Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: EJWLiPM9V0vIQ0saJi9V7KO0KYWTiU1LJFj01Wn+DgI=
Subject key identifier: C8:FE:93:68:D5:05:BD:16:C6:CE:AC:B9:7D:19:3B:C5:33:1E:E1:81
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 01964FA3960A334C74E6B4EBD802EBD5A1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1502
Signing time: Sat 19 Apr 2025 20:00:42 +0000
Manifest this update: Sat 19 Apr 2025 20:00:42 +0000
Manifest next update: Sun 20 Apr 2025 20:00:42 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: oXP9jLU6R+aMgVostwCEqWw4HLYEfxNaIqaE2itzjAY=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
3: _8ynXS5HiKcYDFRZfIweiLfUiJs.roa (hash: lvqMY1sNj9Il5qS9y4k3F8h0VoCGpDQtuLeu9Ax6iu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:96:0a:33:4c:74:e6:b4:eb:d8:02:eb:d5:a1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Apr 19 20:00:42 2025 GMT
Not After : Apr 20 20:00:42 2025 GMT
Subject: CN=c8fe9368d505bd16c6ceacb97d193bc5331ee181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:cd:ab:bf:10:a7:00:3a:92:a7:08:ac:e2:
6a:a0:37:18:07:1f:b1:18:fb:a9:6e:b8:23:32:fb:
ca:1f:8b:b7:03:72:11:99:18:b3:97:bb:d2:fb:dc:
6f:68:a1:2c:8f:9d:8c:8a:1e:9c:e5:ee:93:0f:9f:
7c:6f:ed:3b:29:0c:57:48:f8:86:13:3b:a2:29:ff:
ec:11:3a:2e:e4:0b:42:81:03:5e:f3:c6:ea:d8:92:
5c:33:51:fa:07:f2:90:9e:3e:2b:0d:3a:d2:e5:77:
ac:9c:dc:6b:e1:1c:36:46:09:99:b9:9f:94:f0:8c:
ca:03:c1:e1:a7:05:91:c6:46:44:ab:f5:31:3e:d5:
30:24:0b:3c:cc:76:49:8f:77:a1:ee:9e:af:d2:30:
9b:d5:cf:e4:81:d6:12:3d:6c:6d:b5:e8:5a:46:18:
13:23:3b:aa:a9:ed:32:a8:aa:06:1c:57:15:0b:2b:
e4:76:24:8a:5a:7b:39:ad:5c:d9:ef:02:d9:ad:71:
df:7d:da:93:c6:3b:c8:52:fb:7f:16:29:2e:4c:5c:
f1:3d:b6:ca:3f:ca:59:e3:87:03:90:ba:14:c7:0b:
8a:f4:54:6e:16:8e:69:1e:78:99:b6:7a:61:1d:75:
a9:01:23:8a:e4:87:42:b5:ac:e6:67:b8:45:41:37:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FE:93:68:D5:05:BD:16:C6:CE:AC:B9:7D:19:3B:C5:33:1E:E1:81
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:80:9f:e2:a9:91:02:58:ac:a3:08:f8:5b:f7:ba:d8:70:53:
c7:2a:e0:cb:af:cb:35:02:59:ea:f9:8a:58:bf:05:ed:9f:f2:
44:fe:01:08:28:09:a6:d5:9e:b0:e5:5a:31:a1:2e:27:b8:37:
54:36:74:3e:e1:a0:51:82:40:d2:9c:79:22:6f:20:0e:e2:8d:
19:de:9c:2a:72:a9:27:a5:46:d3:bd:01:bd:2e:b5:db:13:31:
72:ab:70:6e:49:c3:a3:ea:d6:d3:7e:20:ce:49:e3:49:9b:ab:
c7:f9:f4:65:46:a9:0b:0b:95:cd:0d:4a:81:52:9b:be:1e:71:
0c:9c:65:22:58:35:18:f7:b6:2b:ef:2d:6e:73:1e:6c:ef:c7:
a3:56:66:7f:b3:f2:b7:72:85:94:5f:04:a1:81:0a:c2:50:f0:
24:61:f2:83:af:45:e9:e8:e9:6f:a1:59:d8:23:f7:44:6f:b4:
62:ab:07:50:8d:6a:ac:b4:8b:39:7c:32:6f:1c:36:df:76:b3:
b7:17:07:e4:da:53:7f:d2:f8:30:e2:f4:ea:da:b2:a1:ee:80:
83:17:79:eb:14:ba:23:30:7a:f6:e0:ea:a5:5d:f2:07:4c:f0:
2f:39:b2:24:9b:ad:58:ee:85:ef:81:2f:93:c8:d6:a8:27:84:
15:0a:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:59 2025 by rpki-client