Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier: fNYOJqQ7dX05bUCiyWJEzREOsGRpzutXgtvDKsEEaJc=
Subject key identifier: 3D:A4:7D:4D:B1:D5:19:70:25:34:4C:58:13:42:14:3A:AB:B5:48:FA
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer: /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial: 019611A0C67244C25D26C3A073DD121A4637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number: 09A0
Signing time: Mon 07 Apr 2025 19:01:11 +0000
Manifest this update: Mon 07 Apr 2025 19:01:11 +0000
Manifest next update: Tue 08 Apr 2025 19:01:11 +0000
Files and hashes: 1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: 7eAY0o3q1nkcjWMP2csUyi+u+gRQUmhfx7elFDQU/vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:c6:72:44:c2:5d:26:c3:a0:73:dd:12:1a:46:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Validity
Not Before: Apr 7 19:01:11 2025 GMT
Not After : Apr 8 19:01:11 2025 GMT
Subject: CN=3da47d4db1d5197025344c581342143aabb548fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:a7:4c:55:83:5c:cd:f7:d9:d4:0a:1d:63:
17:3d:c9:68:89:75:fb:1f:20:d2:f8:f5:d0:e5:77:
9a:85:5e:0e:57:f5:a7:0a:d7:4f:e0:f6:3d:93:b2:
dc:85:a3:97:e9:94:f1:61:76:13:48:1c:15:20:76:
49:56:fe:cc:8b:60:03:b1:77:0c:c9:22:b4:cf:0c:
8e:23:35:f2:91:8a:a0:1e:e2:64:ad:ee:70:46:c0:
8d:ca:f0:ec:ef:05:65:bc:38:9a:64:d1:b1:9e:1f:
d8:c7:2e:ae:f1:40:22:3e:52:1c:22:da:57:e8:5b:
4c:58:85:aa:ba:ed:49:69:02:7b:aa:e2:71:1a:2e:
a5:05:fa:5c:6f:99:cc:15:b9:b7:b1:59:65:de:54:
65:b3:3b:20:67:b9:12:55:d9:7a:42:5c:8a:29:fe:
b3:20:25:3b:1a:1d:ea:74:55:ff:ba:95:30:5c:27:
dc:f6:97:d2:c4:e9:d3:f2:73:50:ad:c5:e7:f1:4f:
65:9a:95:53:c0:90:15:d8:9b:6e:5a:a4:64:cd:b6:
8a:a5:99:ef:0c:2e:9b:c2:a9:ca:e0:11:e4:74:82:
9a:98:ed:c6:02:36:c2:7d:b5:cf:7f:8e:4b:8a:a7:
b7:be:b5:3c:30:57:e1:22:39:32:e4:15:45:84:78:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A4:7D:4D:B1:D5:19:70:25:34:4C:58:13:42:14:3A:AB:B5:48:FA
X509v3 Authority Key Identifier:
keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:62:bd:31:33:2e:8f:11:cf:a4:3c:9c:1a:07:e7:7e:de:16:
a6:76:c6:b8:ac:88:dc:ee:b2:54:36:26:1d:f6:79:c0:68:96:
dc:c0:a2:23:49:11:fd:d8:2f:bf:75:8b:95:63:a2:37:2f:4c:
2a:c9:c9:96:8b:30:ce:aa:57:60:7a:f7:56:4d:ca:d6:63:bc:
bd:45:2a:31:41:2e:c2:1d:14:79:55:e4:1a:64:c7:f6:91:cd:
54:9b:9f:50:4e:61:0e:28:e8:5a:08:77:d2:bc:57:a2:ed:9b:
55:c0:1f:27:95:b6:a9:ad:df:12:a2:64:f7:e7:02:b4:af:d1:
26:ed:ea:0a:77:ca:14:a7:c2:fd:e9:37:36:61:d5:e6:ec:7a:
f0:0c:f0:73:9f:89:b1:43:26:95:5e:4d:9c:22:1e:17:86:44:
8f:2c:7e:c3:e1:d0:2e:cf:51:12:96:58:fc:9e:bc:60:29:9e:
97:b3:70:32:89:f6:b2:8a:e9:28:fb:fc:df:90:e2:ea:51:16:
d4:c4:8d:72:73:1e:1a:51:27:f6:da:2f:30:14:99:71:e6:09:
68:f3:81:6a:91:ba:2d:58:57:2b:12:8c:d4:02:86:57:1e:08:
fd:97:c4:83:d4:f2:51:e6:83:47:ef:ce:bc:85:5c:69:63:ae:
e8:93:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:55:28 2025 by rpki-client