Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: ja76mqhtVPgb025iekvLZ4th5A4wYpu0wpRykH3KDZk=
Subject key identifier: F8:A6:41:B5:0C:A6:C4:39:3D:A2:2D:7D:7A:0A:8B:C0:D4:09:E6:58
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 01963EE71CAB45C01FDCA0FE4A38794EC0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 049D
Signing time: Wed 16 Apr 2025 14:00:55 +0000
Manifest this update: Wed 16 Apr 2025 14:00:55 +0000
Manifest next update: Thu 17 Apr 2025 14:00:55 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: 3sk18KsIrsDJpHk+XgD0xfsIKSoE/veLmusiE0ByrZs=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:1c:ab:45:c0:1f:dc:a0:fe:4a:38:79:4e:c0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: Apr 16 14:00:55 2025 GMT
Not After : Apr 17 14:00:55 2025 GMT
Subject: CN=f8a641b50ca6c4393da22d7d7a0a8bc0d409e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:1c:69:b0:81:f9:a5:ed:b4:63:09:c0:1d:
f7:cd:86:4d:0b:9c:8b:4a:23:3c:84:8f:3b:96:b7:
e1:be:43:24:ac:62:16:cb:89:5c:90:0f:25:32:82:
4d:05:d8:b8:4d:40:d9:6c:8e:a6:76:ea:20:93:fd:
da:de:69:9c:18:19:55:62:b9:b4:de:88:59:23:b7:
14:3e:50:f6:51:cd:a6:76:72:ad:25:5e:48:7a:c6:
fe:13:eb:9c:e9:65:12:c6:ac:9d:2c:d4:68:3d:0a:
b7:b1:cd:88:b2:17:6f:01:d0:b8:12:9e:be:5c:4a:
17:06:fc:40:63:ca:4d:14:a1:75:89:4b:3c:a4:d2:
c0:5f:39:c5:00:10:c8:a0:e9:ce:c8:cc:3b:ca:36:
f7:30:9a:12:38:34:34:56:1d:18:4e:06:f2:43:cb:
bd:f9:ef:64:02:af:9e:b1:68:72:e6:55:bf:66:26:
6e:3c:dd:e1:90:5a:6a:1b:0c:52:76:b6:c8:15:e4:
35:3e:9d:73:f3:e8:85:af:19:d9:ad:7a:98:58:00:
8f:98:2f:03:5d:17:79:4d:e0:bd:73:9c:0e:fa:68:
c9:78:98:ae:bd:1b:1c:c1:74:60:36:30:f7:8f:c8:
3b:c4:b3:d2:a7:f9:86:ff:83:c4:23:cb:c4:32:ff:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A6:41:B5:0C:A6:C4:39:3D:A2:2D:7D:7A:0A:8B:C0:D4:09:E6:58
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:82:b3:ef:bb:2e:ad:00:c4:10:1f:c1:b5:3f:8d:f7:89:bb:
55:6f:97:15:65:d2:fb:79:35:ee:d8:3a:cf:41:6b:50:3f:71:
ea:4e:a8:31:f2:2b:64:8e:7f:2c:6c:20:44:6b:6f:82:6d:ff:
43:13:34:f7:58:6b:11:f9:72:3f:72:f1:d7:93:3b:38:da:2b:
76:c0:a7:28:13:14:c0:7c:ef:e3:8e:7b:4c:5d:b5:f5:53:ad:
09:b4:4b:47:55:30:1e:de:f6:99:3d:d6:87:b4:6c:8b:2b:7a:
42:b0:68:f9:4a:85:08:99:00:90:6a:c9:01:8a:2b:d9:60:1c:
30:12:f3:72:8a:7b:6f:96:9d:df:5f:97:a0:5b:dc:01:ec:92:
01:b3:35:c9:27:7e:c8:dd:04:05:05:b9:45:b2:42:fc:1a:05:
5f:a3:47:f2:61:19:62:ce:7f:6d:52:79:f8:08:34:e7:d0:33:
04:24:b4:b2:a4:52:b0:95:61:fb:fe:a4:8b:ef:25:44:00:64:
20:11:0a:fb:d5:ca:18:a4:2b:a2:de:57:41:42:4c:a7:15:38:
5b:a7:41:16:5e:1a:91:f8:5e:ae:15:c4:b4:89:fa:4b:8b:01:
60:f5:cd:9c:fb:ae:6c:fc:3e:62:91:e6:23:b8:5f:3b:ff:63:
4a:49:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:06:46 2025 by rpki-client