Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
File: gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json)
Hash identifier: NjZO0ygEbJq79V5uzcnqOKYHKOVt3mxB5AopXIBamfA=
Subject key identifier: 64:EB:B4:D4:92:40:AE:A8:52:45:08:D2:19:83:58:4F:9A:1E:64:45
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Certificate issuer: /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial: 01967BD75912B9574DB0CC8517D1539908E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
Manifest number: 0685
Signing time: Mon 28 Apr 2025 10:00:32 +0000
Manifest this update: Mon 28 Apr 2025 10:00:32 +0000
Manifest next update: Tue 29 Apr 2025 10:00:32 +0000
Files and hashes: 1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: s6fzauG1vPLGFKJPnwStt3qQ+lxmGcAmZjTSgRDzIGw=)
2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:59:12:b9:57:4d:b0:cc:85:17:d1:53:99:08:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Validity
Not Before: Apr 28 10:00:32 2025 GMT
Not After : Apr 29 10:00:32 2025 GMT
Subject: CN=64ebb4d49240aea8524508d21983584f9a1e6445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:ad:b4:b7:d0:40:f0:1f:7b:98:c6:a4:3b:
81:a3:c2:9e:45:3c:d0:0c:85:41:1a:8e:54:9d:59:
8c:7c:47:d8:29:1f:52:65:57:21:8d:11:39:1b:ec:
74:31:d4:bf:5f:26:d4:11:4c:54:5a:7f:e7:c1:45:
1d:c8:f5:7a:1b:31:ba:17:b8:bf:7b:17:7a:25:34:
dd:fd:d1:c4:f6:65:9a:fc:3a:a3:10:05:3e:b8:f0:
46:63:4d:41:f1:c7:48:29:94:56:2c:af:92:6f:5b:
0d:a9:1a:1d:74:fe:99:46:31:16:ac:06:0e:20:0b:
99:71:be:fe:fd:3e:7f:fb:0a:f9:88:25:e6:3f:d5:
41:0f:c8:b2:c1:3c:e8:d1:fa:06:3a:57:b5:3b:0c:
d4:6d:ad:aa:55:c1:5d:b2:70:56:aa:ed:97:e3:e4:
33:81:a4:4f:12:48:36:ff:ff:20:cf:72:37:1d:46:
a7:68:c3:19:bb:ea:7c:04:66:64:ee:d2:85:16:bd:
27:48:54:e4:c4:f0:a9:39:67:6a:e9:3e:3f:db:b4:
fe:0a:8e:1d:a1:2b:7b:3b:3c:ee:76:36:2d:62:9d:
b3:12:f0:a2:10:99:4c:57:a4:ea:5d:3a:eb:fa:95:
0e:61:1e:a8:91:49:6f:e0:18:21:bf:4f:50:78:60:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:B4:D4:92:40:AE:A8:52:45:08:D2:19:83:58:4F:9A:1E:64:45
X509v3 Authority Key Identifier:
keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ae:ee:32:63:27:ae:33:38:34:9e:f1:0b:eb:f7:d5:8b:a0:
73:83:42:6f:1d:b2:6e:9d:51:e8:01:9f:e8:45:73:61:d7:46:
aa:93:55:24:10:d5:11:11:53:db:6f:4d:ce:63:ca:e4:4b:94:
6a:72:6a:1e:42:3b:14:c9:26:7d:44:9a:aa:14:3f:71:5e:e0:
91:ea:76:49:03:76:c6:ca:e6:73:8e:7a:91:e3:6d:3b:8d:00:
00:00:cc:65:dc:f3:98:99:8f:46:03:79:5a:ed:a4:4b:5d:cd:
73:06:45:17:9c:77:4f:9c:e7:2d:42:ec:5e:a6:bc:fd:df:e6:
d1:c6:15:7f:39:76:8f:f7:a7:87:c5:bd:5b:fc:3b:b9:48:9f:
bd:97:f8:4e:b8:2c:e3:71:45:28:db:9e:4b:9a:d6:da:1a:ad:
28:62:c7:e0:28:c8:c7:38:0f:f6:2d:ad:c4:a0:31:44:82:c0:
3a:85:28:23:5f:eb:91:eb:a1:44:2e:51:f4:23:8d:a3:57:56:
eb:d0:5b:5a:4e:33:7e:99:63:76:91:4a:47:5c:33:5a:8a:96:
c3:b5:d8:31:dc:c6:d9:dc:2f:56:8c:2a:ea:52:47:bf:db:3f:
76:1b:4a:1e:42:fc:cd:92:4b:7e:8a:aa:14:a0:75:56:4f:f6:
3c:9c:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:31 2025 by rpki-client