Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
File: GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft (raw, json)
Hash identifier: yos05ZQPBfHm+MAAfyhEEpaGMKX23wn7VXPlwHDT0Bw=
Subject key identifier: F1:BF:1E:D1:E5:09:40:B4:2D:3B:9F:A8:50:A4:7B:F0:AF:36:B4:5C
Authority key identifier: 1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
Certificate issuer: /CN=1a66819ed62a71090cf437e4263012d4c035067d
Certificate serial: 01964BFD99D424193CCC8C09457881A693B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 03:00:33 +0000
Manifest this update: Sat 19 Apr 2025 03:00:33 +0000
Manifest next update: Sun 20 Apr 2025 03:00:33 +0000
Files and hashes: 1: GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl (hash: IlcxPA0zwksrBsiYMzIa3XW9y+MD2AbJ9um7wBLpgGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:99:d4:24:19:3c:cc:8c:09:45:78:81:a6:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a66819ed62a71090cf437e4263012d4c035067d
Validity
Not Before: Apr 19 03:00:33 2025 GMT
Not After : Apr 20 03:00:33 2025 GMT
Subject: CN=f1bf1ed1e50940b42d3b9fa850a47bf0af36b45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:11:97:5e:24:35:21:ee:f1:08:5a:5f:4c:
f0:c2:ce:56:76:72:01:4c:0c:6b:52:f0:9d:94:fb:
65:cc:e4:3e:a9:3f:5d:15:d0:31:d4:b0:6b:73:b1:
09:cd:46:9f:3e:93:96:23:ef:11:d0:52:07:71:79:
42:a2:f8:1c:28:ba:4b:e4:9e:62:ed:ab:ca:51:1f:
72:6e:ad:43:ca:3d:b6:2c:ef:4c:37:a7:98:9f:1f:
b9:e1:94:50:4f:b1:ea:9b:db:3e:e8:f6:c1:89:d9:
1a:cd:b5:80:b3:ac:dd:f8:cc:72:47:24:6e:44:9f:
f5:04:9e:ee:90:ed:08:61:51:db:0f:2e:a7:d9:8c:
2e:0e:18:40:21:08:24:9d:92:4b:07:81:f4:17:ea:
21:6a:f0:fe:1d:05:8e:04:46:c7:7f:5d:20:a7:c4:
ed:62:dc:9d:bf:ba:8f:14:e4:ea:eb:01:70:1f:8e:
f9:27:16:cc:5b:16:ed:c4:5d:5b:2c:96:88:4e:d2:
81:2e:c2:11:16:75:f1:c0:d6:cd:7c:7b:b8:88:c0:
0e:18:bb:21:ef:8f:28:02:9b:db:8a:8f:25:e6:05:
ee:8a:74:56:1c:18:14:f9:ef:03:56:ee:f6:a5:b6:
33:9a:bf:8c:57:ce:c4:c1:7c:f6:fb:81:af:a1:64:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:1E:D1:E5:09:40:B4:2D:3B:9F:A8:50:A4:7B:F0:AF:36:B4:5C
X509v3 Authority Key Identifier:
keyid:1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9d:38:59:9a:56:42:fe:bc:49:8e:85:22:39:04:42:4f:7c:
51:51:9a:42:4d:14:a8:27:b5:33:c9:09:20:4b:2e:a7:d5:03:
91:4a:4f:f8:64:02:27:4c:22:30:c1:ed:a4:d0:66:93:29:a7:
75:b6:01:a8:eb:d6:d9:74:c3:19:44:f0:89:2f:4c:a4:2d:c4:
ad:5c:8c:2e:69:3f:30:99:56:18:35:98:8b:87:04:40:98:6c:
68:33:b4:73:1b:51:3d:49:6b:e1:88:27:ff:6f:0b:2b:9f:63:
5f:fd:a8:37:68:97:6f:96:11:73:38:22:fc:65:ea:34:bc:12:
33:f3:19:11:29:8a:38:ce:9f:75:86:31:91:4a:a9:b7:48:1d:
d9:36:2c:48:ef:d7:2a:4c:d3:e7:f0:bc:75:f3:c8:31:7f:06:
63:08:65:78:5a:46:5d:17:84:a4:65:a7:b6:dc:25:29:7c:1a:
e1:0b:5a:37:df:3a:02:09:3d:13:50:12:fc:b4:2f:91:e5:f2:
91:d3:ac:e2:b5:4f:90:b2:a9:29:bd:b9:51:4b:c5:a5:17:99:
e0:8d:d0:d0:30:d8:6d:c5:f5:68:25:be:58:d3:c3:60:f8:df:
b0:6b:b8:39:69:a6:28:bc:56:d7:fe:1a:f3:87:0f:1f:7f:fd:
51:0b:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:10:01 2025 by rpki-client