Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: 9/jKN+QA3qQik7d9cW73Kfa6hLqoSPeZbLo27hzwULM=
Subject key identifier: 72:5C:B2:EE:77:4F:7B:29:C1:BE:6E:2B:9F:F2:04:8F:87:1E:6E:8C
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 01964D7E0AA21B6CE8E279EF8D9A06B4A367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 10:00:27 +0000
Manifest this update: Sat 19 Apr 2025 10:00:27 +0000
Manifest next update: Sun 20 Apr 2025 10:00:27 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: siqjH32mFFazLfTHnOc6RNyhcDdeYD9naIfx2jBqWKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:0a:a2:1b:6c:e8:e2:79:ef:8d:9a:06:b4:a3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Apr 19 10:00:27 2025 GMT
Not After : Apr 20 10:00:27 2025 GMT
Subject: CN=725cb2ee774f7b29c1be6e2b9ff2048f871e6e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:19:cd:20:45:5e:0c:8d:44:4e:be:b5:d1:
16:c9:59:ee:43:fa:8a:9e:74:00:6c:26:9d:fa:95:
c3:34:1b:70:97:81:4b:24:e4:a8:88:1e:3a:9e:f1:
17:26:5e:ff:a3:41:35:35:a8:3a:7e:cb:82:ba:4d:
94:e9:d1:45:4e:51:82:ec:4b:ef:71:17:e8:b9:48:
4c:37:f1:29:85:0f:a8:6a:68:58:29:00:ca:af:67:
b1:60:1b:56:eb:56:28:8e:b1:61:1b:a9:3b:49:04:
de:81:61:5b:ee:d4:ee:05:cd:be:55:f7:07:16:6e:
77:c6:12:37:7a:83:6a:94:d4:70:ef:35:a1:88:fd:
19:f9:e3:38:24:b7:0b:8e:45:71:fd:94:0d:70:3d:
35:6f:04:24:9e:43:1b:5f:cb:a3:a5:59:de:e0:be:
6f:5c:0b:d9:5c:b2:a3:37:21:18:ac:ba:9c:56:8f:
91:53:f1:f6:c3:37:38:94:96:f7:97:22:50:75:fc:
5a:60:26:a3:ef:68:d8:99:1f:33:55:5e:f8:13:00:
cb:c5:d9:9e:66:c4:b5:4b:cb:46:d0:e3:5d:d0:8c:
c3:ec:fa:3b:1b:5c:2f:cb:ac:e0:bf:b0:56:47:e0:
20:8b:6e:d6:40:7b:08:c7:5d:67:1d:54:b9:4f:a7:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:B2:EE:77:4F:7B:29:C1:BE:6E:2B:9F:F2:04:8F:87:1E:6E:8C
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5e:0d:a4:e2:13:6a:e3:2b:e7:10:1a:57:47:69:f2:6a:6f:
61:0b:6f:34:48:c6:8b:ae:24:96:80:f3:72:eb:4d:b1:97:33:
d5:b4:90:88:29:b2:44:a1:b4:f5:81:a9:32:a9:27:d8:6d:56:
4a:68:81:c6:84:c0:20:73:84:65:5e:d0:95:ed:1b:14:f8:2b:
29:64:0f:0e:37:0f:66:b0:d8:67:8e:c4:54:78:c4:48:cd:68:
42:04:ba:59:45:25:d1:49:04:4d:b2:7b:19:2a:9f:5f:8c:d3:
03:c5:5b:d7:26:e7:2e:e1:eb:9b:52:34:c6:af:36:1a:fc:ec:
5a:ec:9a:46:86:de:ba:48:bb:9e:eb:f6:33:f5:42:0b:bf:68:
e6:46:f4:54:c0:dc:45:b9:02:af:4d:90:6a:90:18:47:36:a1:
b6:0a:92:55:18:df:03:8e:af:76:2d:5c:15:2c:ec:65:05:12:
6b:74:21:4d:d3:44:7b:f6:7e:c2:30:97:54:1b:b3:34:68:7d:
75:31:0e:b5:05:22:d0:db:f1:f6:b7:24:09:67:8f:a2:d2:85:
45:ce:02:40:08:b9:52:62:93:30:84:a7:94:01:55:91:8e:45:
fb:99:a6:30:90:ee:4f:14:cc:97:b1:f4:aa:ed:31:e3:0b:7d:
8e:50:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:07 2025 by rpki-client