Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File: G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier: 6fBEcx/L8rK3RwVXaIRvlkPkiRsCch1YjAY5TlU+l44=
Subject key identifier: 02:01:63:D5:ED:9A:97:75:32:F1:91:7C:D6:80:50:81:AB:37:52:F7
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer: /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial: 019611A1888DD0D8CDD745A0DB6913A5BA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number: 14D7
Signing time: Mon 07 Apr 2025 19:02:00 +0000
Manifest this update: Mon 07 Apr 2025 19:02:00 +0000
Manifest next update: Tue 08 Apr 2025 19:02:00 +0000
Files and hashes: 1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: z64szudvObrbSWc0bHdZkRUD2HdZ8Wqw0YNgiABSpTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:88:8d:d0:d8:cd:d7:45:a0:db:69:13:a5:ba:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
Validity
Not Before: Apr 7 19:02:00 2025 GMT
Not After : Apr 8 19:02:00 2025 GMT
Subject: CN=020163d5ed9a977532f1917cd6805081ab3752f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:18:53:0f:41:46:29:f7:ff:50:50:08:92:
a4:6a:82:27:fa:54:66:bd:29:cc:ea:9f:29:cf:28:
5a:93:70:9c:67:7e:ec:b1:3e:10:62:ac:af:56:7c:
d7:3f:e1:49:9f:61:65:b1:cc:9e:66:e4:ba:12:5b:
54:e3:cf:4c:47:0d:d3:ec:26:56:f9:9e:c4:4a:4d:
88:ca:16:c2:18:73:91:a4:f7:bc:e8:fb:87:da:bd:
92:26:b4:12:1f:97:92:09:4c:4a:7a:62:e9:ad:c9:
5c:63:69:51:0d:ee:84:42:2e:4f:ad:04:50:d1:22:
43:fa:5f:65:1e:0a:28:21:90:22:86:f1:07:4a:90:
d0:05:a6:10:ab:71:a8:7e:28:4f:2b:47:6d:94:44:
02:0a:b8:f4:55:cb:98:7f:22:d2:2f:ab:4f:15:45:
37:bc:14:02:32:39:ed:13:bd:4b:2b:4d:ee:04:e9:
ab:f4:63:8c:4a:2f:bc:1e:4c:42:30:33:78:00:74:
2b:68:c1:34:56:1e:8a:4c:e1:84:bb:6e:30:42:40:
a8:6a:e4:4b:af:00:79:cc:34:5b:3c:66:d3:79:25:
d0:02:3a:be:45:f9:74:a2:c6:b8:20:db:06:0a:10:
7f:39:d7:00:85:3b:2d:67:84:91:0d:3a:00:62:ac:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:63:D5:ED:9A:97:75:32:F1:91:7C:D6:80:50:81:AB:37:52:F7
X509v3 Authority Key Identifier:
keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e4:b9:ee:da:bb:8f:9f:0b:de:16:d4:17:22:5b:2a:a4:7b:
e2:9f:59:08:3f:01:8f:8d:bd:f1:41:97:46:5b:36:76:ca:09:
1b:6c:de:82:38:11:84:7b:09:bd:f4:d6:3c:a5:79:50:c0:6e:
7b:d6:69:6b:91:e7:47:38:df:ea:1b:c8:e8:6a:e3:41:26:96:
23:04:39:3a:e1:5a:ae:7c:89:0e:0f:ae:3b:d0:10:4c:68:6c:
65:93:dd:34:7a:cd:39:5f:54:ff:f3:e9:2c:a5:51:0c:86:98:
21:76:ae:89:2a:9c:67:82:3e:ae:be:6d:4d:2b:60:c3:86:8a:
36:5b:40:fd:57:12:1c:c3:8c:48:3e:a6:62:04:a8:5f:8d:3a:
23:2d:40:7e:74:fc:c5:d0:b2:a1:0b:73:a3:f2:d1:47:27:c4:
a4:63:aa:06:fb:cc:d7:36:19:87:39:06:16:9a:4d:7c:78:bb:
12:54:71:ff:b5:f8:b7:1e:94:49:69:a9:10:23:6b:01:a7:a7:
42:3c:f9:89:0e:63:54:7f:c1:1b:5b:bc:86:64:2b:7c:16:7c:
fa:9a:e6:aa:33:31:17:aa:e7:2c:4f:8e:ee:c1:39:7c:86:48:
34:4e:19:16:86:81:de:bb:25:f8:d8:33:c5:5a:35:9b:a7:8e:
ee:ba:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:32 2025 by rpki-client