Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: O6TZx48lCoREg4OvJiar/PVR195iTYWUNUVA6VoOpvc=
Subject key identifier: 97:CB:AA:4C:4F:C2:92:B4:36:61:C0:D7:CC:3C:91:5B:FF:E1:D7:A9
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 01965011C60598D0C6606019FBBF87249629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 0DB8
Signing time: Sat 19 Apr 2025 22:01:04 +0000
Manifest this update: Sat 19 Apr 2025 22:01:04 +0000
Manifest next update: Sun 20 Apr 2025 22:01:04 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: CDY8md/yRMx9ZNEeDoZPCzMGRPzbfXJPorpRxlW/bxw=)
2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:c6:05:98:d0:c6:60:60:19:fb:bf:87:24:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Apr 19 22:01:04 2025 GMT
Not After : Apr 20 22:01:04 2025 GMT
Subject: CN=97cbaa4c4fc292b43661c0d7cc3c915bffe1d7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:15:9c:33:48:46:80:48:39:70:ec:93:ce:
84:bb:04:68:81:3f:d1:0c:3c:b2:2b:3f:24:e5:fb:
2a:00:75:59:98:83:98:c7:2b:b4:44:cc:76:b8:09:
cf:30:28:7a:38:b0:8a:54:f7:c9:60:e5:4e:7b:2e:
4f:62:c9:e3:e6:13:c8:4b:97:35:57:52:86:e2:4a:
79:55:49:0b:be:37:f9:f1:43:bc:07:22:56:63:3c:
19:ee:55:68:0c:08:cc:98:81:3b:ec:b2:b3:e4:f4:
94:3f:f1:8d:a9:86:1a:92:b6:68:ec:d4:5d:58:62:
a8:86:96:d1:4c:99:ce:28:3a:20:b5:24:53:2c:63:
3f:0f:b7:87:86:61:a9:d6:ce:61:c7:74:c1:6c:9e:
5a:d9:67:aa:d7:45:7c:2f:33:30:cf:32:81:da:1b:
13:2d:dc:ec:09:96:39:19:f8:46:07:db:88:3d:07:
cb:f5:d3:6a:33:34:a7:d3:bb:7c:a8:16:dd:f8:9c:
94:3e:6f:4f:66:25:61:9a:28:60:de:25:38:15:c8:
7d:10:e8:b4:72:d5:de:a1:d0:d0:54:72:6d:49:e2:
80:89:92:33:b9:bb:d3:99:c2:c8:07:e4:ec:f9:a2:
a1:32:96:1e:c7:90:59:02:8a:77:89:0b:5c:3a:2b:
08:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:AA:4C:4F:C2:92:B4:36:61:C0:D7:CC:3C:91:5B:FF:E1:D7:A9
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:90:75:ca:e4:a2:e3:dd:44:85:e8:43:09:e5:42:c6:9e:1b:
98:ca:7a:61:08:bc:be:be:6f:82:88:d7:ef:e9:16:5c:35:f6:
e1:15:9e:06:bd:76:44:c0:81:11:29:47:e8:f8:b3:73:ac:23:
a1:09:78:7f:3f:3c:1a:ad:e7:84:a2:8c:5c:73:9f:13:01:21:
1d:63:b7:df:c2:07:37:37:bb:67:67:f8:69:8a:f8:01:97:70:
b2:2d:7f:39:6b:c7:3c:b0:fd:8b:a8:6c:b5:aa:35:43:0a:ea:
57:92:ba:65:5c:06:d3:4a:68:9c:7f:28:9e:0b:f0:77:fe:ee:
77:b5:89:26:27:c5:49:7d:05:9d:74:1b:b3:9b:50:02:33:6c:
5e:4e:f1:45:2d:f0:e2:3f:a6:f3:a3:9d:f3:05:60:65:0f:7b:
a7:5f:c2:11:5f:7f:e2:f6:fc:c6:a5:60:c3:d0:dd:6f:ba:2e:
26:22:77:02:0e:ca:a2:18:3d:50:7b:fc:9b:65:96:47:46:b8:
65:d6:54:dc:3a:cd:47:fa:10:cc:29:18:8d:16:db:0f:fe:b3:
5e:c1:96:c3:20:8c:e2:85:93:6a:41:00:5d:98:74:8f:3d:5e:
61:6a:8c:b4:6c:04:1c:f0:c8:3a:8d:10:64:6e:32:08:84:0e:
0a:b0:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:40 2025 by rpki-client