Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: WkCx6gv06ROS8QRyedM8cZqkHnvhBHqdCTB71CXTwno=
Subject key identifier: 91:E8:48:80:D9:DF:E7:50:0A:C4:DF:93:72:9E:81:68:89:54:D9:9E
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 01958C60274602DA74A398B0CFC8C815788D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 1493
Signing time: Wed 12 Mar 2025 22:01:06 +0000
Manifest this update: Wed 12 Mar 2025 22:01:06 +0000
Manifest next update: Thu 13 Mar 2025 22:01:06 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: SArRP0G3B3NvDgTpbkpbVlE1TAs6RROxva4C24qgtrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:27:46:02:da:74:a3:98:b0:cf:c8:c8:15:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Mar 12 22:01:06 2025 GMT
Not After : Mar 13 22:01:06 2025 GMT
Subject: CN=91e84880d9dfe7500ac4df93729e81688954d99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:03:b3:a4:a4:48:c1:15:2e:9a:54:5c:34:
58:95:df:8d:56:fd:5c:50:6a:67:48:11:10:65:d8:
9c:57:c7:93:b9:12:62:73:04:60:eb:04:6e:ef:fb:
ff:50:b9:26:85:38:c7:03:c3:81:55:65:9f:fc:2d:
8b:ff:c3:3e:6e:8a:db:23:56:89:6f:e5:aa:f4:4e:
1b:11:47:83:24:3d:cc:ea:5b:ce:0b:1d:ab:aa:59:
86:a3:f8:e2:ec:e9:58:60:a3:a3:8d:7d:ec:17:c3:
af:f2:1e:b0:31:4d:bc:23:61:c4:7c:76:83:6f:c1:
d7:0c:fa:43:25:d8:d6:38:e2:c7:b5:9d:e9:43:75:
f6:47:b4:b1:ea:b2:70:70:f1:97:95:7c:34:4c:ac:
1c:0c:a7:b0:34:43:28:9a:59:7c:0e:2a:a9:10:15:
5a:e4:27:e7:80:1f:9c:8f:ec:f5:6a:ac:ee:34:6e:
2b:7a:a7:bd:7e:9a:d1:b7:8c:be:3e:79:fc:42:55:
6b:7a:08:f6:45:ba:e9:2a:3d:9a:22:e1:8a:21:1b:
2c:ac:03:43:a7:ce:62:a8:db:d7:76:d7:8a:db:dc:
09:e8:13:86:7e:d5:58:75:ca:fc:a7:31:8b:e4:e7:
70:30:6f:e4:17:57:5a:f4:04:01:02:29:9a:30:7f:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E8:48:80:D9:DF:E7:50:0A:C4:DF:93:72:9E:81:68:89:54:D9:9E
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6d:e7:9d:4a:63:f4:93:a4:a5:40:33:e7:93:f2:b9:2a:a1:
d5:a7:c5:2f:4e:6d:6c:9e:94:ea:80:3b:4d:37:8d:61:b8:50:
1d:71:7f:a6:fc:e1:30:f9:51:aa:4b:20:83:46:52:c2:80:ee:
72:dc:40:38:08:1a:b7:97:f8:c0:21:bc:05:e6:7d:a5:b6:c9:
2f:e5:f0:18:a8:65:aa:f8:aa:b2:e2:f2:cf:16:1a:6e:92:e8:
0b:68:b2:5f:6d:69:a8:ae:63:d0:f5:4e:84:ea:67:83:6a:ce:
a9:25:0a:d3:ad:af:32:3b:da:e2:83:99:63:29:26:60:ee:25:
26:79:e0:65:7e:2a:63:8e:ec:f5:5b:ca:02:3f:60:3d:7a:34:
99:ed:16:03:57:aa:a0:0a:fa:bc:69:9e:1f:fe:77:f8:d5:94:
9b:59:cb:f9:10:dd:a8:12:80:fe:08:18:c0:8c:88:f8:57:51:
57:0a:f7:f8:fc:49:42:05:06:e3:7f:e9:66:94:35:d7:c6:7c:
86:d2:91:c1:c8:b9:05:32:a0:ae:79:37:e9:25:7c:a4:73:d2:
31:69:a2:44:48:ac:1a:bd:de:5b:9d:02:9f:5f:a8:8e:fb:ab:
2d:fa:1e:60:07:0b:c5:22:06:50:f8:7b:63:7b:cc:2d:e4:d4:
6b:86:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:50 2025 by rpki-client