Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
File: gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json)
Hash identifier: qNwKN4Gw46S91vhNc/c2RmYsUWkBatBxWSCAkUL50JE=
Subject key identifier: A7:05:35:99:30:36:9F:12:AC:07:AE:56:13:EB:44:66:14:AC:28:E2
Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
Certificate issuer: /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Certificate serial: 0196756766CBA20922BC2AF0BBFB13BE3097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
Manifest number: 150A
Signing time: Sun 27 Apr 2025 04:00:32 +0000
Manifest this update: Sun 27 Apr 2025 04:00:32 +0000
Manifest next update: Mon 28 Apr 2025 04:00:32 +0000
Files and hashes: 1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: LdMA71alfd4vKOUoI/dF9/w8CAPmKNfa5jZhbH+jjSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:66:cb:a2:09:22:bc:2a:f0:bb:fb:13:be:30:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Validity
Not Before: Apr 27 04:00:32 2025 GMT
Not After : Apr 28 04:00:32 2025 GMT
Subject: CN=a705359930369f12ac07ae5613eb446614ac28e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:d2:4f:34:ea:07:aa:95:f7:d8:04:20:c1:
79:0e:d3:b2:6e:a2:e5:72:7f:5b:0a:b4:eb:d5:e5:
bc:e8:8f:14:4f:d4:04:b7:a8:64:f6:6a:aa:c4:36:
eb:cc:d3:05:ef:a6:48:78:cc:78:09:85:7a:0d:62:
d3:03:72:be:65:60:c4:ef:a1:1a:85:c3:3e:9e:03:
80:76:8e:33:d4:66:6b:ed:22:88:41:63:6c:22:f5:
95:68:14:21:11:11:21:81:a6:86:fb:eb:74:2d:b1:
72:b2:7d:ab:02:0d:a6:1c:53:04:96:01:9b:d7:f0:
5b:d6:35:e9:89:f9:0f:54:27:51:d7:24:5e:49:a4:
83:f9:ba:da:1c:51:3f:9b:44:17:c3:b3:a3:ce:2a:
c7:b7:ec:f9:7b:34:92:13:f6:90:68:fa:b8:17:db:
bf:d2:e3:cb:71:bb:da:92:10:50:ec:2e:26:25:b6:
de:7b:8e:4c:d2:dc:67:4c:fd:7a:9a:8e:09:fa:ec:
34:9f:07:01:78:6d:d2:f2:d3:88:a2:6d:0d:8e:5d:
6e:9f:96:73:3a:f3:f9:e1:87:29:f7:42:d3:70:1e:
6d:98:59:45:59:9c:4e:63:76:19:18:2a:c3:6f:9a:
5b:83:df:bc:b1:52:e2:aa:53:b9:73:4b:04:bd:7a:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:05:35:99:30:36:9F:12:AC:07:AE:56:13:EB:44:66:14:AC:28:E2
X509v3 Authority Key Identifier:
keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:87:d6:41:ab:d2:97:80:a4:20:2c:aa:87:b7:fa:28:a9:
8a:80:26:a4:38:0c:a4:e1:ed:b9:3f:ed:94:d1:e3:aa:b1:c0:
2b:1b:19:c8:90:61:2a:ec:96:27:1e:c5:cc:2b:a5:4c:5a:1a:
cc:84:0f:12:6a:32:53:ae:8a:83:b9:24:60:49:3e:dc:aa:72:
d4:f4:7e:20:40:c0:cf:28:d9:99:9f:b2:8e:fa:d4:c7:7d:08:
c9:03:7a:8c:15:48:e7:e9:1c:0e:fc:3f:23:ad:29:55:ed:9e:
88:12:b9:c1:ff:af:15:06:4a:4d:a3:c9:f5:88:fd:cf:f8:22:
22:cc:2d:e2:8e:7f:96:0f:18:f8:64:a7:c7:2e:fe:92:3b:e2:
52:89:88:47:ac:8d:04:38:3d:3f:b0:72:be:14:3c:1f:21:7a:
fc:d5:d4:ad:ca:86:a6:52:4a:2f:4c:dd:dc:8a:79:06:8d:c9:
f4:f1:4e:78:04:96:e1:dc:f9:96:6a:3b:1c:5e:f8:0d:15:2d:
f6:92:49:61:d3:36:19:bb:5c:be:4b:91:27:6c:6c:b2:88:4c:
51:b2:1a:f7:16:eb:c7:cf:38:82:68:5a:01:b3:fc:01:5f:37:
02:76:dc:92:47:15:71:85:b2:bb:45:24:13:4a:8e:bb:18:62:
0b:87:02:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:02 2025 by rpki-client