Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: Qyu0H8G0ZzxRuiOXg8tIAGZ8E87YMbznYIBisJeFbjY=
Subject key identifier: 6C:C9:02:DC:81:3B:B5:07:09:ED:56:E4:C7:86:B8:D6:41:35:84:F4
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 0196169011CD93EDC36B795D9EB3AB8DFB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 07E3
Signing time: Tue 08 Apr 2025 18:01:02 +0000
Manifest this update: Tue 08 Apr 2025 18:01:02 +0000
Manifest next update: Wed 09 Apr 2025 18:01:02 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: zyjDyc2JxfObw+Nqp/LdFeCQbD9vGuOdh7J/4yk15k4=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:90:11:cd:93:ed:c3:6b:79:5d:9e:b3:ab:8d:fb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: Apr 8 18:01:02 2025 GMT
Not After : Apr 9 18:01:02 2025 GMT
Subject: CN=6cc902dc813bb50709ed56e4c786b8d6413584f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:ab:14:a4:8f:c9:62:a6:e2:9a:77:4d:b7:
69:db:b7:e5:41:56:62:72:9f:e1:24:ea:a6:18:36:
f1:bf:97:07:13:5f:09:ab:19:4a:7d:1a:fe:98:8f:
6f:ab:17:ab:1e:b8:26:22:46:49:fa:32:c9:08:0c:
93:06:3c:e8:9e:02:e6:3d:a2:89:16:36:07:ec:80:
11:da:6c:c5:f9:23:98:4d:cd:1c:ee:5d:c3:47:42:
6d:f8:d5:59:fc:df:53:73:22:19:18:21:2b:9f:d2:
72:87:fc:52:bf:13:cf:fb:3a:ab:56:d5:92:39:93:
89:1a:a4:d5:6b:71:04:d6:42:c0:be:af:36:96:76:
a9:dc:35:a9:21:11:23:b3:b2:d4:7f:9d:d3:29:b5:
da:90:2e:54:60:6c:96:fa:a8:23:2d:9e:3f:95:e9:
a9:a1:ea:b4:29:31:47:1f:84:d1:59:c0:e0:24:c5:
d0:12:fc:61:48:cc:8d:22:cf:37:c0:79:cf:a2:46:
a8:bb:2e:ee:26:a6:bd:d0:7e:7a:37:12:2a:b2:e0:
de:25:75:42:6a:8b:25:ff:0e:84:72:06:76:7e:80:
9a:0f:ef:6f:b6:be:9e:e9:ed:44:6c:7a:3f:69:b5:
e5:83:17:2a:3f:50:e1:65:cd:99:89:ba:e9:fe:40:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:02:DC:81:3B:B5:07:09:ED:56:E4:C7:86:B8:D6:41:35:84:F4
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7f:b7:b8:13:5e:f9:0f:c9:64:14:1c:06:ef:ef:1a:62:27:
a2:3b:7f:50:89:fd:1d:4d:b1:20:31:d1:4b:61:75:4b:2d:2b:
ef:36:a8:c1:1b:22:60:96:1e:88:63:da:45:b0:6d:5c:f1:56:
e0:28:62:47:6b:44:f6:e8:a7:c1:23:59:8e:03:ed:13:70:61:
1f:a5:44:2a:45:ad:21:8a:40:f1:1c:d0:cd:9c:82:65:67:ca:
40:0f:36:a0:99:8e:8d:90:8c:af:a5:53:2c:1e:a1:f4:b5:d0:
fc:18:22:e1:24:e6:5c:f8:67:45:55:c1:8e:98:6f:d8:d6:87:
cd:3f:1c:19:f8:1d:f9:02:b5:1a:f4:b3:3a:70:31:15:c4:79:
38:66:dd:b6:57:24:f9:85:ad:03:39:b9:e4:7c:42:f5:9f:d8:
df:01:52:6f:50:6b:c2:15:3e:a7:ee:36:1c:99:f0:bb:ce:4f:
fe:e8:9a:45:a1:c1:ce:dd:6c:25:46:26:f4:81:ae:30:5e:c8:
30:c6:c4:15:21:b0:e8:45:2a:c7:1d:2d:63:d1:94:09:6c:6a:
8d:0d:75:8c:e7:40:6a:dc:a5:5a:c2:76:7e:47:e9:9b:cd:8e:
a2:1b:e6:4f:35:1b:5c:e7:9f:47:09:4c:c1:c4:4c:c4:93:ae:
43:46:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:43 2025 by rpki-client