Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier: Qg14qTda2MnKI3qpZuX8VUlHD58pI4nN9uFhXv1YmFk=
Subject key identifier: B5:A5:19:31:8C:DB:69:23:92:A0:32:06:54:BA:FE:6A:BB:5B:0E:F1
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial: 019675675304E0642E6CFF2E8BF8039B4A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number: 0F3F
Signing time: Sun 27 Apr 2025 04:00:27 +0000
Manifest this update: Sun 27 Apr 2025 04:00:27 +0000
Manifest next update: Mon 28 Apr 2025 04:00:27 +0000
Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: PNDHfUWhzOTlqDDCNER3iWMD6GisoTK0yKbucvEfJjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:53:04:e0:64:2e:6c:ff:2e:8b:f8:03:9b:4a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Validity
Not Before: Apr 27 04:00:27 2025 GMT
Not After : Apr 28 04:00:27 2025 GMT
Subject: CN=b5a519318cdb692392a0320654bafe6abb5b0ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:17:c5:7c:94:02:2e:a8:e8:56:c8:7d:12:
65:cf:7a:5f:0a:bb:28:fe:ac:20:4a:8b:ba:50:1a:
cd:40:7f:b5:92:71:9f:4c:af:15:ed:6e:5a:e0:1c:
29:08:54:c3:73:be:8f:d4:93:b4:a3:b7:19:8c:4f:
12:c3:a7:4f:33:e0:88:30:90:58:0b:70:96:2b:5c:
1c:7e:c2:f3:54:ca:8a:a5:ef:28:8e:af:07:b7:41:
67:ca:9e:af:90:04:a8:46:46:09:4e:ae:20:cf:ee:
58:40:8c:2b:ff:5b:61:4a:0e:2d:2b:17:25:55:f6:
68:ba:0e:66:1e:f4:0a:db:d4:a4:75:b6:3b:02:a0:
db:fb:10:7c:d0:45:42:cd:e6:2f:0f:c2:fe:a9:b9:
42:28:1f:e9:13:e7:86:83:f0:01:2a:45:28:e2:75:
1b:5b:21:0e:c4:b6:e3:9c:80:ee:48:9e:80:65:3f:
c9:64:bd:eb:d9:c0:c5:d3:79:2c:c8:a8:25:d7:e9:
c4:05:7c:5e:99:d1:04:ee:21:d3:50:41:5e:fd:69:
0f:8a:b6:b0:72:4c:20:51:db:3f:9c:7b:36:40:81:
1d:b7:8f:52:f1:a0:da:60:a0:f4:bc:fb:07:3e:b5:
9b:c3:b4:13:d0:f6:d3:d5:b9:b9:ad:16:5a:78:7f:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:19:31:8C:DB:69:23:92:A0:32:06:54:BA:FE:6A:BB:5B:0E:F1
X509v3 Authority Key Identifier:
keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:88:0e:fe:7c:88:33:a3:f4:47:be:92:22:ec:5c:6e:e5:44:
f5:62:a8:7a:ed:78:e4:e3:74:1e:da:f5:9e:2a:c2:32:df:0b:
c7:f5:f1:35:c3:18:29:69:3b:c7:93:10:5d:a7:14:4c:12:a2:
fc:cc:de:45:4f:c2:af:b2:3f:f1:15:d7:b9:c5:eb:c6:7c:21:
01:9c:07:9e:13:8b:bf:ef:a8:78:58:0b:73:b3:af:20:e5:d3:
58:cd:1a:fa:82:98:4a:e9:ba:59:79:71:ca:3a:1d:ba:83:a7:
1c:be:a7:84:57:fa:e2:b9:f1:b2:3f:46:e6:ab:8b:52:54:9c:
dd:f6:01:9c:26:bf:ee:bf:91:72:46:42:e6:21:50:7d:2f:fe:
9d:81:2f:3b:7d:21:56:37:db:83:67:2e:07:08:5e:41:83:6a:
f7:34:bb:24:61:73:d7:20:cb:bd:b6:aa:31:f4:f4:4a:3a:22:
b3:6f:9a:0a:67:99:b0:dc:4c:5e:97:21:c4:fc:94:d0:77:41:
e4:44:c3:bc:98:9a:d4:ba:a7:32:45:a6:49:a6:48:65:9e:06:
49:76:d7:18:2e:65:ba:ed:25:33:c0:15:63:b3:02:5d:9a:c6:
f4:53:8c:32:d9:a5:4c:cd:91:af:a0:23:2b:d9:b4:da:48:fa:
c7:8c:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:16 2025 by rpki-client