Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: 9DG97wHW1NEU0WxPpERqKnOFZ2Czj6oeaGop3SEqbVI=
Subject key identifier: 9C:43:92:42:94:92:BD:E9:E8:DE:E0:BA:E5:11:1B:32:61:CA:C9:B1
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 01965F16708898AFA5D277924D624C933CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 043A
Signing time: Tue 22 Apr 2025 20:00:28 +0000
Manifest this update: Tue 22 Apr 2025 20:00:28 +0000
Manifest next update: Wed 23 Apr 2025 20:00:28 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: mpPs+xC0HepniNzY6rEm17CMbpRCK7frQRJd/dU5kJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:70:88:98:af:a5:d2:77:92:4d:62:4c:93:3c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Apr 22 20:00:28 2025 GMT
Not After : Apr 23 20:00:28 2025 GMT
Subject: CN=9c4392429492bde9e8dee0bae5111b3261cac9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:6c:74:50:e6:b6:00:d9:f9:19:ba:4d:6c:
1d:4c:ba:7e:99:41:9f:49:ea:fc:20:44:de:fe:06:
cb:d3:7b:7a:d8:1a:cb:4e:4b:61:0b:8d:6d:32:5d:
b1:b1:2a:b7:e0:6c:af:cb:c7:a3:05:ff:00:a6:b3:
f5:6f:9b:30:a2:c4:2d:bb:d1:57:61:9c:d1:8d:d8:
7c:cd:4a:ef:5f:e6:6e:be:23:5a:fd:ba:2f:37:47:
a6:d7:51:e2:bd:0e:88:bf:e4:bb:e8:be:48:58:28:
e6:9e:17:64:b8:c2:29:d5:a2:06:03:76:48:22:fe:
d4:23:59:83:e2:60:45:d2:ca:c4:ac:d3:42:93:8a:
44:c0:9a:10:72:7c:7a:55:50:f9:d9:1d:65:26:ea:
81:89:46:b4:9e:7f:20:45:89:38:ab:2d:2b:78:69:
44:f1:bc:15:73:90:62:dd:e7:ec:5c:1a:57:e3:2a:
99:b5:4b:68:66:69:22:8f:5e:ec:b5:0a:4c:7e:d1:
9d:b0:20:f9:bb:b9:5b:3b:04:21:7f:a1:ea:f0:a6:
5d:3a:6a:ca:f6:8a:64:de:e8:5c:7e:24:9d:e4:7d:
9e:e8:27:2c:ae:50:c5:ae:61:43:0c:26:25:ff:a9:
90:3d:6b:cc:f7:43:b5:90:39:4c:c7:1e:6c:8a:8b:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:43:92:42:94:92:BD:E9:E8:DE:E0:BA:E5:11:1B:32:61:CA:C9:B1
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e8:a1:49:8f:f3:6f:06:b8:c4:57:ce:90:3b:3b:2e:94:47:
7d:ff:75:d0:29:db:1b:8b:21:6f:aa:e2:aa:e0:f2:cb:83:62:
a8:bb:9e:e1:aa:3f:8b:a0:72:6f:b6:b7:de:3f:fe:98:f8:72:
34:0f:db:fd:53:54:09:01:d7:65:5b:b0:27:71:6b:46:0c:98:
e6:74:e3:24:f8:d2:fa:3f:7c:42:8d:60:fe:ae:23:cc:c0:c7:
fc:b0:3c:3f:0e:5b:28:cd:7f:06:ba:99:5f:e4:c5:f0:f5:fc:
e4:c1:d1:3a:51:e1:bc:a4:93:73:bc:c6:08:d9:8a:d5:70:83:
98:58:4b:31:ba:3a:86:91:97:ba:e2:f4:42:38:79:0d:55:e7:
86:22:23:28:3b:80:67:b4:0b:f6:c6:ca:3f:3b:f6:1b:a1:fa:
e9:af:4e:2d:eb:42:5c:73:11:61:29:5e:b1:24:b5:55:48:f0:
61:7c:a2:2d:2f:ff:8c:8a:94:9a:c4:e9:0c:6b:c2:70:e8:66:
cf:72:6a:06:6e:fc:e3:6f:00:27:16:bb:ca:c9:de:7a:c0:48:
46:b8:8f:30:c6:d7:2e:bb:1b:a1:11:69:ab:24:51:1a:2d:57:
9f:f6:b1:30:d6:bb:53:ed:68:7a:90:08:ce:2f:26:5f:89:9a:
5e:ad:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:33:37 2025 by rpki-client