Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: KWHssU9q8FsPUSvH1WTCVgOfVBa6TJIuYQqjWB7FI74=
Subject key identifier: 10:19:6B:E4:CB:1A:EB:D3:6D:4B:DA:01:9A:EB:E2:8B:25:61:C2:AD
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 019680900B26EF15D780FBFE91307CC28500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 124D
Signing time: Tue 29 Apr 2025 08:00:45 +0000
Manifest this update: Tue 29 Apr 2025 08:00:45 +0000
Manifest next update: Wed 30 Apr 2025 08:00:45 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: tpvR+TwvRxk/1SCUi1THjbMf1iwVG0gYek5/isdKLag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:0b:26:ef:15:d7:80:fb:fe:91:30:7c:c2:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Apr 29 08:00:45 2025 GMT
Not After : Apr 30 08:00:45 2025 GMT
Subject: CN=10196be4cb1aebd36d4bda019aebe28b2561c2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:8b:fc:fa:70:9d:ef:67:e5:dc:0a:61:6e:
14:d2:2d:bc:f3:94:f9:fb:1e:07:3b:65:40:b6:f1:
31:f7:aa:a0:2b:81:53:9a:76:c8:4d:b2:56:b2:e5:
0c:d7:70:46:ac:3e:61:f1:5b:1b:e3:9e:52:8b:34:
b9:4c:74:db:b3:ad:bc:c9:90:ea:0f:e8:16:ab:88:
6c:38:ac:23:ed:9e:dd:a5:cb:87:f9:56:84:3d:9e:
a9:c1:2e:55:1f:61:49:21:42:46:b2:43:83:9e:a0:
44:fe:06:53:12:f0:bc:d0:fd:25:31:3a:97:ee:2d:
3d:28:75:4a:22:c1:62:f3:59:e3:23:e9:a8:f7:03:
97:b9:97:95:65:a2:0d:34:be:27:20:d5:8d:75:0e:
ba:78:d6:63:34:09:65:11:8b:8f:2b:d2:b3:41:67:
94:00:70:6f:b5:41:d4:33:02:8a:91:83:9e:5e:c8:
10:d2:af:d8:cb:ac:cd:c5:46:fa:12:4a:db:fc:51:
b4:b6:dd:9c:e0:79:4b:ef:16:d0:6a:f7:e5:e5:79:
15:94:4f:1e:0b:8a:d1:13:56:56:4f:50:4b:8f:3f:
ad:ef:2e:8c:ca:a4:dd:cd:cc:fb:4e:1c:bb:e2:62:
9e:56:3e:b3:a4:32:90:2f:28:59:1b:85:10:0e:74:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:6B:E4:CB:1A:EB:D3:6D:4B:DA:01:9A:EB:E2:8B:25:61:C2:AD
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:8e:be:3e:ea:8f:29:f2:9a:5b:2a:5b:64:62:9d:f6:d9:03:
2d:f3:ac:b8:dd:2a:7c:1a:cd:3c:38:2d:08:bf:3d:a4:c8:94:
b5:d5:e9:97:5a:32:e5:c1:6b:cd:ff:a5:0d:f4:73:67:4b:c1:
dd:23:ea:9e:b0:b4:d2:91:87:41:9a:7e:44:8b:98:2e:80:73:
9d:0d:d8:1c:67:bc:af:66:85:27:8d:dd:4d:e5:d4:11:7b:b8:
33:60:00:64:0c:53:cb:46:5d:0a:cd:d6:06:dd:a3:61:10:db:
33:3e:31:8f:ac:6b:36:4b:83:c7:48:1b:69:f4:4c:c4:64:3f:
05:c8:48:69:c4:11:3e:fd:71:40:34:1c:6f:a6:cf:b8:44:3d:
f6:f2:fb:db:5e:f4:f2:48:eb:82:d3:db:6b:ca:0b:e0:76:22:
1e:49:f8:49:fb:e3:0d:51:be:ab:23:b6:47:44:d9:82:51:ac:
79:e0:04:0a:f7:63:44:20:17:33:e6:3c:38:a8:79:7f:66:a3:
62:df:52:f1:24:57:3f:d7:42:cf:0e:b5:22:92:b4:00:9f:3e:
b7:41:21:26:dc:a2:0f:54:d4:17:f8:0a:70:fc:12:06:1d:b8:
45:1e:9b:ed:b7:b3:c5:a3:e1:3c:70:02:c7:2a:d9:5b:bf:3b:
ee:35:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:51:19 2025 by rpki-client