Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
File: GWa02kiR-4CQGCvDO0m1liT8nZs.mft (raw, json)
Hash identifier: acgb6H3/SEuFR0bYF2jY7TKz9wv6Xp5bdb+KLLsaYW8=
Subject key identifier: 25:3C:9B:90:38:F6:B0:64:CA:8A:8E:47:A3:A8:21:16:8A:ED:E8:A8
Authority key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
Certificate issuer: /CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Certificate serial: 019649A22318F1D0BF89EA0AE3705732FA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
Manifest number: 13E4
Signing time: Fri 18 Apr 2025 16:01:24 +0000
Manifest this update: Fri 18 Apr 2025 16:01:24 +0000
Manifest next update: Sat 19 Apr 2025 16:01:24 +0000
Files and hashes: 1: GWa02kiR-4CQGCvDO0m1liT8nZs.crl (hash: QjoIjkSepd1/bKvywPdz6sXNI6E216tEtn195To88m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:23:18:f1:d0:bf:89:ea:0a:e3:70:57:32:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Validity
Not Before: Apr 18 16:01:24 2025 GMT
Not After : Apr 19 16:01:24 2025 GMT
Subject: CN=253c9b9038f6b064ca8a8e47a3a821168aede8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:ae:90:71:df:55:fa:7a:75:bb:87:c4:63:
b1:5a:a1:d3:d8:74:f0:ed:4c:b4:8f:03:85:9c:4b:
f0:d9:cc:20:56:8d:75:2c:8f:87:59:e6:47:9b:d2:
5f:e1:3c:3e:cc:23:ff:5b:8f:14:91:d1:a8:2a:70:
3b:c3:9d:c6:d1:65:fb:d4:17:24:e1:53:7f:58:e8:
6b:3f:19:82:34:48:7a:30:8a:09:c0:7d:18:6c:d0:
0e:02:bf:ad:24:86:6f:aa:93:3e:b3:12:1a:7c:83:
89:27:e9:d7:a2:ba:0a:7c:e3:27:db:55:9a:6c:01:
bb:81:fe:cc:06:f9:41:9c:c4:44:4c:dc:06:ec:98:
2a:06:7b:8f:49:2e:53:4c:d9:2a:16:88:b2:e1:ee:
c4:39:bd:ac:ee:09:46:a1:0c:be:e0:b3:35:63:0f:
19:05:e0:91:d6:e4:7d:4b:62:8d:a9:6f:64:c5:2b:
25:45:03:4d:18:18:d1:74:d1:f2:fd:89:8f:e6:5d:
77:fd:74:46:52:04:8a:6d:a6:79:94:7e:84:5a:c1:
08:5f:61:2a:92:42:ce:57:70:2d:41:3e:3b:96:47:
d3:ef:2f:32:6e:f8:00:f5:76:2c:5c:17:dd:ef:5e:
f0:93:af:74:f5:7c:0a:a1:8a:a6:49:57:21:4d:79:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:9B:90:38:F6:B0:64:CA:8A:8E:47:A3:A8:21:16:8A:ED:E8:A8
X509v3 Authority Key Identifier:
keyid:19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:36:c1:84:4c:83:c9:fe:3b:3e:c3:bc:5e:43:51:b5:ef:ef:
7c:23:40:2e:2f:f2:c4:6e:58:b2:f7:37:ff:83:f7:9d:61:d2:
23:46:5a:4c:9d:f0:a8:15:7f:81:ea:e6:3c:16:0e:6d:f8:33:
98:03:c7:d8:e2:fa:db:c7:48:9d:35:01:f2:93:1a:93:de:fb:
3a:1c:fa:14:9d:8e:74:1c:9e:95:b5:f3:07:a4:26:24:b2:e0:
fa:d1:ae:49:36:8b:83:27:01:19:e8:c0:79:b2:8b:9b:5f:59:
a4:3c:97:d1:5b:bb:ef:ae:54:04:2b:83:af:60:d9:19:9a:d1:
46:2a:2b:98:d3:08:eb:f0:cb:46:8c:02:3a:b7:80:b8:1a:e4:
de:58:db:3d:6c:9c:bc:d4:f9:6c:14:59:09:14:fd:73:e8:5b:
fa:19:b3:ed:fe:81:ba:c0:56:88:be:46:ff:79:11:0c:29:9b:
e0:cb:67:cd:32:fd:63:e7:8c:5a:e1:cc:9c:46:ea:a2:8c:a2:
8c:6e:58:06:5e:cd:8f:35:91:ba:e0:d4:af:fb:a5:61:62:e9:
f4:a3:4e:6b:62:51:bb:bb:f8:74:ea:75:ab:59:26:4e:df:76:
55:da:de:9b:8d:3e:90:39:a7:7b:4e:f5:53:9c:a7:d1:c9:2b:
88:d1:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:15:28 2025 by rpki-client