Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: EHlUpWmTXV1X8LUeWaHW0+MuN1eZ6MQ1bHuylraKFqs=
Subject key identifier: 02:03:C1:9E:64:28:2E:0C:F6:57:08:CD:81:85:C0:D3:86:C0:58:CA
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 01965236A111ECBF261C8B84349923977BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 08:00:33 +0000
Manifest this update: Sun 20 Apr 2025 08:00:33 +0000
Manifest next update: Mon 21 Apr 2025 08:00:33 +0000
Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: NRpX87b6EvPMCZXPnnMPJQZOZ2MMSdusAWKyIYuwol0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:a1:11:ec:bf:26:1c:8b:84:34:99:23:97:7b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Apr 20 08:00:33 2025 GMT
Not After : Apr 21 08:00:33 2025 GMT
Subject: CN=0203c19e64282e0cf65708cd8185c0d386c058ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:03:c6:fb:0b:37:d4:e9:b5:b4:a2:d9:a2:
87:34:ed:fb:fc:37:c2:0c:05:eb:74:ad:ec:3e:12:
60:9d:13:cd:83:3c:f1:bd:8f:1d:bb:c6:b8:61:8c:
e2:96:3a:b9:87:40:69:e5:9c:07:d1:d1:b6:6c:20:
cd:36:d3:66:7b:3a:62:d9:41:9a:11:93:5d:72:a3:
54:12:d3:5d:fa:af:5e:f1:94:9a:04:ee:49:ab:84:
7e:86:69:45:55:1c:f2:5f:3e:21:fc:61:7b:33:5a:
b6:01:d5:62:b7:81:7b:ac:dd:31:10:bc:9c:76:16:
f1:e7:ae:36:7f:0c:35:f6:f8:22:15:f9:fa:6f:96:
17:ac:3b:10:80:4d:21:95:81:eb:11:4f:ba:de:9e:
56:bf:19:79:04:ec:9e:e1:2b:83:35:3d:3d:7b:8d:
d4:64:6e:fc:30:14:2e:11:e6:11:3a:6e:23:39:fa:
fb:61:b4:a3:c7:04:c4:5e:8f:ee:87:6a:ce:c7:d9:
f6:68:e7:0a:97:42:ea:c5:87:bd:fa:74:24:6e:0d:
cd:44:2c:39:ae:e9:c5:27:fb:f3:61:1e:1a:11:d6:
94:2d:fa:c3:e3:b6:8b:c1:25:7e:d3:16:2e:6e:9d:
3f:4c:1a:27:78:ed:34:96:7c:71:1f:29:69:ed:b4:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:03:C1:9E:64:28:2E:0C:F6:57:08:CD:81:85:C0:D3:86:C0:58:CA
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5b:ae:5f:af:a9:20:2f:51:d3:fa:9c:19:99:30:ea:09:16:
59:57:4b:93:3e:71:12:a2:6c:9d:a8:cd:2b:d1:6b:74:20:f0:
51:46:46:0c:5a:0d:b3:52:96:c9:ce:fc:03:00:8b:df:37:31:
31:d8:94:41:51:65:d5:5d:cb:72:04:99:3a:83:67:6d:db:9e:
82:d9:56:16:b9:28:0d:bc:75:f2:f8:0a:7f:c9:22:3f:66:b1:
62:d8:12:a0:0b:05:a8:6a:2c:c9:ed:4b:31:f3:21:ca:ef:3f:
6b:bc:35:3f:f8:ed:df:d9:df:d4:76:3d:27:ee:57:f9:9f:e0:
d3:0a:0a:4a:05:bf:dd:3b:07:69:46:ea:bd:56:a0:e2:6d:ee:
7b:f1:bd:0a:e7:0c:4c:eb:28:cc:16:07:47:bb:e5:99:bb:82:
ff:bc:f3:be:1a:20:25:09:ec:ec:e3:75:50:08:66:ee:07:00:
4e:c1:a9:6a:21:c4:fb:4f:d1:36:93:05:13:15:f5:9d:02:2d:
81:f4:96:cb:55:d3:af:0d:05:c6:a9:cc:c0:7d:99:6d:ad:01:
35:db:e8:b0:d0:a5:cd:05:02:dc:7f:d4:9e:88:d6:c4:d2:65:
26:78:c6:98:ba:e0:f5:b3:16:67:26:d1:4d:cb:af:48:7b:3a:
d5:2a:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:56 2025 by rpki-client