Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File: G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier: miszqZAtIux+x1UYpO4g7m307g0NJTTnDHqFe7/G5xk=
Subject key identifier: 58:88:31:47:96:40:CE:B9:03:38:80:22:82:5F:31:DC:D3:00:62:BE
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer: /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial: 01958280DD614688915316427376E57350D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number: 13E7
Signing time: Tue 11 Mar 2025 00:00:38 +0000
Manifest this update: Tue 11 Mar 2025 00:00:38 +0000
Manifest next update: Wed 12 Mar 2025 00:00:38 +0000
Files and hashes: 1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: 8f3OAENOJSUbejV3qEjGbF59CvYmBuFA/SIl6I+6s4k=)
2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 21:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:80:dd:61:46:88:91:53:16:42:73:76:e5:73:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Validity
Not Before: Mar 11 00:00:38 2025 GMT
Not After : Mar 12 00:00:38 2025 GMT
Subject: CN=588831479640ceb903388022825f31dcd30062be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:a1:31:74:c9:a6:c6:cf:87:6a:37:bb:bd:
34:d9:e4:b0:cf:4f:dc:ee:7c:15:76:da:5f:37:50:
a9:8d:6d:68:95:aa:52:0f:87:3c:de:31:cc:64:96:
97:a4:15:ed:ee:2d:5e:fe:fa:7e:6e:04:f0:57:17:
95:40:8b:87:62:8d:45:eb:7a:43:e1:a3:99:cb:fe:
c5:12:b4:6a:1b:58:c0:ae:ff:88:f5:ee:59:9d:d2:
b4:4d:d0:9e:21:71:aa:f1:19:95:d9:ae:0c:af:c6:
c1:98:16:dd:80:fa:e9:b7:9a:62:7e:c5:9d:01:1e:
43:f7:0c:21:c7:21:c9:11:6d:16:ff:7a:6b:5c:d5:
15:5e:bf:8d:47:03:20:f0:65:a8:6a:eb:f1:a3:8c:
13:4d:46:9c:e5:88:35:e3:4d:bf:a8:e1:17:da:ad:
be:88:b2:9b:94:00:f2:92:a5:8a:bc:3f:b3:d7:d8:
12:f1:c6:a6:13:cb:f0:c5:a6:19:58:71:54:fc:e6:
7f:a3:55:f3:ba:ec:98:cf:09:71:5f:7b:be:72:6e:
b0:34:6f:f2:82:ae:11:a8:2d:c0:90:70:fd:25:3c:
18:ef:db:8d:1a:fe:39:f7:3f:98:ee:66:4a:8c:fc:
2f:41:85:0b:a4:dd:6b:ee:72:76:e3:15:8d:2c:c8:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:31:47:96:40:CE:B9:03:38:80:22:82:5F:31:DC:D3:00:62:BE
X509v3 Authority Key Identifier:
keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8b:18:75:61:13:45:45:ee:0e:19:65:e5:57:d5:49:79:d9:
87:97:94:bf:40:48:fa:f9:f7:cc:51:02:ef:ff:e5:31:ee:26:
1d:ab:35:f8:0f:9a:f5:01:08:bf:7a:20:d0:93:6b:28:a6:73:
5a:60:c7:98:1f:73:77:4f:de:cb:1c:f1:ca:ee:41:6a:10:d3:
9c:da:51:67:d0:a8:07:3d:6a:86:75:f8:27:6d:b5:8f:c3:33:
59:03:5d:a4:58:c9:97:c3:3d:a9:f3:55:79:7c:d8:44:27:57:
1a:bb:d6:fe:1f:b9:3d:70:0c:bc:5a:9a:ca:d5:85:37:ff:13:
f4:3e:d8:af:e4:22:d5:30:79:d4:52:24:a7:f4:77:cf:79:91:
7b:13:88:22:3c:e5:64:2a:10:27:eb:d2:29:3d:83:3c:5e:cb:
4f:55:79:4f:82:a4:49:89:88:87:f9:be:13:44:6e:4a:a0:06:
c4:21:e1:4a:bc:21:fc:0e:db:60:85:b8:35:98:b0:4b:ff:ea:
4e:ee:db:7e:0f:0d:fc:50:5e:7e:fe:a4:81:a6:c6:30:80:e1:
bf:a4:e0:41:7a:0c:d2:be:56:ca:83:5a:82:60:33:7c:c1:ac:
98:ac:d5:26:65:a1:16:f9:f7:1d:ef:db:f0:30:2e:31:29:37:
5b:4c:6f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:13:52 2025 by rpki-client