Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File: k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier: Y3YiwlsdHdXUYLAATRbQJvqVmsMnzU3jvtVL9RpG//8=
Subject key identifier: 5F:5D:C3:C4:67:83:9C:99:91:4B:D6:3A:AE:85:15:53:97:D8:36:53
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer: /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial: 01968BB8B3FD30F46F6FB022E73C500FCF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number: 0CE4
Signing time: Thu 01 May 2025 12:00:59 +0000
Manifest this update: Thu 01 May 2025 12:00:59 +0000
Manifest next update: Fri 02 May 2025 12:00:59 +0000
Files and hashes: 1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: QYHms46jpfsRerEoqwu0Y5MdCnjwhVNI2mgwAAP3ROU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:b3:fd:30:f4:6f:6f:b0:22:e7:3c:50:0f:cf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Validity
Not Before: May 1 12:00:59 2025 GMT
Not After : May 2 12:00:59 2025 GMT
Subject: CN=5f5dc3c467839c99914bd63aae85155397d83653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:c0:19:2d:57:56:cb:85:39:06:c2:7f:7b:
dd:bf:51:37:06:d5:16:79:fe:49:23:c0:49:8a:0a:
53:c3:5f:17:4d:75:4f:be:ea:55:83:b0:5d:7c:be:
50:16:52:66:c0:ee:c2:c9:7d:91:80:69:ce:5b:c3:
ac:22:eb:e8:a8:38:ce:22:b8:0c:42:c7:13:9a:32:
81:a6:52:18:64:e4:ad:ef:96:ad:8f:77:be:89:36:
7c:44:c2:27:f6:2b:f7:bd:f7:b0:0b:a4:a5:6e:18:
61:45:35:35:55:20:e3:24:e1:af:69:2b:9d:3b:bc:
cd:f8:b9:5a:2a:a2:34:bc:ef:ab:3b:73:6b:ea:cf:
32:3f:ca:aa:02:ba:b5:70:e0:91:78:32:cf:7e:be:
68:d2:c2:30:5c:94:8c:11:9f:f5:70:2d:85:ea:e6:
f4:a2:7f:97:c0:a9:5a:7e:21:ac:b0:e6:33:53:12:
52:f9:e6:2a:7b:d4:18:9b:81:b1:40:ec:9d:77:04:
6c:fc:70:0c:6c:d5:1a:5d:f9:8d:e8:51:87:a0:aa:
cc:73:c6:df:be:1a:97:79:7e:27:dc:99:5d:80:9d:
59:31:e2:02:08:fa:a2:fd:98:ef:04:31:7c:bb:27:
b1:25:95:63:7a:3d:3a:92:e5:a0:68:de:d4:ce:34:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5D:C3:C4:67:83:9C:99:91:4B:D6:3A:AE:85:15:53:97:D8:36:53
X509v3 Authority Key Identifier:
keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:7f:76:d5:2f:02:c4:6d:8b:bb:e1:46:10:a2:f4:d8:b6:
f1:5a:00:5b:c4:0b:d3:0e:36:22:92:79:13:02:79:91:f8:f8:
1a:de:55:9b:21:f7:ea:a2:27:96:e6:de:ce:c4:cf:58:16:93:
d5:34:92:31:2d:9f:22:11:29:fe:0b:9f:86:f8:00:6b:a2:fd:
db:d1:7a:66:c4:41:2a:71:75:37:8d:97:96:20:0d:31:de:7e:
79:b3:8c:44:c4:63:d1:87:85:22:b1:f9:d9:da:5e:03:82:0c:
66:a9:81:4c:92:3a:00:8d:a5:6d:5c:40:ba:9c:46:1b:16:f1:
b9:c8:55:b3:ca:ea:13:67:32:bd:94:bb:1f:ca:0e:92:8d:49:
11:92:50:27:c3:3d:2d:95:1a:17:27:ef:ed:cc:f9:9b:1d:83:
9f:3c:7d:d9:28:48:d9:13:41:54:80:28:cc:34:77:67:4e:76:
12:f5:a4:42:6c:17:7d:4b:a4:8c:83:a6:71:15:9b:0c:06:d6:
74:81:94:68:e7:0b:9e:7b:51:2d:06:89:2f:1c:2c:75:bc:97:
74:57:fc:ad:ec:b0:9c:aa:a0:e6:80:53:7f:1b:23:fd:8e:51:
e2:95:b5:75:99:e4:85:2d:e4:77:06:d8:23:06:13:7a:9e:7e:
7a:32:51:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:29:10 2025 by rpki-client