
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: Ut2Gsabz2HwrykacNsZYQKxg8sZ9iXWTAqDWTODTOXU=
Subject key identifier: 10:8F:4C:FA:23:27:DF:CE:A4:93:57:0C:41:EA:E5:A6:6C:48:73:88
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 01968BEF0FB37D65199ADB49E1139578CAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 1286
Signing time: Thu 01 May 2025 13:00:22 +0000
Manifest this update: Thu 01 May 2025 13:00:22 +0000
Manifest next update: Fri 02 May 2025 13:00:22 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: V0yjKUEUcytsm8xIu2CkrbsRSqp3pwkyM2TmbpJ+2wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:0f:b3:7d:65:19:9a:db:49:e1:13:95:78:ca:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: May 1 13:00:22 2025 GMT
Not After : May 2 13:00:22 2025 GMT
Subject: CN=108f4cfa2327dfcea493570c41eae5a66c487388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:45:fd:8f:ad:83:74:a1:40:f7:e8:b5:9c:
59:01:a8:94:48:a7:98:f4:f3:d2:5e:4f:5b:ac:df:
eb:dd:9b:35:6d:53:b2:eb:76:9c:6e:66:8b:1a:fd:
a0:9e:c4:7f:8e:17:8b:52:0a:f7:a5:6f:ac:2f:0a:
d4:8b:b0:5f:ab:b0:72:d8:08:b3:48:c9:2c:74:11:
79:e3:93:a2:43:d3:86:ab:a7:85:b1:4c:a0:cc:b4:
a9:57:1b:df:b5:e2:f4:9a:58:59:d7:5a:a0:b1:2c:
07:6f:45:4b:f8:b8:69:62:0c:36:7d:3e:c1:35:8a:
0d:12:39:8a:a2:27:78:fc:f6:ad:c5:92:de:83:cc:
70:6d:cc:83:95:79:0a:b0:06:f9:6f:66:3e:7f:ea:
30:f7:c5:74:a6:33:4f:42:26:02:52:d8:4c:03:70:
8d:47:31:e5:a4:ce:4e:75:98:c6:12:02:07:48:0e:
25:13:e2:5e:28:14:0b:bd:02:18:22:14:37:b7:3d:
a3:4c:82:86:a2:02:e5:b3:c4:89:fb:e5:d1:e4:8a:
25:97:f0:f5:89:b3:50:4f:64:50:da:b6:aa:ac:95:
a9:82:c7:16:43:7b:55:3e:8d:63:b3:a3:02:53:98:
e1:46:c4:bf:8e:22:84:d3:06:d2:f6:a6:bd:eb:a8:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:4C:FA:23:27:DF:CE:A4:93:57:0C:41:EA:E5:A6:6C:48:73:88
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:66:db:e8:8e:2e:27:00:2d:bc:ba:06:85:59:4c:2f:51:d1:
9e:1e:93:fa:53:16:ea:d2:e7:71:dd:53:26:04:51:b3:e9:bc:
d8:78:81:84:6c:79:47:9a:af:2e:6d:80:fe:f7:d8:d2:b3:09:
bb:93:b9:35:94:a9:bf:4a:cb:a1:a4:69:f3:a2:3f:44:40:eb:
07:50:a4:8c:d0:a4:fd:31:59:3c:c5:f2:c3:9c:e0:94:20:5f:
21:9f:db:e6:7e:55:27:3e:1e:a0:55:41:08:80:fb:f8:e3:92:
e3:b8:38:e0:66:18:5d:24:dc:c6:25:ca:49:52:19:f7:eb:a2:
a8:49:c4:c9:41:dd:fd:e5:87:d7:80:be:56:25:a9:f2:fc:98:
b1:9f:a9:74:4e:b4:93:80:66:13:84:71:22:4b:1f:82:91:5f:
43:c1:ea:25:46:78:d8:b3:49:a0:87:a1:83:81:1c:69:98:53:
90:49:04:93:27:bf:58:ba:a5:91:14:69:83:af:c9:01:10:40:
6d:93:6c:75:6a:f4:8c:31:aa:9d:77:1f:c4:d7:2d:fe:98:9a:
83:62:c6:a7:18:c9:76:fd:bb:8e:80:36:7f:0e:8e:84:19:ae:
0c:04:a3:a2:50:a4:be:49:ae:f6:9e:6e:b3:87:76:47:6c:92:
de:c0:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:06:58 2025 by rpki-client