Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier: ZNJwzIuK8TsojAawXtr+bP2bi79xOmRnakSG4zdAOP4=
Subject key identifier: 00:DD:A0:BD:92:A9:CF:46:C7:63:43:01:72:FD:37:5B:61:6B:C4:44
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer: /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial: 01967BD8160A5564816730F911A946195099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number: 11E2
Signing time: Mon 28 Apr 2025 10:01:21 +0000
Manifest this update: Mon 28 Apr 2025 10:01:21 +0000
Manifest next update: Tue 29 Apr 2025 10:01:21 +0000
Files and hashes: 1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: 9oZNr8jcqPOqtXAAyNX3BjeAD2TOrsUJwKVfB4a1P/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:16:0a:55:64:81:67:30:f9:11:a9:46:19:50:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Validity
Not Before: Apr 28 10:01:21 2025 GMT
Not After : Apr 29 10:01:21 2025 GMT
Subject: CN=00dda0bd92a9cf46c763430172fd375b616bc444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:06:0b:8a:ad:fb:d2:12:5c:25:2d:e3:93:18:
86:76:97:20:47:7e:8b:35:7c:78:d0:27:9b:7b:26:
1e:7c:92:07:59:e2:14:34:3e:52:c4:93:c2:ab:fa:
7a:c6:bb:bc:cc:4d:c7:79:ca:ae:71:00:bf:17:0a:
af:d4:91:9d:ce:0f:52:05:93:b7:28:73:cc:80:26:
5f:41:9a:64:cb:df:a2:b1:2c:fd:c8:dc:53:83:c5:
be:58:3c:d7:e9:c9:2d:54:94:08:de:eb:4b:c6:48:
be:ea:03:60:45:d5:e3:c3:47:77:ff:fe:eb:ae:c8:
1a:be:51:5d:c1:b0:f4:67:4c:53:a9:26:31:a2:1c:
a4:71:e7:35:20:c8:b6:60:7a:40:f6:a0:5f:e8:f2:
e8:d7:79:73:f8:85:0e:87:05:df:c7:00:93:d8:29:
c8:ac:4a:32:b7:b4:69:73:f7:7a:d6:e5:ba:ae:90:
64:94:3d:1f:53:81:1b:e1:af:02:8f:31:e6:91:1e:
7a:7a:eb:15:da:f5:4e:95:c7:90:83:ee:11:c8:0c:
d9:b9:c9:66:72:21:82:c6:7d:56:78:3b:c3:e2:12:
a1:6e:d7:9a:7b:6f:a1:c9:f9:44:24:0d:a7:30:69:
7f:71:57:29:e9:e8:b8:8e:77:8e:e1:61:eb:fd:64:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DD:A0:BD:92:A9:CF:46:C7:63:43:01:72:FD:37:5B:61:6B:C4:44
X509v3 Authority Key Identifier:
keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4c:7e:70:00:79:c9:16:14:30:04:8f:db:f1:f1:5c:d2:84:
96:c6:90:cf:6e:6b:06:ca:6c:a2:dc:8a:d4:60:6e:5e:50:c5:
36:20:c2:b4:71:c7:a5:28:a0:4c:62:7b:a1:e2:02:17:00:83:
69:c5:14:48:e1:ec:fe:f9:41:c2:41:1e:5c:5a:69:ee:af:39:
85:98:82:67:f9:a2:fd:84:89:be:16:66:9e:e2:a6:ca:bd:4c:
12:49:83:03:49:67:6e:a3:62:26:95:60:2c:d4:b8:14:f1:69:
9d:08:69:21:9b:6c:cc:34:ee:86:0b:52:ee:b9:5e:f6:28:f0:
3a:eb:27:91:50:b5:97:69:46:36:42:a5:a3:cb:10:75:68:16:
02:81:58:6a:0d:da:87:84:85:b0:db:e7:91:46:ec:02:60:33:
c6:40:2a:1f:7d:39:19:b8:1d:b7:cf:15:0f:4a:f5:df:f3:96:
45:be:a7:c9:2a:47:8a:78:e7:81:6d:20:ec:1f:5b:02:cb:6a:
55:f9:82:b5:80:d0:96:5e:54:d7:15:f9:9f:48:22:32:f7:8d:
6f:33:0d:e3:5c:2f:54:51:7e:44:ed:bb:58:b4:8b:f6:52:5b:
47:ca:d5:b3:ee:3d:1a:d4:b5:3b:46:a9:e6:06:dd:0c:ea:ad:
cb:76:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:25 2025 by rpki-client