Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: xIIiYC9KN5pDdiyv/xi9acI9LGUfA2S1tpzazMtZ1oQ=
Subject key identifier: B2:82:10:4A:3E:42:C7:8D:16:24:3C:97:AF:27:18:1F:94:ED:B8:C2
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 0196542585163A82F1D298EC4D682A37F5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 0A9A
Signing time: Sun 20 Apr 2025 17:01:07 +0000
Manifest this update: Sun 20 Apr 2025 17:01:07 +0000
Manifest next update: Mon 21 Apr 2025 17:01:07 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: tRbG+cFCmF8j26aA1ft1gxdurc3FvB1BviSAv1DWg5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:85:16:3a:82:f1:d2:98:ec:4d:68:2a:37:f5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: Apr 20 17:01:07 2025 GMT
Not After : Apr 21 17:01:07 2025 GMT
Subject: CN=b282104a3e42c78d16243c97af27181f94edb8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:97:56:65:b1:90:6f:78:22:08:63:aa:bb:
2b:19:6a:f6:88:8a:42:31:98:d8:b0:7f:80:3b:45:
e0:70:df:a7:0c:c1:ea:73:ff:0f:85:2f:52:9e:5a:
0d:ea:6c:00:ff:b2:a5:f6:0c:0f:45:77:d0:d8:8b:
f3:e2:5e:52:36:6b:7a:31:86:a1:98:c7:f5:5a:c3:
07:3c:e4:74:3c:62:55:7f:55:9a:8c:e4:a0:85:d0:
3a:ce:71:76:b1:ea:13:17:a6:91:e4:e3:2b:05:26:
ac:6d:06:f3:6e:99:21:ce:e5:c0:26:31:81:db:3b:
78:c1:2b:36:cd:84:cf:84:e8:f4:8b:08:a0:de:0f:
6d:f3:62:9f:0a:58:e6:42:9b:e5:51:98:65:b7:81:
79:15:6a:99:b5:37:87:9b:20:2d:ec:37:6e:82:2f:
ba:bb:0c:3a:2e:f5:e6:1c:c7:85:ba:64:c9:be:89:
92:03:dc:52:91:85:e9:41:85:45:c2:18:f7:fc:7e:
08:61:41:4e:90:d7:89:8d:62:f1:10:b8:e9:8e:2b:
71:56:c0:68:65:50:2f:20:2b:88:da:ec:31:31:ee:
cd:b9:cc:ab:ee:d7:0c:3f:a6:ab:ac:44:2e:f7:7f:
e2:38:72:81:ea:4a:de:92:d0:ef:15:d4:7b:f6:ed:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:10:4A:3E:42:C7:8D:16:24:3C:97:AF:27:18:1F:94:ED:B8:C2
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:42:25:22:80:35:62:4b:3e:a5:77:74:37:ac:61:55:82:74:
fa:2b:db:6b:41:4d:30:5b:a4:11:38:5c:33:51:fd:3c:ba:9e:
38:54:48:ba:f5:3d:a0:b7:90:30:dc:2d:6a:0b:3d:7b:c8:d3:
20:95:bb:0d:6f:b4:e0:94:af:d8:0d:24:5c:da:34:db:75:7d:
14:4d:3a:7e:00:14:a7:3f:e4:fd:27:b2:e6:16:b8:4c:24:ce:
03:af:ba:72:95:dd:dd:9b:85:03:14:d7:60:b1:cb:2e:cd:28:
fc:ae:12:4b:7e:c7:20:f5:f8:8f:5a:15:fd:c3:3d:7d:8c:42:
c8:b7:57:9d:e8:d0:c6:3f:b8:80:d9:3a:fd:d4:3e:9b:d1:56:
b4:17:fe:1f:2a:c4:21:95:09:af:f4:43:1d:fe:be:2e:b9:9e:
a8:b8:5b:de:6b:86:70:ef:69:07:a5:32:ed:e0:e7:59:da:68:
63:7c:53:d2:ad:7b:d1:26:66:c0:0b:8f:c8:40:61:9c:1c:a6:
f4:8b:7a:ea:76:aa:2f:26:f7:3b:dd:7b:e8:7f:3e:ac:ef:9e:
6e:5e:93:b8:e7:8f:35:07:09:bc:e4:55:4e:7e:f0:e8:26:c5:
8a:3f:b6:a6:ca:53:f6:98:66:e0:28:8f:99:a9:5b:99:1b:f1:
b3:f2:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:20 2025 by rpki-client