Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: L4255SSOF5QEMkh4H4eaIs4n1LXRZR5lGL24pwre9UY=
Subject key identifier: 8C:2B:E8:15:D3:C6:36:99:16:57:6F:D2:C4:8C:B1:D9:C9:5E:90:5A
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019612458D75DB4441FE5D595107FCE14703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 7B
Signing time: Mon 07 Apr 2025 22:01:10 +0000
Manifest this update: Mon 07 Apr 2025 22:01:10 +0000
Manifest next update: Tue 08 Apr 2025 22:01:10 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: poJA8eYi4exBsc90SBob91G7kIzLC/lkpvHU6mK3378=)
2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:8d:75:db:44:41:fe:5d:59:51:07:fc:e1:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Apr 7 22:01:10 2025 GMT
Not After : Apr 8 22:01:10 2025 GMT
Subject: CN=8c2be815d3c6369916576fd2c48cb1d9c95e905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:6d:e7:8a:a8:7e:cd:08:c3:29:d8:5a:92:
02:47:b9:4f:0b:7f:08:7d:83:99:86:fe:a0:c2:ad:
70:75:dd:90:82:fe:18:cb:e7:e4:a5:ec:7e:84:ce:
d2:64:03:bf:e7:96:e5:84:d6:34:a5:31:ac:38:ba:
c0:37:32:9a:3c:7c:0c:b9:ec:eb:2c:b3:b1:4a:df:
0a:b0:e4:87:da:d5:1b:54:5c:b5:8f:66:af:31:cf:
82:e1:3e:11:ff:33:49:a4:d5:c1:9d:11:e1:ef:e7:
0d:d2:d7:96:62:62:37:82:67:03:6a:f2:a8:ca:8a:
36:84:88:ef:f5:aa:db:4b:58:2c:f8:94:2f:3d:66:
d3:03:6f:a7:d6:8c:fb:4a:29:c0:6a:4f:6a:fc:d8:
ae:b4:e5:8d:af:79:91:4d:c5:5a:eb:bf:14:74:a3:
34:e1:ab:8c:37:5e:2f:1d:93:59:4c:66:28:d7:6d:
03:b1:6d:ca:31:26:f3:36:ee:78:6b:18:2f:b4:6e:
a9:35:22:ff:bd:d7:f6:2a:5d:eb:f9:8c:52:69:bd:
36:fd:c3:c0:c3:b0:ba:1c:da:13:86:65:2d:8a:43:
16:a2:d2:89:b8:9a:0a:90:40:9e:b1:6f:19:53:c2:
e5:33:86:ad:e9:4d:17:6e:0e:5d:90:92:97:35:0d:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:E8:15:D3:C6:36:99:16:57:6F:D2:C4:8C:B1:D9:C9:5E:90:5A
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:21:ce:a1:e5:20:63:65:94:2f:20:bf:77:b2:b6:a2:18:de:
65:28:34:6c:c3:28:0e:cd:a0:ee:d9:4f:3f:34:c4:16:de:21:
75:5f:16:4b:1c:ee:11:db:76:a3:3b:1c:6f:69:94:e9:59:99:
75:03:51:1b:e8:13:da:21:f3:75:5a:fb:41:19:6d:6f:fd:02:
77:c7:80:f0:5c:47:7d:a4:35:d9:18:56:a9:2e:d2:ba:02:22:
78:ea:4b:56:2b:6c:92:3a:bd:fc:20:e0:f0:8a:75:20:29:e0:
dd:d3:4b:7d:f8:b4:9f:9c:db:61:45:52:d0:4f:2c:36:a7:3f:
f5:e0:15:e5:c5:e6:e1:84:eb:1f:fe:47:71:61:31:b8:88:4a:
52:1b:e1:52:bd:d6:c7:cd:03:0b:6d:9c:34:6d:1e:56:28:d4:
05:fe:40:e2:bd:9d:53:aa:91:47:8f:d7:68:44:d9:02:d3:11:
7b:e8:7d:08:a7:29:ca:1c:a4:89:65:15:0c:c7:59:f0:d2:77:
81:ce:01:e2:ed:ae:04:b1:33:d2:eb:3a:f6:ca:32:71:26:6b:
b7:26:39:c4:7c:71:15:48:25:3d:ad:c3:57:8d:9b:7a:21:45:
8f:51:b4:6b:c4:aa:a1:01:04:62:eb:3b:f2:f9:69:27:68:89:
82:08:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:15 2025 by rpki-client