Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
File: gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft (raw, json)
Hash identifier: MH9UD0PvrtDwFdSKzU7VuberpkblSarSawjU1EClg7A=
Subject key identifier: 3E:ED:6C:5B:D7:DF:B0:AF:68:61:51:A5:B9:5E:B9:0F:5F:4D:6A:F7
Authority key identifier: 81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
Certificate issuer: /CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Certificate serial: 0196124545443E2D87FBA80F4497C28DDA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
Manifest number: 0322
Signing time: Mon 07 Apr 2025 22:00:51 +0000
Manifest this update: Mon 07 Apr 2025 22:00:51 +0000
Manifest next update: Tue 08 Apr 2025 22:00:51 +0000
Files and hashes: 1: gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl (hash: iYOuFQhiDfX5DG4VHNEYcJQt3SiPCp+8Y7Wmq30BXws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:45:44:3e:2d:87:fb:a8:0f:44:97:c2:8d:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a36c67e9a23539c8153a9834ef83e5c18e6b72
Validity
Not Before: Apr 7 22:00:51 2025 GMT
Not After : Apr 8 22:00:51 2025 GMT
Subject: CN=3eed6c5bd7dfb0af686151a5b95eb90f5f4d6af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:06:43:20:a0:71:f3:79:f7:1c:1d:01:6d:
57:14:43:15:0a:dc:85:b5:ed:88:8f:3a:d1:98:78:
6c:e3:ac:c7:5a:3b:b7:56:53:b1:eb:2d:35:bf:04:
0f:af:9d:1b:03:6c:d3:5d:4b:c9:cb:cf:b2:78:85:
41:26:be:c9:d8:4c:ef:56:ac:88:19:5b:2c:3d:d5:
55:5a:d7:0f:7c:92:4a:cb:85:48:86:ec:b3:ec:b9:
e9:5a:62:54:54:30:33:a9:32:94:d5:d7:af:f7:26:
d2:1d:a2:b3:d5:7c:73:63:2d:4e:af:e8:cc:0c:97:
90:f8:1e:82:0a:15:67:db:53:a3:ac:da:39:3e:b2:
a5:c6:af:ba:6d:67:eb:1c:da:e6:0a:8b:fb:d3:ac:
c0:d6:8a:c9:34:1a:ea:48:46:bf:c7:db:12:59:69:
37:fe:53:00:f4:82:28:96:b9:b8:73:a8:30:b2:c2:
d0:36:36:02:c3:4d:30:1a:aa:65:df:d1:ee:cf:df:
7d:9e:c6:83:f8:15:6e:a8:35:b4:49:eb:3b:3d:7c:
9f:a5:92:be:bd:70:c4:87:de:8d:1e:5c:ae:0e:93:
60:31:81:e5:2b:13:29:cc:7c:e7:7d:d7:09:59:a4:
ce:9b:77:bc:bc:a0:a3:f7:d1:b9:81:90:49:eb:fa:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:ED:6C:5B:D7:DF:B0:AF:68:61:51:A5:B9:5E:B9:0F:5F:4D:6A:F7
X509v3 Authority Key Identifier:
keyid:81:A3:6C:67:E9:A2:35:39:C8:15:3A:98:34:EF:83:E5:C1:8E:6B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaNsZ-miNTnIFTqYNO-D5cGOa3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25cbad-6134-45b1-8b3d-eb569a8a210f/1/gaNsZ-miNTnIFTqYNO-D5cGOa3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4e:e0:d5:a8:34:6c:5b:89:56:83:a6:4e:3b:77:5e:e2:2b:
b4:d4:f1:32:78:16:6e:66:97:37:02:d6:62:26:df:49:35:1d:
ad:7e:e9:0f:00:bd:5a:9b:94:a2:80:6b:d9:96:d4:e9:ce:da:
e8:b8:51:92:6c:cf:42:29:6b:34:00:03:09:d6:33:3d:5a:f3:
3d:43:55:d6:84:0a:6a:3a:d2:4f:f1:23:28:49:60:54:07:a0:
a9:70:80:85:74:00:82:3b:9d:b5:04:79:92:7c:0e:bb:d3:1f:
ad:62:0b:fc:79:67:6b:72:2d:ee:8b:fe:de:06:f6:be:14:da:
45:be:dd:3a:22:b8:fd:bb:9c:9f:e2:d5:72:21:32:71:b4:3a:
ab:90:33:26:61:87:e7:10:dc:dc:06:e1:8c:0b:40:53:cf:cc:
9a:3f:de:12:f4:84:aa:2d:dd:03:2c:67:32:35:98:25:a0:c5:
d9:72:f3:4b:f4:08:19:33:08:21:d0:e6:62:74:51:68:a8:c3:
ce:48:78:59:c4:2a:10:ca:37:43:95:4d:cd:34:72:46:f3:cb:
8c:1f:34:58:d9:69:78:0f:43:66:1d:ff:4e:ec:6e:46:f8:82:
c9:46:f1:99:bd:a2:8e:9c:2e:a8:7e:d4:3f:38:de:fc:00:2d:
9c:50:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:25 2025 by rpki-client