Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: HMZ8mWsWjxGt0jhaIL2Yfm8P4cz+XKkuGf54KBlapm8=
Subject key identifier: C9:BD:63:3A:76:FF:63:03:C3:E4:2E:C8:4F:E2:0F:60:17:D2:62:01
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 01965B03529228B2DB66525C6D852630AB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 14FC
Signing time: Tue 22 Apr 2025 01:01:06 +0000
Manifest this update: Tue 22 Apr 2025 01:01:06 +0000
Manifest next update: Wed 23 Apr 2025 01:01:06 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: 0yqbcPH51aY6WUaMy/0OqZof03MnegmEC1Dyy1ElLEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:52:92:28:b2:db:66:52:5c:6d:85:26:30:ab:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Apr 22 01:01:06 2025 GMT
Not After : Apr 23 01:01:06 2025 GMT
Subject: CN=c9bd633a76ff6303c3e42ec84fe20f6017d26201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:09:f3:78:d0:99:a3:87:bb:b2:74:01:90:
c8:86:9d:c8:f8:cb:59:03:ac:84:90:18:53:2d:12:
07:45:c4:e1:dd:2d:66:08:77:59:b8:8c:03:21:07:
63:5e:61:cf:2b:0a:a9:87:7f:a3:38:28:ea:59:0f:
14:89:5b:a0:f7:a8:54:eb:c0:de:bc:39:6a:96:7d:
c6:30:a5:ea:23:2c:38:5b:cd:ba:64:ba:ff:46:be:
db:cc:0a:81:84:ca:da:90:42:32:41:9c:94:78:26:
91:fd:7e:68:2a:a0:57:8c:de:aa:56:b4:13:dc:a7:
05:be:ac:f8:74:72:06:6b:4f:47:48:1d:e2:a0:90:
75:88:43:36:ad:b7:eb:60:d9:14:ef:d4:e0:b4:2f:
1b:a0:37:bb:de:ae:eb:d0:37:b2:8c:6d:fe:b6:7c:
11:45:75:14:bb:ba:76:22:e8:23:f0:70:a6:32:42:
94:b8:87:ed:da:3b:ab:9b:a8:54:6e:de:de:a5:69:
f9:82:3c:95:b2:3b:3d:7e:61:f9:a8:5b:e8:af:7a:
9f:dd:0a:8d:a4:e5:3c:0f:b6:89:55:35:61:15:ea:
0f:d8:0a:18:55:96:70:7c:61:ff:3f:26:d7:ae:69:
9b:95:98:5a:b3:6a:a7:f1:d1:3e:39:0b:3c:a5:e6:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:63:3A:76:FF:63:03:C3:E4:2E:C8:4F:E2:0F:60:17:D2:62:01
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:61:28:2d:ed:46:9e:75:ea:20:76:a9:c4:e1:12:3c:13:
5c:50:97:fb:b4:3b:a7:a8:73:d3:e9:25:7f:0e:14:bc:0c:dc:
58:25:1a:12:b9:e9:fd:8d:b3:23:48:aa:6d:a0:c7:d7:de:41:
ac:b1:27:b8:55:4b:f6:c3:12:9a:cf:a0:6c:f4:53:57:0e:ea:
57:c1:7b:e9:bf:02:ef:66:bb:9c:c1:9b:de:06:3e:14:1c:2c:
90:d4:b7:8a:dc:7c:67:0f:45:53:ea:43:58:8a:f9:3f:b5:dd:
d2:7f:42:98:3e:ad:b1:5b:10:1d:6c:f3:88:20:fe:d2:d9:11:
57:84:11:4e:13:89:a5:55:a0:9c:23:1b:88:f4:ad:c9:8d:e6:
63:36:33:f7:c5:99:9d:a1:ec:a7:1a:64:e3:bc:92:f8:a9:e4:
87:45:bb:82:2e:5b:23:02:5a:5d:7d:f1:54:a5:e3:c2:67:63:
39:d9:e0:f1:47:49:ab:61:41:1d:27:d5:eb:08:a3:9e:e1:78:
6d:58:65:f4:3e:0c:2f:ec:01:1b:4c:84:9c:72:fa:73:66:2b:
be:1d:f0:a3:49:e2:92:35:d7:db:b5:97:fa:cb:da:e0:53:d0:
0b:1f:09:36:d8:9b:e5:a1:04:37:de:ed:f6:c7:60:b8:e0:e8:
8a:6d:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:52:18 2025 by rpki-client