Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
File: GeBhVfweN2UrK3nJpTbS5hRNBPc.mft (raw, json)
Hash identifier: qxDYWQ5C11P+BsA67wIKYZPcnirzW1NCpLv84rku35g=
Subject key identifier: 77:48:B3:FD:F6:34:2D:F2:95:84:7F:5F:CF:D0:3A:7A:EB:D1:2D:76
Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Certificate serial: 019649A25B1B03A5332D06DC867FD43C0D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
Manifest number: 0D60
Signing time: Fri 18 Apr 2025 16:01:39 +0000
Manifest this update: Fri 18 Apr 2025 16:01:39 +0000
Manifest next update: Sat 19 Apr 2025 16:01:39 +0000
Files and hashes: 1: GeBhVfweN2UrK3nJpTbS5hRNBPc.crl (hash: VVUhA6auO82jM9vJJxBA50iyvWB4myKpbK5+B1MMJHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:5b:1b:03:a5:33:2d:06:dc:86:7f:d4:3c:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7
Validity
Not Before: Apr 18 16:01:39 2025 GMT
Not After : Apr 19 16:01:39 2025 GMT
Subject: CN=7748b3fdf6342df295847f5fcfd03a7aebd12d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:fc:4f:62:11:77:a1:5b:c2:81:a6:a9:97:
2c:05:d1:58:ce:6c:36:63:62:91:eb:8b:16:c6:00:
ca:75:b4:11:cb:2e:b0:7d:13:17:05:62:d7:17:3f:
4a:c1:b3:79:cf:59:c0:2c:ce:eb:4b:2f:ab:2f:20:
d5:04:ca:68:09:80:98:9a:5d:6f:db:e6:7e:d3:69:
0f:a6:55:8d:de:5a:a7:92:cc:fd:a7:f1:a5:05:d3:
9c:64:41:87:c0:d1:df:ce:d0:b5:46:50:e9:25:f4:
4d:4d:a2:ac:1e:f3:34:b9:b4:48:5e:e7:3e:84:d8:
88:50:4b:13:56:bd:90:96:02:9d:a5:a3:2a:4b:0d:
43:e7:67:df:11:f6:d1:f5:17:90:aa:cd:ae:8b:14:
f5:ae:b2:7a:78:c5:8e:06:a2:ad:30:76:36:d6:a1:
4c:a5:3f:d8:09:81:42:cd:7e:b3:c4:5e:92:37:b4:
ea:25:1c:63:95:b2:8d:6c:e4:49:b9:83:e9:d8:99:
5e:2b:f2:f8:e0:2a:60:96:a3:40:20:18:00:11:21:
ba:df:47:01:63:95:94:87:67:1b:4a:89:16:d0:32:
30:e6:e3:1c:b0:9d:11:c0:4d:14:83:bd:88:cb:4c:
43:8b:71:82:99:2e:ba:f4:36:cc:aa:ff:1d:cc:a5:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:48:B3:FD:F6:34:2D:F2:95:84:7F:5F:CF:D0:3A:7A:EB:D1:2D:76
X509v3 Authority Key Identifier:
keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:15:d7:1b:71:87:ab:90:8b:e8:fc:8a:0f:95:87:4b:46:42:
7e:7a:44:2b:7b:b1:15:9b:e5:8b:77:f8:60:a3:3b:ce:93:6e:
d2:ab:e0:53:17:db:3d:1c:82:f5:11:89:b8:05:fe:95:28:d1:
2c:ac:45:fd:2d:30:6c:be:6f:db:df:96:88:ee:2e:eb:dc:c4:
e7:71:3c:38:a5:ce:0a:62:e2:96:ba:d3:2a:fe:82:34:68:7b:
aa:56:d5:8f:df:a2:ca:4e:7c:0e:10:2d:be:d8:f1:39:4c:a5:
02:84:77:b9:6c:85:50:09:bd:89:9e:88:77:f4:17:a3:a5:b3:
65:7d:e3:c9:dd:79:6f:6c:b3:52:43:d0:c1:53:da:77:5a:d5:
cb:e2:b1:c6:99:b9:cf:a3:a2:e6:c3:cb:16:74:d4:93:00:f6:
47:3f:6b:d9:19:fb:ac:49:3c:a3:fe:8a:c3:02:a8:fe:77:4b:
88:37:23:de:a2:41:39:ef:10:9c:9d:bd:f7:05:00:bf:03:f6:
df:85:60:25:2e:94:5b:47:1b:7e:cd:44:8d:14:07:53:b6:42:
fa:5a:62:4b:10:bd:7b:46:37:ee:f3:8a:ff:bd:83:42:66:c8:
05:04:78:6e:50:1e:5f:a3:28:10:d7:1f:8b:2d:81:d5:66:a6:
5c:58:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:11 2025 by rpki-client