Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File: GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier: 9pukx0EIPSTJZWRqS+yl9SdXrJ1zrYekJa4iWADomcA=
Subject key identifier: 7E:87:14:91:88:32:84:25:70:76:C5:48:E3:02:38:B7:35:C5:52:5A
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer: /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial: 0196BC36F5F9729ABF851BFB00F1678C43DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 22:00:40 +0000
Manifest this update: Sat 10 May 2025 22:00:40 +0000
Manifest next update: Sun 11 May 2025 22:00:40 +0000
Files and hashes: 1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: mlKJ1Y+lCH1naNv+0J9ZvpT8hFGcEdJPmSw7HrGxXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:f5:f9:72:9a:bf:85:1b:fb:00:f1:67:8c:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Validity
Not Before: May 10 22:00:40 2025 GMT
Not After : May 11 22:00:40 2025 GMT
Subject: CN=7e871491883284257076c548e30238b735c5525a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:c0:7c:ae:07:5a:3f:ac:e5:72:7d:9b:42:
df:91:30:7e:0a:a6:15:3c:38:a1:e1:5d:c5:15:d5:
da:84:9d:38:42:fb:9f:12:8c:16:25:7e:c0:3b:06:
02:2c:fd:03:0e:54:6f:58:c3:d2:99:e4:5b:b2:95:
8d:09:d9:bd:c1:de:3e:ab:d6:1a:ef:13:e5:22:fb:
98:ce:87:8f:89:5d:83:dc:f1:8c:a3:85:a5:fb:04:
15:cf:7f:0a:ea:13:ad:2f:65:23:04:e4:b7:0c:d9:
88:87:b9:6f:ab:89:26:6f:0c:86:41:29:43:c7:6a:
0a:74:31:19:c8:b5:73:91:24:89:78:82:aa:68:51:
61:2b:83:c4:68:fa:60:9d:d8:d5:e5:de:95:91:b9:
7a:eb:46:7c:6f:43:75:70:bb:78:2b:3f:2f:bd:44:
d8:8f:06:13:d0:c9:d3:76:18:ac:2f:73:62:7c:59:
6a:a4:3d:27:a3:fc:e6:ce:d0:0d:7c:e7:43:8c:60:
c4:a1:04:61:58:dc:20:5f:da:5c:23:38:20:8a:b6:
0c:62:70:70:26:0d:cf:f1:f1:da:b8:ee:02:9c:71:
2c:37:8d:10:0f:0d:a1:74:03:9a:0c:1e:f9:b0:e4:
04:5a:c6:70:db:f3:68:d6:ae:4c:b1:a7:b4:33:9b:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:14:91:88:32:84:25:70:76:C5:48:E3:02:38:B7:35:C5:52:5A
X509v3 Authority Key Identifier:
keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8f:9c:a5:57:72:ab:76:b8:c0:48:85:ef:2a:ac:d4:32:d4:
c9:70:0c:77:2d:a1:d4:96:48:36:3d:d9:72:de:18:0d:56:c4:
bd:19:8f:64:03:d6:ef:2e:85:b9:1f:5c:fe:17:e9:f2:10:05:
e1:09:0d:cf:5f:ac:fd:d2:6f:46:cb:59:f7:70:43:f1:ff:c8:
d0:2d:e6:a9:2c:e3:64:7d:87:4c:34:e5:f9:c4:3c:14:68:55:
17:7a:f2:ea:24:2e:bd:2f:05:e0:07:73:dd:bd:51:bf:b3:c7:
4f:88:1a:55:89:0b:82:f3:81:18:c9:38:c6:8e:a6:6a:dd:d5:
f9:b8:eb:24:d8:0c:cc:db:33:e0:1a:d3:b4:1e:36:f3:34:d3:
10:29:43:ac:e3:42:d7:ab:ce:0f:a4:c8:41:15:4a:1f:03:82:
8a:7f:a8:26:0d:70:f2:c5:8e:96:d6:41:7d:64:fd:51:e0:66:
17:3b:d3:6e:5f:61:6c:a7:ad:e8:59:f8:5d:d3:a3:66:17:5e:
eb:29:d3:35:8f:8d:fb:f1:91:d8:6f:96:bc:90:10:54:4e:36:
57:4f:4c:30:ed:03:cb:05:7c:c2:ee:26:9c:34:10:ab:0b:ca:
9f:e0:26:6a:33:c5:4c:7c:9f:99:d1:ed:4b:24:e5:2c:f8:2b:
3c:a4:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:16:59 2025 by rpki-client