Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: q5DoywpoDZ0/FCJjVaQB7PKVmHj6jGU8v0szpYL2KgY=
Subject key identifier: 72:61:00:DA:00:67:63:8C:73:B9:0E:47:5B:D2:31:73:5F:EE:CF:63
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 019676E80303DCE4E26BA483BD0A624BABE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 11:00:38 +0000
Manifest this update: Sun 27 Apr 2025 11:00:38 +0000
Manifest next update: Mon 28 Apr 2025 11:00:38 +0000
Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: R8w16+6UKC9TILJPkEqSIJ9+Iiek8xS92k0Riho4hkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:03:03:dc:e4:e2:6b:a4:83:bd:0a:62:4b:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Apr 27 11:00:38 2025 GMT
Not After : Apr 28 11:00:38 2025 GMT
Subject: CN=726100da0067638c73b90e475bd231735feecf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:78:d0:c9:a0:33:f7:16:94:dc:71:e2:e2:
0a:35:1a:e5:13:3b:a1:ea:35:f7:8f:08:53:5b:de:
3e:e9:1e:7e:7c:6a:c8:9a:73:e0:e7:49:e0:e7:0b:
1b:86:a4:3f:6c:c4:ce:39:7b:fe:fa:97:9f:ba:03:
e9:05:5c:6f:9d:95:9c:75:87:3e:53:08:9e:22:43:
a4:80:cc:6e:24:dd:88:a3:80:a4:b0:a2:ee:37:d2:
3d:f0:0f:6a:e2:cf:ab:57:96:51:fe:18:a1:5a:ff:
a8:b5:a2:a2:56:1e:f3:9d:72:a1:d1:04:aa:8b:f8:
ad:18:43:b9:b3:6b:a1:50:26:ca:cb:91:84:9c:b3:
e7:16:7b:81:2b:d0:4b:0f:cd:55:bf:d9:92:46:97:
86:a7:9c:bf:f7:34:cf:d4:6c:e6:ff:3a:67:96:6c:
67:1a:f1:b8:ba:36:66:10:8b:de:91:48:ec:30:4c:
45:c2:8f:0b:07:e7:57:1f:67:28:0f:c8:23:04:fa:
6d:70:a4:cb:61:59:6d:75:64:12:23:77:fb:07:02:
b0:19:fa:51:a8:a3:cc:27:9f:fb:0f:9b:19:10:5e:
4f:57:bd:8f:74:f8:5d:71:40:27:64:67:5b:ac:74:
18:2a:cf:42:f4:b3:4b:36:be:80:77:83:5a:07:d5:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:61:00:DA:00:67:63:8C:73:B9:0E:47:5B:D2:31:73:5F:EE:CF:63
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e4:ad:76:ed:28:33:e2:bf:a6:83:bd:af:d8:01:d6:62:b2:
0e:b2:22:bc:39:1b:e0:b8:48:52:dd:45:68:f1:f3:1c:59:46:
05:19:61:91:90:51:d1:c5:47:dd:5c:72:20:55:68:47:49:72:
b1:f1:17:a3:eb:14:e0:8d:8c:b3:a1:ab:60:eb:d6:12:dc:43:
43:5f:59:1d:6c:5f:a5:e9:2b:04:db:b1:c0:a4:6f:3a:8f:bb:
75:b3:1e:5e:f5:31:14:6e:5b:ed:43:bb:31:6d:5a:c0:45:32:
1a:b0:6c:5c:a5:0f:84:c9:15:61:25:f5:68:fe:63:bf:46:f4:
17:ed:ce:0d:b6:21:52:0a:9e:2c:4d:c5:64:96:d0:4e:02:41:
2c:9a:41:5d:c4:4a:1a:ea:f8:f5:04:f5:7d:61:24:71:d6:56:
ac:d9:6e:a2:43:dd:65:60:6d:c0:3c:3d:46:7a:ec:e1:3a:12:
3a:e7:16:69:45:4d:96:0e:2a:3c:1d:78:b6:95:26:c6:56:a8:
68:e5:87:19:35:a2:b9:d1:bb:e4:62:f3:d3:97:2b:e8:16:4c:
95:e6:b7:7f:dc:00:ce:3b:b6:a3:4c:8b:0a:be:a2:42:1d:44:
53:fd:5b:d5:2f:2b:49:96:c0:73:36:c3:66:32:b5:b0:0e:13:
1b:22:55:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:58:29 2025 by rpki-client