Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
File: G_mzHCCQb4foYHjbRYHl8e5Tt68.mft (raw, json)
Hash identifier: 1lgK4BaiKfyRssp62XRwrSBKtfeLpVOoF6VIqEnY3pg=
Subject key identifier: 5A:D2:DF:53:42:53:DB:6B:8B:3A:53:95:8A:BD:64:0E:D2:F0:C5:FC
Authority key identifier: 1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF
Certificate issuer: /CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
Certificate serial: 01958C60C69AE356AA5F95E61DA9B2FFCBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
Manifest number: 095A
Signing time: Wed 12 Mar 2025 22:01:47 +0000
Manifest this update: Wed 12 Mar 2025 22:01:47 +0000
Manifest next update: Thu 13 Mar 2025 22:01:47 +0000
Files and hashes: 1: G_mzHCCQb4foYHjbRYHl8e5Tt68.crl (hash: VXzyFXvv8VFZkmQz0WMK9tj5Xcw/FzxJYl823/w3/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:c6:9a:e3:56:aa:5f:95:e6:1d:a9:b2:ff:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf9b31c20906f87e86078db4581e5f1ee53b7af
Validity
Not Before: Mar 12 22:01:47 2025 GMT
Not After : Mar 13 22:01:47 2025 GMT
Subject: CN=5ad2df534253db6b8b3a53958abd640ed2f0c5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:9e:86:03:23:12:ad:99:d6:5e:04:3b:d6:
2a:e1:ed:d6:08:5e:25:fd:da:4f:e6:79:59:c2:54:
ac:80:89:d2:d8:02:0b:bc:ee:f3:af:15:c5:a7:77:
37:eb:26:f1:d0:e4:be:bd:aa:ff:90:09:06:34:cc:
81:da:f0:ca:4c:1b:5b:f4:44:0e:3a:5a:0d:df:0d:
b0:ca:68:d8:98:6a:13:f9:54:86:64:64:75:b9:32:
b5:b5:4e:d4:0a:ac:b0:33:bf:d7:02:6b:09:2b:ec:
be:3a:3a:79:02:77:7f:18:a9:49:4a:d0:03:f6:b0:
c5:36:ae:55:b8:42:44:ff:31:02:30:53:f1:96:d0:
62:aa:17:a5:31:92:82:25:0b:6d:81:84:40:f8:73:
2d:80:57:54:cd:c7:6c:f6:69:03:36:ca:d4:c3:f7:
2c:52:05:a8:5c:cc:34:81:38:0b:67:c5:22:46:dc:
65:9d:6a:85:f9:47:50:44:24:8a:56:de:4c:61:a3:
9a:53:2e:49:79:ca:ec:1f:0b:67:1d:ef:00:f0:39:
25:ed:87:f2:1f:72:df:61:af:51:db:78:bc:9e:6f:
74:2b:3f:05:13:24:f9:69:a6:93:b1:76:33:18:d8:
2f:b0:43:4f:05:8c:b8:8c:b9:9d:33:22:b1:be:06:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:DF:53:42:53:DB:6B:8B:3A:53:95:8A:BD:64:0E:D2:F0:C5:FC
X509v3 Authority Key Identifier:
keyid:1B:F9:B3:1C:20:90:6F:87:E8:60:78:DB:45:81:E5:F1:EE:53:B7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_mzHCCQb4foYHjbRYHl8e5Tt68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b952a6-6049-4fd8-b7fd-9355e540ed10/1/G_mzHCCQb4foYHjbRYHl8e5Tt68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:27:60:e9:f9:35:3b:ff:b3:58:a3:11:17:6e:a3:0d:ad:0d:
e0:e6:d4:0f:5f:5b:b9:de:92:09:92:f9:4f:e2:26:28:6a:07:
fa:4f:01:97:51:75:10:44:bc:0b:92:2d:cf:a2:bc:61:6e:fd:
b9:ee:9b:9f:06:47:dd:b0:54:d7:21:91:74:a6:64:12:f9:81:
52:ce:42:a8:57:17:d0:10:c0:d5:d9:23:c5:9f:80:54:f7:e8:
ab:b1:65:57:38:28:02:23:07:f6:e1:eb:38:53:39:3f:ed:ba:
35:c9:a7:9b:0d:2c:ed:af:7d:f1:6d:b5:f4:19:08:17:c8:38:
7a:05:cc:17:dd:1a:bb:7d:b8:5f:82:e9:94:32:ef:cf:85:6c:
0d:9b:67:91:44:de:df:aa:14:39:e2:77:6d:d6:63:63:43:f9:
39:d7:c6:38:23:ee:c5:11:5c:af:62:be:c1:47:d5:3b:ee:11:
74:77:1e:fd:5c:d3:c8:c9:87:ea:67:98:3a:e6:08:d6:6e:b4:
f9:96:d1:b5:42:16:e6:7c:4a:8c:8a:c6:10:ac:58:02:1a:c8:
41:30:ad:11:ad:74:29:ca:fc:07:02:e1:7e:15:63:f8:3b:b9:
f4:c8:ee:0a:14:05:51:cd:8c:ca:43:2c:fb:f3:93:ec:82:eb:
f1:49:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:15 2025 by rpki-client