Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json)
Hash identifier: hdqaCQJSigoIjPMdGzcDZs/ytZ/zstqLOIxP1XJJM7I=
Subject key identifier: 61:99:71:BE:4F:5D:86:71:DE:5B:74:ED:87:46:3E:B8:A5:6C:44:D7
Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Certificate serial: 0196519193E999E30067AEBB0256363ADF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
Manifest number: 028B
Signing time: Sun 20 Apr 2025 05:00:17 +0000
Manifest this update: Sun 20 Apr 2025 05:00:17 +0000
Manifest next update: Mon 21 Apr 2025 05:00:17 +0000
Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: yTTiXIzrTsjiBuU7Xqy785JU4q2tqm2NVXsGxNpiUH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:93:e9:99:e3:00:67:ae:bb:02:56:36:3a:df:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Validity
Not Before: Apr 20 05:00:17 2025 GMT
Not After : Apr 21 05:00:17 2025 GMT
Subject: CN=619971be4f5d8671de5b74ed87463eb8a56c44d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1a:be:4d:c6:3e:4f:b3:b6:6f:0e:46:e2:c8:
b2:8a:b6:97:55:1f:50:4a:6b:04:3c:ca:46:c1:e2:
48:14:11:35:8f:1c:66:bf:f2:65:77:29:91:ef:32:
f3:35:4d:c1:17:4a:e0:4e:57:6c:4b:f4:58:d0:d0:
16:b3:4a:a9:2c:7f:ae:65:01:1f:87:1d:06:bf:e9:
d9:4a:29:2e:2b:3e:b9:ce:8b:f1:57:96:7f:c4:99:
89:a7:d9:e1:f0:01:58:1e:6c:b3:b9:d6:78:25:26:
a5:61:82:35:e1:1d:c2:03:f0:47:52:4f:e3:f9:0c:
79:e8:d9:3f:87:2f:a6:c3:9e:7c:46:7d:e0:53:38:
09:ac:a4:31:f5:d8:fe:e2:8f:0c:0f:05:c9:01:ad:
0c:65:ea:43:8b:ed:eb:c7:ea:dd:ab:49:89:32:be:
0a:9e:f0:31:30:3b:0e:da:14:0c:f4:5f:21:9a:74:
ba:9a:ba:22:66:a0:82:51:21:ad:72:cb:a9:57:05:
fa:74:49:8f:a3:20:7e:75:b8:70:37:59:a6:f4:b2:
b8:37:38:56:e5:9f:fe:bb:53:9a:ea:9d:29:19:b9:
39:5f:9c:54:0a:e1:4a:07:e7:b9:61:fc:ed:dc:ab:
5f:9a:3d:b0:83:c2:83:18:c9:66:2b:d1:57:51:6b:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:71:BE:4F:5D:86:71:DE:5B:74:ED:87:46:3E:B8:A5:6C:44:D7
X509v3 Authority Key Identifier:
keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:80:41:37:0a:2d:e9:5d:e3:2b:2d:a7:c1:23:f4:6f:91:3b:
a8:ff:2a:10:f7:3b:e1:9f:75:7e:e3:60:eb:c6:f7:21:6c:0f:
dc:cb:49:73:92:d1:de:68:5d:b9:06:f3:bd:8b:10:4b:14:d3:
9d:76:b6:65:90:df:09:5e:5a:95:61:b9:c5:3b:66:2a:db:cc:
12:76:e2:5c:05:40:60:49:fd:7f:cd:74:39:3c:7e:06:6c:7d:
b0:a1:cb:a8:34:78:18:8c:f6:0e:69:5a:42:f3:7f:11:6b:2d:
7e:82:c1:66:13:4d:74:e3:32:f5:6c:e6:74:3a:d3:ac:4a:26:
a3:58:55:f6:c0:a7:20:25:64:20:71:d6:9c:81:62:84:95:ca:
b1:33:d5:86:83:32:c3:90:90:74:3b:8e:66:b6:59:15:4d:78:
3f:26:65:e5:11:58:55:64:ca:54:5e:1a:db:7e:ef:f0:ac:e7:
7c:47:98:ce:94:33:ab:a3:d7:a9:64:63:da:cc:66:07:03:b7:
b1:86:7c:14:39:19:0a:d1:47:b9:ee:99:46:da:58:b1:87:6c:
f3:c8:f8:64:8d:02:0d:e9:7a:50:09:26:6b:2c:ca:a3:d8:7d:
1f:23:43:66:d8:d5:26:1e:69:71:d0:73:92:73:24:b5:0e:de:
a2:96:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:41 2025 by rpki-client