Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File: GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier: ludbvN6U1BdGvr7766LSJziSJoLQti7Vd+l/WHpQNhE=
Subject key identifier: B0:B1:48:E8:21:F7:F7:94:33:39:66:DD:FF:97:32:67:C3:D1:EF:A2
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer: /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial: 01964F6D49E27D2FC0DE382ADD5E015EA273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number: 0E1D
Signing time: Sat 19 Apr 2025 19:01:24 +0000
Manifest this update: Sat 19 Apr 2025 19:01:24 +0000
Manifest next update: Sun 20 Apr 2025 19:01:24 +0000
Files and hashes: 1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: jDUV0/5gYZsfBY84Ob7gKaTHnBEDko7oS+KXQy/bgvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:49:e2:7d:2f:c0:de:38:2a:dd:5e:01:5e:a2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Validity
Not Before: Apr 19 19:01:24 2025 GMT
Not After : Apr 20 19:01:24 2025 GMT
Subject: CN=b0b148e821f7f794333966ddff973267c3d1efa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:d8:7c:3e:20:d6:af:8c:18:e8:e4:8b:47:
28:39:d3:0a:a8:34:bc:8a:01:05:bc:fc:ad:9b:2a:
6c:10:87:47:b2:e2:6e:aa:2a:7a:a8:ae:df:33:f3:
ff:92:82:73:31:de:bf:9f:11:c6:7d:0a:73:b0:4b:
d7:e6:52:86:6f:a6:7d:df:b0:02:dd:d3:3f:1a:a8:
41:32:a7:c3:27:b9:d5:ad:d5:2b:c4:b0:0a:b2:e7:
b9:c5:67:8c:45:ef:4d:f2:2b:18:dc:25:98:a5:78:
17:ae:11:f0:c7:0a:1a:a3:15:3a:49:a9:b6:b1:dc:
73:1b:6a:5b:aa:07:eb:7f:03:33:ff:0f:1b:3a:23:
b1:8f:9b:8e:89:d9:cc:a6:b2:05:7d:0a:3c:c3:e3:
79:72:64:c2:64:77:88:64:2f:fb:4a:9c:12:4a:51:
3a:e1:cd:74:4f:2e:28:bb:cf:54:b8:2b:4b:41:90:
0d:6d:d2:3d:0c:9d:74:93:2c:1b:db:70:35:5b:1a:
4f:18:51:42:62:2e:a7:9e:66:6b:d7:7c:9c:02:2d:
e0:b9:e7:4a:13:70:fd:87:66:48:f5:24:d2:96:fa:
b6:0c:a8:cd:ea:ec:6a:c8:2a:4e:51:0a:a0:1c:2b:
70:7d:6c:1c:74:41:4b:57:71:45:8a:e5:57:9e:de:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B1:48:E8:21:F7:F7:94:33:39:66:DD:FF:97:32:67:C3:D1:EF:A2
X509v3 Authority Key Identifier:
keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:81:8b:36:bd:1b:88:96:3a:e6:b4:22:c1:22:b4:87:6b:21:
54:85:7d:6c:36:61:59:33:65:bd:c3:e7:67:09:b2:a2:34:de:
0c:b1:57:b2:84:94:d1:4e:a7:6a:03:88:26:6f:5f:c8:e8:04:
38:68:a8:14:fc:53:24:01:55:cd:8b:f4:d0:1d:ae:c4:a1:aa:
f3:09:46:58:4c:72:43:85:88:1f:9a:bb:88:47:e2:d6:06:ba:
4f:27:6a:50:aa:c4:81:58:64:6e:22:a4:9d:7d:b7:78:dd:0f:
c9:cd:f9:04:ef:ef:4a:56:bd:62:cf:15:4b:b6:32:d2:88:64:
56:c0:e0:c9:ad:be:6d:3e:24:cf:89:2f:47:18:c2:39:4a:68:
78:5e:49:80:29:67:26:f3:31:2c:25:c4:cf:21:7c:15:e3:84:
e3:6b:fd:e2:8d:28:1e:2b:52:68:62:5a:96:03:18:f5:c5:d9:
22:5c:6f:25:59:34:0b:a6:89:58:5e:e6:0a:68:56:88:35:86:
87:5d:53:ec:28:a3:23:1f:fc:d4:0e:ac:12:33:d9:79:ab:0b:
5c:1e:15:f3:d9:d4:4b:a2:36:bc:e9:75:da:ba:6c:93:df:b6:
4f:41:bf:64:ab:86:20:dc:e3:40:36:b6:80:14:c5:06:e1:87:
e2:63:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:55 2025 by rpki-client