3:00:79:95:3c:b8:aa:3c:f9:39:54:84:2c:d0:6f:
93:b0:1d:f6:0b:a0:26:9c:26:1e:cd:27:dc:b0:66:
35:2b:14:71:4f:13:03:93:21:31:65:0a:f2:19:b4:
91:06:22:ad:69:10:7b:48:10:74:3e:69:3d:0e:e3:
64:4b:56:6c:cb:d6:b5:c3:9e:19:2a:cd:52:56:56:
ea:7a:70:df:69:16:e2:53:4a:50:45:49:34:90:2c:
c4:7c:73:4d:8f:e2:28:6a:0b:9d:a4:84:fb:bc:f8:
b0:e4:50:ec:5d:94:6c:2f:19:50:c6:2a:30:ba:92:
00:df:00:55:88:c4:ea:cc:5b:22:b8:97:a8:e5:87:
52:48:54:2b:77:4d:5f:dc:67:6e:8b:e9:a9:20:8f:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:7F:C9:16:AB:89:C5:33:96:65:90:8F:7D:6B:76:E8:7D:A3:DE
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:77:b5:9a:55:7b:e2:69:ba:99:17:1b:3e:27:f5:8c:49:13:
27:aa:b9:91:ce:89:18:64:e3:69:1b:e0:eb:6d:9e:56:23:cb:
3a:5c:73:60:b3:43:7e:70:19:5b:49:83:e2:ed:01:8f:1d:1c:
bd:ed:9d:eb:7d:71:85:c3:5b:35:98:48:52:a0:0e:b3:8a:f8:
65:3f:6b:6e:39:d5:39:39:e8:0e:2d:80:51:bd:66:ca:07:a4:
a2:b5:60:9b:0a:24:dc:aa:d2:e4:d4:53:e9:fd:d4:a6:f5:f7:
98:0d:5b:f4:39:c6:cf:b3:11:7a:e0:ec:d0:87:60:ed:19:78:
b2:43:21:94:a7:48:39:ae:6e:f3:4c:b6:f4:b9:25:22:c5:46:
bf:a8:d9:a7:56:00:b1:86:0c:a5:0f:2b:32:62:bc:74:2a:cd:
4e:41:2a:dc:7a:61:f0:0f:26:10:2c:06:26:be:cf:01:fe:0d:
29:d8:6d:ef:04:88:80:82:60:f5:e1:08:3d:4c:54:9d:8c:44:
7b:ef:c7:b7:60:1b:8b:91:55:2b:e4:30:72:01:87:89:37:25:
11:20:83:55:80:91:b6:b6:d7:4d:5d:28:70:ac:02:5d:fa:3d:
5c:26:4d:00:23:a0:3f:26:69:8d:f7:af:01:f1:c2:39:4f:cb:
b4:de:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:45 2025 by rpki-client