Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
File: _gG0rfO5SE6VdhmUdLIbtCXgWvI.mft (raw, json)
Hash identifier: IKIcroXqy2s6ACSI5vZ6f/oVDjn6HGZErcQrxZoTq2I=
Subject key identifier: DB:C6:98:23:05:06:A0:F1:B7:CC:ED:C7:6B:1A:72:C6:C5:6B:66:14
Authority key identifier: FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
Certificate issuer: /CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Certificate serial: 01967FB4F80D0CDABCC0E0131A9847BC5899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
Manifest number: 1510
Signing time: Tue 29 Apr 2025 04:01:28 +0000
Manifest this update: Tue 29 Apr 2025 04:01:28 +0000
Manifest next update: Wed 30 Apr 2025 04:01:28 +0000
Files and hashes: 1: _gG0rfO5SE6VdhmUdLIbtCXgWvI.crl (hash: LiIvrYThpZPEXmLzHXJOTyvlaa5N6OeXJg9jEqWr3AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:f8:0d:0c:da:bc:c0:e0:13:1a:98:47:bc:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Validity
Not Before: Apr 29 04:01:28 2025 GMT
Not After : Apr 30 04:01:28 2025 GMT
Subject: CN=dbc698230506a0f1b7ccedc76b1a72c6c56b6614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:c3:d3:ec:7e:c9:fe:0d:ac:4e:c1:a2:6f:
ca:53:81:7d:e7:e8:ce:98:a0:63:57:97:ae:8c:01:
3b:6c:e2:76:5a:c5:2e:20:e4:44:62:9b:34:4c:7c:
19:46:db:6f:f7:69:f7:d9:47:d5:19:24:c3:7e:55:
e6:9b:f4:35:fb:20:2c:72:97:98:9a:c7:e6:b6:6e:
c0:03:05:3b:ee:cc:65:ad:54:24:a7:25:78:12:d5:
b5:7d:36:c8:d4:be:c3:a6:84:61:c4:2b:e2:cd:95:
b0:b2:ee:8a:2f:20:7f:0d:05:f5:ea:b7:10:d9:eb:
45:58:16:32:22:47:bb:c6:8a:37:a2:91:8c:81:e2:
92:9a:04:82:27:fa:2d:6b:d9:e9:32:f0:a9:99:35:
b0:aa:f9:67:21:ac:90:6e:a1:07:35:a4:bf:ed:2e:
40:f0:67:f9:3e:09:9d:f1:90:01:d3:9b:29:0a:93:
37:8c:88:66:f5:be:f6:47:78:6d:60:9e:59:c2:7f:
92:ff:1a:d7:3d:03:e4:09:d6:1e:81:13:4f:b5:cf:
79:16:3f:e9:5e:f6:61:32:94:fe:5f:5d:e2:e2:80:
9c:5f:1d:53:c0:ea:4c:72:29:4d:80:ac:86:5e:33:
d8:49:e6:06:aa:a5:b8:c4:ec:b5:36:3a:53:a1:86:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C6:98:23:05:06:A0:F1:B7:CC:ED:C7:6B:1A:72:C6:C5:6B:66:14
X509v3 Authority Key Identifier:
keyid:FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b9:80:d4:5c:da:34:6b:f6:a5:98:1e:e3:91:77:0e:fb:6d:
25:ba:2c:e1:01:3a:fa:aa:8f:87:da:5e:36:64:24:e0:ab:1a:
51:72:7a:d3:d8:a1:25:7f:21:cf:41:b7:da:94:a8:86:25:92:
9a:66:5a:7b:0e:53:f9:2e:4b:c3:e3:64:d5:f5:5c:2e:63:7c:
2f:24:5b:89:92:51:81:55:be:c7:95:37:f9:bf:61:cd:26:4c:
15:93:0b:4b:db:56:13:df:4d:c1:72:7e:c0:3c:78:1e:1e:6e:
8d:2e:cc:77:80:6a:cf:77:fd:68:1f:47:69:53:76:11:20:f8:
e8:99:b3:56:38:33:0b:51:83:f5:df:1d:04:7b:72:1b:80:ca:
ad:b9:c7:e8:4f:21:88:2a:ad:0e:ba:26:61:9d:cb:b6:b7:43:
08:db:06:03:dd:05:25:0a:09:12:db:89:36:09:f7:84:22:b1:
0a:cf:f3:4d:b3:07:3d:3b:29:b3:dd:e4:34:43:c4:d4:c3:be:
ae:82:0f:3c:2c:e6:94:22:85:0d:9e:49:c6:eb:b3:0f:6b:b7:
80:29:f3:e0:ef:c7:b2:05:cc:b9:47:5c:dd:a5:25:44:ce:03:
33:bc:33:65:1f:b5:f3:d8:58:6b:ee:56:d1:2f:04:3b:c0:e5:
2c:8b:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:10:10 2025 by rpki-client