Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: 9VB9KMTS0FGa0NxIUi3wD+o/8N28vfZabaqsc6j7qns=
Subject key identifier: 4E:9F:31:B8:03:C9:79:B4:B0:DD:BE:C8:03:AD:C6:AB:38:4A:9D:A5
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 019650B6623C01F8642A0D95A294E7643A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 143A
Signing time: Sun 20 Apr 2025 01:00:52 +0000
Manifest this update: Sun 20 Apr 2025 01:00:52 +0000
Manifest next update: Mon 21 Apr 2025 01:00:52 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: dvToUlKLuXzJs2mGy5Xoc+QIGzBnZRFKtRfMNZ+TSl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:62:3c:01:f8:64:2a:0d:95:a2:94:e7:64:3a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Apr 20 01:00:52 2025 GMT
Not After : Apr 21 01:00:52 2025 GMT
Subject: CN=4e9f31b803c979b4b0ddbec803adc6ab384a9da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:c0:1e:77:de:2b:f7:ac:c5:33:cc:3e:af:
1c:8f:d2:3e:2b:c5:58:76:76:ad:49:18:9d:d8:ad:
15:78:f9:0b:78:f5:db:95:88:b9:4f:c6:93:63:c9:
79:a4:b7:a3:24:6f:98:7c:49:91:eb:01:8d:f5:1c:
aa:4f:53:e8:40:b3:59:17:a6:46:ee:a6:c0:7b:f5:
6b:97:d7:d0:fd:91:e8:f0:d1:a7:45:4c:97:75:0d:
00:b9:8c:3c:e9:43:cc:43:d6:66:72:3a:fa:fd:f5:
c4:01:ff:c2:86:74:14:41:27:58:f9:df:d8:69:b8:
3b:0a:54:4e:2c:d0:19:63:0c:43:91:ef:f3:1e:03:
5e:6e:8f:a1:17:50:cd:69:b0:b2:14:1b:dd:4b:d0:
17:22:ef:e4:8f:78:91:66:cb:84:77:38:5f:a0:8a:
45:fc:07:7d:43:05:75:ac:2b:b6:34:c0:e2:c4:63:
8f:85:1f:38:e6:ba:5d:66:39:d4:c5:7b:e5:c3:18:
9a:da:f9:70:bd:c9:2e:21:d0:5a:07:4b:0e:cd:22:
8d:b0:e2:81:52:ba:12:92:b8:3b:de:e7:d1:28:e9:
e7:f8:54:56:43:bd:dc:c6:d5:5f:d3:40:a8:78:fd:
69:d4:50:97:4a:15:33:dc:99:47:33:78:5b:d0:ab:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:31:B8:03:C9:79:B4:B0:DD:BE:C8:03:AD:C6:AB:38:4A:9D:A5
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e9:65:2a:9c:21:11:1b:70:58:ca:2c:78:8a:fb:99:26:c3:
b1:78:d6:32:ec:3e:81:af:c0:04:43:e6:53:33:a9:8e:dc:a9:
8a:16:00:a8:fa:02:65:1c:92:47:56:57:59:7a:03:e9:d0:cb:
02:51:82:72:9d:99:18:76:45:2d:d9:7f:5a:c3:45:f7:b4:9e:
70:db:51:86:01:45:41:7b:cc:f4:32:a6:a0:81:5c:2a:be:fb:
b7:2a:29:95:aa:e2:e0:ab:fe:a8:5c:00:f9:15:8d:ff:c6:d0:
cd:95:af:7c:14:44:2b:37:88:b8:8b:cb:a5:17:4d:cd:3e:13:
f5:ee:c1:91:dc:1d:12:22:90:5c:75:c8:30:23:9b:e5:4d:1f:
67:6b:5d:f0:18:74:9c:98:b2:2e:f1:50:4a:4b:f6:35:90:88:
32:22:c7:c1:50:b1:b4:71:22:00:39:10:5b:c4:18:f6:a1:3b:
68:51:3d:64:3b:ef:f7:89:78:cb:c7:ce:a2:f4:c7:62:69:a4:
41:20:21:9b:c9:78:e0:40:44:ba:7c:62:84:90:1a:bc:b1:00:
ba:de:f0:40:60:91:fe:45:3d:e6:ac:89:98:ff:78:40:d2:a1:
e8:e9:b4:47:07:79:cb:86:4b:6b:cc:74:31:38:06:e9:01:38:
ee:bf:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:45 2025 by rpki-client