Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: s8KylrJZiO4XcOW2V8aV/PpP5W011NJIu6IDkd/3L3I=
Subject key identifier: EC:B7:9C:8A:81:0A:F6:EB:F1:48:06:CB:FD:A1:9F:95:C2:3E:BA:65
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 019675672F860EAF5359B7D9C6FF3E003946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 0456
Signing time: Sun 27 Apr 2025 04:00:18 +0000
Manifest this update: Sun 27 Apr 2025 04:00:18 +0000
Manifest next update: Mon 28 Apr 2025 04:00:18 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: anLeQnojUXDBEf9g3J+Enzl6z+RO1FHGavA79KulHFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:2f:86:0e:af:53:59:b7:d9:c6:ff:3e:00:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Apr 27 04:00:18 2025 GMT
Not After : Apr 28 04:00:18 2025 GMT
Subject: CN=ecb79c8a810af6ebf14806cbfda19f95c23eba65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:6f:a4:47:57:61:a6:ec:4d:6c:0c:6e:7c:
7a:f8:22:38:b9:fa:e0:66:78:ea:d7:a9:d4:e6:07:
1c:da:65:01:ea:6e:65:33:fb:ea:a9:8c:9e:1b:99:
02:7f:bc:65:5e:32:6d:ae:78:6f:4f:00:0e:e8:c2:
41:38:6a:ca:3e:40:a9:3e:ed:70:a4:cb:7f:7e:bc:
3b:cb:a7:2f:5d:dd:79:66:d8:fa:68:9e:4b:10:9f:
74:39:e8:bc:f8:a2:b4:a6:36:f7:e0:b7:bc:a2:ce:
85:cd:78:b6:23:28:e5:d2:7a:ee:24:2d:f7:65:31:
a6:ff:fc:9c:f9:5d:4f:a5:d2:fc:1f:a5:2a:22:e4:
05:52:95:27:20:3a:29:b5:45:7b:b1:d0:a2:56:46:
13:b1:70:d7:7c:3e:99:65:02:39:51:95:55:d9:d6:
d6:dd:f9:59:02:e5:c0:05:86:03:25:98:e4:3a:2e:
32:ba:ef:ff:fd:e3:f2:83:53:7e:81:0c:25:d4:ea:
a2:20:99:7f:a8:0c:19:3d:4f:25:2c:be:9e:20:68:
db:55:0f:7e:e7:43:6c:56:3f:30:00:d0:66:b9:6a:
d6:c3:da:f1:49:d3:1f:76:2f:a0:aa:eb:a7:4a:ad:
81:a2:18:b1:ea:fe:92:d4:ce:2f:c2:88:9e:3b:cb:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:9C:8A:81:0A:F6:EB:F1:48:06:CB:FD:A1:9F:95:C2:3E:BA:65
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:55:a1:1a:85:e1:9f:53:33:aa:d8:5c:ec:89:f4:73:c1:39:
9c:cc:f0:6b:1d:77:eb:6d:ef:38:3f:f8:41:a8:1c:13:25:24:
e6:a5:6d:d2:21:00:50:bb:49:5e:46:38:92:22:1f:96:91:f7:
af:b5:7c:39:94:fe:c0:87:19:9a:07:f0:eb:7d:54:05:dc:dd:
a0:c4:48:10:d7:9d:c3:ac:8a:53:ae:ce:99:77:11:78:98:2a:
59:33:ef:9a:38:ac:de:d0:9d:79:94:03:64:71:c8:73:3b:65:
99:42:be:ab:f6:03:1d:dc:c6:62:ff:25:22:e7:ca:38:6d:0f:
18:ca:ce:48:4e:e0:ce:e0:d0:6e:3d:80:93:64:1f:c8:19:f1:
9b:8f:ba:04:fe:85:23:f0:f7:5c:fa:f1:73:ba:80:09:72:2f:
b1:75:02:25:cd:5e:47:e8:3d:e8:d5:b6:f4:ab:a8:03:da:27:
12:1f:ec:8c:40:c0:99:db:b2:01:22:d1:59:79:38:89:87:02:
5c:80:da:16:db:2d:40:8a:9e:38:a3:ca:e8:a9:7b:69:07:c4:
08:79:f9:fc:73:52:5b:67:be:a4:aa:d9:70:8f:72:f5:cc:34:
77:cb:9a:20:b7:57:53:54:e0:2e:79:f5:22:62:4d:4a:cf:42:
ae:ce:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:53:07 2025 by rpki-client