Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: 4kJtmWtnCSn3CXfgiFovcfobUve3qGa8oyMkSiV5ns4=
Subject key identifier: 41:AE:9E:31:D4:1D:4F:75:6B:1B:1E:07:9A:1C:BA:1D:64:8D:7B:A1
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019659F0920C05FF9E1C13EA0BF5BE663CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 20:01:00 +0000
Manifest this update: Mon 21 Apr 2025 20:01:00 +0000
Manifest next update: Tue 22 Apr 2025 20:01:00 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: Y06C+2OQvAU29jLdGyYQGGLR35cY3CufcG65E3nM28s=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:92:0c:05:ff:9e:1c:13:ea:0b:f5:be:66:3c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Apr 21 20:01:00 2025 GMT
Not After : Apr 22 20:01:00 2025 GMT
Subject: CN=41ae9e31d41d4f756b1b1e079a1cba1d648d7ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:50:55:9f:6f:3e:d4:42:ab:ad:03:55:45:
20:05:76:b2:45:5d:6d:ab:6a:91:88:28:a3:b3:ef:
ad:8d:b0:d3:03:1a:b7:38:82:56:21:3c:72:0a:23:
c2:c8:15:b2:f7:a0:ea:c1:c4:06:9b:74:55:7b:fb:
b4:55:e2:88:eb:00:78:d5:26:d4:09:9c:e8:95:cf:
be:6a:5d:dd:ba:8b:c8:59:51:a4:7e:95:b0:01:76:
36:dd:d4:83:7f:0d:59:46:38:47:1b:85:43:51:b1:
c7:c8:aa:d3:87:d0:f1:96:f6:cb:6e:f4:ca:20:2f:
4d:c1:fd:aa:dc:5d:52:97:94:d7:39:52:cc:b0:27:
0f:21:2b:cd:b0:c6:c8:94:92:ac:ce:22:be:b3:25:
ae:67:db:fe:93:16:0f:0b:4f:a1:77:53:af:53:3b:
e3:0e:a7:52:47:92:34:c4:aa:fd:39:a7:a0:e9:b2:
03:8f:0e:05:e8:2b:fb:c5:d7:dc:1f:5f:b0:f0:e7:
70:ac:ca:fb:9f:bc:60:a6:0d:3e:d4:e8:25:8b:25:
cb:aa:38:56:fd:fa:4d:47:9c:a3:84:60:8e:82:7f:
67:82:70:60:90:46:b8:47:69:7b:9e:81:7b:19:f0:
c0:d9:04:6d:1d:93:07:a8:c0:96:f4:b8:38:87:d6:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:9E:31:D4:1D:4F:75:6B:1B:1E:07:9A:1C:BA:1D:64:8D:7B:A1
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:17:3e:14:e9:15:5f:78:97:73:8f:52:b3:4c:61:11:9e:f0:
7d:c3:cb:cc:53:af:b9:6f:e0:aa:75:ad:28:48:38:5b:e0:47:
0e:87:04:de:c1:4a:a0:ec:1d:96:04:55:81:d9:d3:bc:e0:3b:
21:01:62:92:bd:b2:e5:24:9a:3e:9c:a1:73:d3:f9:37:0e:a3:
e0:1b:67:12:62:05:92:4d:40:58:38:2f:b3:bc:e0:17:47:a6:
8d:99:98:86:f1:34:74:0c:1b:e1:a1:03:50:ab:6a:7f:ee:7a:
d2:cd:a8:d5:a9:9f:cd:cb:f3:0e:ff:26:b5:68:de:86:b4:9d:
66:ca:7a:9e:1c:58:e3:b3:72:a5:d5:87:8e:f7:17:b6:81:18:
33:34:b4:24:0d:04:df:63:99:09:83:a5:d4:8c:06:e1:50:66:
32:69:2f:37:83:8b:ac:c6:88:be:82:ee:7a:c7:d2:95:9e:45:
1a:05:6a:9f:95:de:ba:c0:e4:6a:6c:eb:1b:42:d6:f1:02:6b:
0f:a4:95:d5:31:fb:49:79:cc:83:3e:9a:80:3d:8f:fa:c5:b3:
24:ad:82:8c:48:15:97:80:91:a0:09:38:3d:93:c6:65:4d:4c:
39:b6:6b:ff:0f:08:30:59:8c:21:3c:de:ea:08:b0:a2:29:ee:
93:7e:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:05:30 2025 by rpki-client