Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: 0fFXTXnn3LCG6lKddMGEX6G4jxp9v6klnxLfx8gYQ7o=
Subject key identifier: EC:98:68:3E:16:93:02:C3:50:56:0D:03:2D:92:FE:0F:CA:25:7C:29
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 0196767A4D95BC885BFCCB09A7D8258FA9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 0175
Signing time: Sun 27 Apr 2025 09:00:48 +0000
Manifest this update: Sun 27 Apr 2025 09:00:48 +0000
Manifest next update: Mon 28 Apr 2025 09:00:48 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: fI1aMAv9d5+oTl4XBdCwMRCxUupNnBdb5uhtyZ+dSQk=)
2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:4d:95:bc:88:5b:fc:cb:09:a7:d8:25:8f:a9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Apr 27 09:00:48 2025 GMT
Not After : Apr 28 09:00:48 2025 GMT
Subject: CN=ec98683e169302c350560d032d92fe0fca257c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:18:58:72:e4:ce:f2:3a:79:fc:5d:d7:93:
37:50:94:fc:50:8c:ea:d1:96:4e:39:36:af:02:8b:
fe:4d:11:eb:f0:49:0d:72:57:2c:ed:52:51:d2:b3:
eb:bb:64:cd:d1:d0:8c:91:af:a8:f0:1b:11:57:c9:
14:49:ea:f2:ac:8b:de:62:44:06:e0:b5:0d:6e:10:
5a:ff:bb:00:37:45:04:db:a1:bd:22:99:6f:f4:c0:
b8:4e:e9:72:ad:90:b7:5c:32:09:42:aa:89:f9:c0:
e0:c1:21:70:e4:07:44:ea:d5:bb:f3:0c:a1:ef:35:
16:cb:0d:b0:2e:bd:13:30:8e:be:0b:38:e9:e6:38:
74:79:2c:3f:c6:7c:87:74:fa:fd:c5:77:60:26:2f:
1c:ff:4a:77:a2:e6:6a:37:59:37:86:2c:cd:1b:81:
3a:33:51:c9:52:f3:76:47:9b:bf:c3:1c:88:cd:cf:
f7:3b:bb:97:ac:95:9a:74:1d:b7:fd:2f:d8:0f:b2:
bc:d8:a4:98:77:6e:eb:12:a9:70:1a:a6:63:b6:a1:
b4:f8:bf:f6:35:6c:a0:54:59:46:30:5e:38:df:54:
77:a7:71:0e:84:f1:f8:57:99:c0:73:a0:bb:34:8f:
ff:e1:77:b8:5f:ca:20:46:f2:b0:34:db:91:5f:36:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:98:68:3E:16:93:02:C3:50:56:0D:03:2D:92:FE:0F:CA:25:7C:29
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:72:cb:bd:b2:ec:33:a2:e6:83:cf:44:b5:79:3b:b2:c4:94:
81:82:86:39:3d:01:80:af:26:f3:57:0f:ce:f1:8b:99:e0:0a:
46:35:7e:2f:ad:0b:c5:ed:01:85:e4:7d:7d:8b:f7:15:36:36:
60:69:f1:c3:02:b6:c1:bf:88:24:95:18:c1:62:9f:f1:0e:72:
0f:73:78:bd:e4:1f:4a:cb:c2:ff:50:b9:58:55:b0:ca:bc:75:
db:af:b4:28:df:6b:e4:9b:1c:1b:68:6e:21:7b:1d:ae:20:af:
ce:b8:2c:18:71:23:41:d7:b7:0b:13:1f:69:5f:6c:e2:d8:bb:
fe:ea:2e:a3:74:e1:21:6e:82:88:e3:5c:d9:66:58:85:de:df:
ec:37:b8:5f:1d:58:a7:5d:c5:ae:0b:7c:ca:ec:83:e7:47:9a:
b8:3b:b3:e7:55:00:cb:7b:74:38:b1:ad:9c:58:a0:99:95:be:
96:3f:5f:78:97:40:1c:d0:4f:38:8c:e1:65:41:57:d5:24:6b:
31:3f:84:f5:6b:b6:6c:5e:db:46:17:ca:d1:43:7d:6e:be:37:
55:6e:21:85:29:a0:87:3b:11:9b:35:28:b4:15:78:b8:7b:ac:
c7:79:66:03:03:30:0a:3f:fc:3e:41:94:fd:52:2f:b5:5c:3c:
a9:5a:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:37 2025 by rpki-client