Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
File: GGr6K4fO01gj1aLMCghE56FRa_M.mft (raw, json)
Hash identifier: UimDXXSfEdA+oLCukU4DwDZW0YuQUtmzd8deJ73Zp3Y=
Subject key identifier: 0A:69:CE:66:71:49:DE:A7:C8:CF:46:A3:CF:11:C6:25:4B:94:71:C3
Authority key identifier: 18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
Certificate issuer: /CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
Certificate serial: 019645C5A3F5E6D0346E7649325DD6A337D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
Manifest number: 0C56
Signing time: Thu 17 Apr 2025 22:01:42 +0000
Manifest this update: Thu 17 Apr 2025 22:01:42 +0000
Manifest next update: Fri 18 Apr 2025 22:01:42 +0000
Files and hashes: 1: GGr6K4fO01gj1aLMCghE56FRa_M.crl (hash: +56SNmTXXatYXZ6shze8G1zyQzwmrq0pV8lMR28RAZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:a3:f5:e6:d0:34:6e:76:49:32:5d:d6:a3:37:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
Validity
Not Before: Apr 17 22:01:42 2025 GMT
Not After : Apr 18 22:01:42 2025 GMT
Subject: CN=0a69ce667149dea7c8cf46a3cf11c6254b9471c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:92:7a:d7:2c:45:ec:62:74:70:8c:ce:03:
6e:21:d3:9b:aa:86:8d:1b:f3:73:51:6f:da:a8:35:
36:ef:87:b8:8a:ad:d9:b2:dd:db:20:06:ae:b1:61:
ec:37:82:fa:9f:e2:9e:74:81:be:e4:e4:c0:ee:36:
e4:ed:11:49:a6:97:0b:d5:08:b6:03:46:8c:2b:e2:
b3:00:ce:4e:90:7f:30:da:15:f9:76:0f:70:27:39:
33:03:f1:a8:7c:62:2a:13:ae:ee:eb:52:c1:d4:1e:
55:86:b7:b4:83:93:d9:7f:a4:b3:f4:0e:c0:c8:e2:
d3:b8:0b:3a:fc:00:ec:96:04:3e:66:59:b6:1a:f2:
c6:7b:57:d5:94:35:e7:37:15:85:48:1d:d2:23:a4:
28:97:a7:0c:b6:be:e7:d3:83:44:66:12:2b:ab:5f:
0c:cd:0d:66:4b:4f:9e:b6:9c:47:4e:93:60:b9:af:
5c:58:dd:ad:f4:f4:13:91:b8:7f:2b:7a:92:c7:50:
43:0c:46:a5:50:4c:bf:4b:3f:d6:8c:d9:7e:52:f5:
17:62:71:8a:4b:40:93:6f:39:24:0d:76:b9:a7:bb:
a1:16:51:6e:c3:44:74:f3:20:15:29:9e:b2:0d:a8:
1c:68:70:99:73:e8:6c:9c:a9:db:8a:95:ef:e7:3b:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:CE:66:71:49:DE:A7:C8:CF:46:A3:CF:11:C6:25:4B:94:71:C3
X509v3 Authority Key Identifier:
keyid:18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7f:6c:85:c1:93:5f:45:86:4f:9f:ab:ed:ec:d9:bc:11:49:
43:d3:96:f3:e6:ac:36:60:f4:8e:81:5d:70:36:a1:62:36:02:
af:f9:a3:84:47:41:2d:dd:c4:63:9b:bd:4c:c1:e9:e7:50:b9:
6d:f7:07:f7:41:41:59:ea:22:6c:97:3b:bd:98:ca:94:96:3a:
49:e5:7c:05:2b:64:fa:4e:79:70:1a:ad:7c:8a:cd:70:41:b5:
14:a8:b1:0b:91:17:a4:b9:74:16:ec:82:83:17:aa:a6:40:10:
3f:45:e2:d8:1e:5d:04:f6:1b:e7:50:4e:4d:52:6e:20:dd:8c:
6a:54:a5:d0:4b:c5:4f:71:9a:f1:02:34:43:42:f7:7a:88:78:
28:05:28:fc:c2:8c:f1:72:96:ec:28:c3:17:78:8e:f2:0e:8f:
74:78:3b:64:ad:64:ee:e1:2d:9c:c6:8f:d2:29:0d:05:4c:41:
49:04:f8:2e:59:17:6e:eb:89:0e:7f:61:6b:8c:f1:91:77:b0:
97:76:e1:03:36:10:05:c4:3a:ae:64:20:6f:b2:e4:ca:4c:f3:
3e:da:a2:a9:be:fa:59:aa:39:3e:96:12:51:db:41:61:5c:f2:
19:84:57:57:f5:2b:1c:8f:8b:22:c1:3c:15:dc:ed:04:ad:bf:
21:3c:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:06 2025 by rpki-client