Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: SB0vjmcXO/4K679Kq+QhcvPt6TslEPyyOSCVBkHoJb0=
Subject key identifier: F6:FE:F5:03:25:A9:A0:4E:3D:60:39:85:B7:69:7C:EF:B2:12:02:B4
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 01967B32ECBD1E4B09D8520F5F7A73B01F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 1450
Signing time: Mon 28 Apr 2025 07:00:56 +0000
Manifest this update: Mon 28 Apr 2025 07:00:56 +0000
Manifest next update: Tue 29 Apr 2025 07:00:56 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: dJsIe1dEbh04BJNt8Xjz9L8DhgMUr4RIHnUNk98ZrVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:ec:bd:1e:4b:09:d8:52:0f:5f:7a:73:b0:1f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Apr 28 07:00:56 2025 GMT
Not After : Apr 29 07:00:56 2025 GMT
Subject: CN=f6fef50325a9a04e3d603985b7697cefb21202b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:12:a8:1d:50:d8:0e:b1:62:bf:fe:71:f2:
f3:bb:3e:3c:44:1a:42:3b:04:68:2d:37:95:c8:7b:
8d:93:c6:17:f0:81:3a:12:6d:3d:f2:16:b0:86:5b:
28:1e:c9:e5:a3:9c:55:6c:06:41:62:88:52:a0:fc:
f2:b5:78:47:68:b4:4a:0b:7b:f6:a3:cf:ad:27:d8:
0b:18:de:57:ff:a7:07:fd:bf:45:9e:33:94:a2:09:
0f:bb:78:b6:3f:fd:96:2b:84:79:3c:e8:a1:fc:d3:
12:9c:9f:94:9e:21:89:02:08:45:2a:93:53:35:a3:
19:c5:2e:84:35:8c:ec:81:88:f6:9a:1e:2e:e9:85:
b2:70:25:8e:9b:12:16:f5:e2:db:61:42:9a:9d:34:
da:3b:cc:76:9f:b6:6f:4c:c2:22:45:74:da:f3:0d:
bb:cf:37:cc:56:4c:4d:3d:8e:5c:a5:51:94:04:74:
8a:75:4b:70:82:e6:e7:7d:2e:60:ae:e9:8e:f0:d9:
6a:0c:ba:a7:6e:7c:4d:6d:61:29:43:31:dc:d6:68:
48:5a:c4:7b:90:82:81:3b:95:78:a7:79:36:0b:d6:
ef:e8:f1:37:1c:66:f9:a0:4c:e9:e7:93:5e:ca:b5:
45:7f:4b:9a:ce:50:03:f4:4c:dd:2d:58:f0:a2:02:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:F5:03:25:A9:A0:4E:3D:60:39:85:B7:69:7C:EF:B2:12:02:B4
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:0e:33:06:91:5b:d3:1b:d6:2d:47:b4:2b:6c:3d:e0:e1:
7b:a7:64:71:75:a8:67:de:62:27:74:d0:fc:df:81:a1:82:01:
6d:32:64:7e:3d:76:e0:74:d0:62:44:5d:28:81:63:02:e9:a9:
3c:8c:27:32:95:b9:53:c6:0d:c9:bc:66:40:23:39:f0:da:92:
88:37:0c:90:c6:74:1e:72:65:03:5e:0e:8c:5d:00:39:0b:a3:
96:23:b4:51:ac:f5:ee:d9:73:a8:00:cb:39:b6:7b:f7:b5:3c:
bf:0b:e4:89:04:3e:75:f3:27:b6:e6:f2:2f:eb:57:17:50:91:
cd:dd:eb:0a:ae:2b:34:2c:1c:b5:66:f3:ce:a7:5f:1b:89:a5:
49:4d:db:3a:2c:16:39:e2:0d:88:c5:0d:37:17:a1:5d:84:a0:
bb:2a:45:c2:1a:1a:d3:82:f7:e0:25:23:ec:e9:28:28:d2:3b:
6b:d4:4b:44:8b:70:83:1f:ad:c5:f9:3a:8c:9d:6e:18:a6:88:
5c:8c:66:b2:e2:1c:ea:34:ea:62:ba:0f:d7:73:56:07:18:e4:
62:01:64:77:96:b9:64:52:1b:ce:4f:9c:2f:26:d5:68:ec:5f:
6c:cf:4a:b3:1e:f4:bf:c7:36:d1:85:ff:67:ed:23:ec:de:05:
05:7d:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:19 2025 by rpki-client