Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier: soIQv7H6DWG6tvpgc9Ae32w95zPXppFY7mosIYJrX7M=
Subject key identifier: F0:EC:62:41:31:82:77:46:62:CF:92:E7:88:26:8B:9F:FB:2A:46:F0
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial: 01964FDAB907B25FAA5915E2F559BF3F30A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number: 07E2
Signing time: Sat 19 Apr 2025 21:00:56 +0000
Manifest this update: Sat 19 Apr 2025 21:00:56 +0000
Manifest next update: Sun 20 Apr 2025 21:00:56 +0000
Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: h3H3i+yEoe3sPUS29rlboBKfxOoPfT8iMnmv675Derw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:b9:07:b2:5f:aa:59:15:e2:f5:59:bf:3f:30:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
Validity
Not Before: Apr 19 21:00:56 2025 GMT
Not After : Apr 20 21:00:56 2025 GMT
Subject: CN=f0ec62413182774662cf92e788268b9ffb2a46f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:a4:c3:31:36:b4:8b:43:b7:c7:ab:f0:b0:
0b:fb:09:a8:3d:59:f5:5e:e6:10:1a:b0:f6:6e:84:
73:e2:09:ac:c4:b1:f9:75:b3:5d:f4:30:4f:14:ac:
a7:35:32:e3:4d:35:fe:3e:a4:2b:5e:35:5f:73:ef:
e0:bf:ae:9e:5b:d8:2e:9a:80:d8:f0:23:c5:cd:b3:
61:41:3d:37:e4:6a:41:98:6d:9d:03:e9:ee:8f:8d:
60:d4:0d:df:c7:06:e5:f8:00:22:b8:cc:6e:75:7d:
af:d5:fd:83:3a:a6:30:3e:99:38:ad:78:44:29:99:
09:fa:b0:25:e8:8b:29:95:54:e6:03:c4:42:90:94:
05:90:6b:79:89:09:4d:6c:fe:22:b3:d4:06:0b:6c:
5d:34:d1:8c:06:0e:ea:4e:63:35:b9:fb:7a:fc:1c:
e0:29:31:ee:46:30:4d:39:e3:59:c4:9c:39:ae:4a:
b5:97:37:f6:93:02:f7:31:8e:3f:3e:fe:fa:5c:4c:
ce:0c:8e:96:87:38:fe:d1:c2:06:fa:47:b5:f5:53:
25:62:7c:b0:88:3d:9b:c4:38:c3:6c:14:a8:7d:1f:
72:11:32:5c:1a:99:f0:51:8f:55:11:a1:bd:a0:d9:
d7:ca:1e:c4:f3:d6:6e:18:e2:d3:20:d2:ab:61:f2:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:62:41:31:82:77:46:62:CF:92:E7:88:26:8B:9F:FB:2A:46:F0
X509v3 Authority Key Identifier:
keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:04:f1:ed:01:26:28:08:27:12:58:b5:07:e3:54:d9:02:73:
46:d6:c4:5e:16:79:92:18:f0:95:e5:9d:a0:6f:23:46:7f:a6:
9b:a8:6c:9b:29:4c:80:a9:91:02:62:07:4c:6d:84:52:fa:a1:
7f:fb:54:aa:e2:15:da:84:74:f3:47:c5:79:a3:51:7d:1d:85:
8b:2c:ad:a1:b4:5f:f9:69:27:07:76:a2:7b:05:2b:43:dc:78:
a1:53:97:57:4e:da:76:50:5f:e8:4a:8b:1e:2e:2b:45:c3:e2:
6b:a8:85:8e:ee:e2:15:2d:c5:e3:d9:94:70:18:3b:c5:b1:9b:
ed:3d:7a:a1:02:88:9a:49:93:88:c1:9d:20:cf:f3:c9:2e:4a:
2c:cc:be:53:e3:41:d0:50:95:67:49:db:a7:58:97:be:ea:0e:
be:7a:1b:a3:99:e2:78:9a:ca:93:b6:95:02:65:0f:69:58:a5:
1c:83:33:7d:bd:e4:c6:8f:7a:27:7e:9c:31:86:0e:dd:3b:88:
d3:96:80:2a:13:aa:a6:d7:90:25:ea:80:c2:84:7c:b0:ad:2e:
89:0c:82:6d:92:22:e1:1d:d8:a7:c2:83:3d:18:b5:36:13:1a:
e7:87:f3:1f:5a:0c:e7:17:1b:49:b8:47:81:ed:4d:43:60:07:
cd:c5:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:51 2025 by rpki-client