Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
File: G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft (raw, json)
Hash identifier: 4PnTPsHg9KP3gUqK4gdyR5DxU6dlLNJTk0JSRDlIYG4=
Subject key identifier: 97:E6:A2:08:26:07:82:CF:06:D3:DB:09:D0:AF:B2:B3:63:7A:3D:24
Authority key identifier: 1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
Certificate issuer: /CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Certificate serial: 019660295BBC496D1AE85A60E90296346D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
Manifest number: 0E3A
Signing time: Wed 23 Apr 2025 01:00:45 +0000
Manifest this update: Wed 23 Apr 2025 01:00:45 +0000
Manifest next update: Thu 24 Apr 2025 01:00:45 +0000
Files and hashes: 1: G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl (hash: D/F5VtSt2m0ehyg0YvFLSdGTrnJCJK4TVsUAD2UU1M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:29:5b:bc:49:6d:1a:e8:5a:60:e9:02:96:34:6d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be33cf7a6d0f19363bffd2a6f2e9fc4727901fc
Validity
Not Before: Apr 23 01:00:45 2025 GMT
Not After : Apr 24 01:00:45 2025 GMT
Subject: CN=97e6a208260782cf06d3db09d0afb2b3637a3d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:48:0b:e0:37:b6:4b:c1:88:62:f9:96:5c:
f6:26:56:f5:30:82:c8:64:3d:1a:1a:1e:1d:d7:47:
fc:0b:70:d8:67:64:56:cc:e9:58:48:d7:20:5c:0a:
26:f4:8c:e8:8b:3a:c7:7e:88:8e:16:38:5c:db:38:
c6:75:59:71:98:26:e8:16:c4:fb:5c:d1:10:48:96:
94:fc:8e:34:17:34:88:31:ae:34:3d:0e:1e:e5:91:
9e:98:10:e6:bf:45:df:53:18:32:84:c9:d0:bf:b7:
92:8c:a0:88:3d:1e:85:42:22:56:c1:58:14:bf:8a:
fb:be:ad:4c:80:20:53:ac:a1:52:4e:af:40:fc:1f:
7d:50:48:c6:c8:8b:89:39:86:0f:ff:84:2b:a8:65:
07:a2:53:4d:b5:39:80:40:76:24:1c:33:5b:06:30:
92:88:02:74:ef:4f:cb:e5:3c:ff:e2:fa:f8:26:90:
49:be:3f:65:bf:15:a8:21:64:40:e9:57:35:9c:fa:
79:86:b0:7c:75:de:fa:d1:fe:73:49:b9:48:9a:26:
d0:3f:93:d7:d3:86:b8:59:75:99:65:fa:d5:11:01:
1a:0e:9d:56:05:c2:8c:09:17:5b:82:a0:4b:c4:63:
21:63:a8:bb:df:e2:e9:70:be:92:5c:72:97:8e:98:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:A2:08:26:07:82:CF:06:D3:DB:09:D0:AF:B2:B3:63:7A:3D:24
X509v3 Authority Key Identifier:
keyid:1B:E3:3C:F7:A6:D0:F1:93:63:BF:FD:2A:6F:2E:9F:C4:72:79:01:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-M896bQ8ZNjv_0qby6fxHJ5Afw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4749b7-ce5e-4621-9877-2fca69d0fdec/1/G-M896bQ8ZNjv_0qby6fxHJ5Afw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3d:c3:55:3c:84:13:c3:62:85:3d:af:6c:91:b4:67:f5:83:
bf:7f:5e:93:91:a6:49:a8:e7:ad:0e:30:e4:db:a5:c7:fe:ef:
a2:da:61:7e:ad:4d:11:53:1c:a6:7a:54:dd:9c:f8:16:a7:93:
81:91:02:1f:da:90:09:17:dd:85:3f:00:ce:e4:ae:d4:ac:bc:
c3:a2:ef:a7:de:03:96:6b:00:84:5d:48:7d:ad:c6:32:73:f7:
4e:39:fe:3c:17:6e:8e:65:47:f4:80:2b:60:71:07:41:56:f3:
56:40:43:df:a9:4f:f7:ed:b0:1c:2b:9c:1b:0e:6a:df:ea:b7:
a9:b5:f0:89:13:73:b9:0d:70:c2:fa:df:15:ba:1d:bd:32:d0:
e2:40:70:bc:67:76:b7:92:ac:80:2b:31:35:9d:80:7a:59:d0:
23:77:e5:2a:bc:53:be:22:c0:af:6b:eb:6e:4f:27:d1:3c:70:
3c:39:6f:43:ff:82:e6:73:da:f6:bb:04:5c:0f:0e:b4:5f:1c:
35:96:dc:6d:a3:5e:39:a4:9f:d6:b9:1c:66:bd:ce:11:68:77:
88:57:47:fc:5e:c0:c8:c0:e7:bb:d6:b5:b0:54:00:d2:6b:cb:
8a:4f:f8:bd:7c:86:77:20:33:c6:7c:ed:a7:32:df:a6:28:43:
2d:0c:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:10:04 2025 by rpki-client