Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: FH7fRIL5ZyHKiHGrFwD7+QJWeHPYIb3Vaj3WYKVtpzE=
Subject key identifier: 19:D7:2B:17:57:49:08:2E:9D:48:BE:35:AF:A2:A5:4A:C8:55:9D:0F
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 019677FAF2275D0C0F57E5EFA80D751EBE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 16:00:56 +0000
Manifest this update: Sun 27 Apr 2025 16:00:56 +0000
Manifest next update: Mon 28 Apr 2025 16:00:56 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: fgwBmG+jmbbtAaIpC000fkILw/oIdX8cOblM8YR73wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:f2:27:5d:0c:0f:57:e5:ef:a8:0d:75:1e:be:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Apr 27 16:00:56 2025 GMT
Not After : Apr 28 16:00:56 2025 GMT
Subject: CN=19d72b175749082e9d48be35afa2a54ac8559d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:b4:56:df:0b:b8:34:09:06:98:72:fc:3b:
0d:ca:2c:01:93:15:0f:ea:19:5a:3a:5e:7c:51:eb:
17:c0:cb:b4:73:a9:6c:10:0a:1e:e3:74:bd:a4:b9:
28:b1:46:d5:0a:c3:d7:d7:c6:20:db:f1:fc:5b:3d:
66:05:0d:23:78:0b:bf:69:e4:06:fc:93:5c:35:ba:
3e:34:15:33:5e:81:bf:2c:1d:ed:70:d8:c4:ec:74:
2a:5c:05:3c:d1:dd:8c:da:a9:12:9b:1c:89:5e:f1:
eb:ad:bd:b2:3b:e4:ef:67:7a:bb:dc:43:cf:55:63:
62:02:dc:0c:81:c7:ff:50:58:b0:c1:cc:bb:32:38:
26:2a:c6:44:53:f0:72:cb:a1:16:63:a0:cd:a8:1f:
08:d1:c4:02:9a:14:ca:84:64:13:14:20:34:f8:1a:
17:e3:cd:3f:a6:7e:5f:25:25:ce:49:7d:e8:a0:23:
3d:ac:86:70:7c:86:af:d5:e3:84:2d:cd:08:0b:19:
63:92:4f:10:9e:dd:4e:3b:c1:c4:33:89:d1:bc:5f:
06:6a:10:a6:0b:2e:cf:34:39:be:42:5a:8e:ff:d4:
32:f9:0c:6e:17:a0:ee:3e:01:85:74:44:1a:e5:5a:
9a:2d:52:70:28:66:d7:7a:3c:0f:9e:a4:1f:35:a8:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D7:2B:17:57:49:08:2E:9D:48:BE:35:AF:A2:A5:4A:C8:55:9D:0F
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d3:8f:a8:3d:8e:91:19:d9:25:58:02:5e:74:88:94:18:c8:
1f:af:fd:23:88:4d:ce:70:86:b5:b2:8e:12:b1:b2:24:8a:62:
cd:f5:6d:0d:b6:ab:3c:1a:c5:5e:86:17:19:d3:96:de:85:b2:
0b:06:ba:8f:f5:b9:34:9c:15:76:3b:cf:6f:05:da:83:00:94:
6d:c1:ad:b1:87:34:09:2a:5b:77:e1:25:83:87:15:ab:b9:c7:
f7:2d:0e:da:8b:1c:65:ae:e2:0c:70:1e:99:08:8a:a7:17:7b:
e1:b4:f5:d9:a8:d7:dc:e7:2b:d4:c8:7d:0c:34:fe:61:aa:ce:
b1:11:a6:53:16:06:54:f0:d3:16:c3:67:7f:ed:c2:a0:e0:b3:
d4:52:96:97:a2:95:91:47:55:86:f1:a4:71:41:da:0c:8e:50:
98:1d:4e:6e:16:03:c6:82:ae:ef:aa:7b:fb:21:ee:7b:16:12:
91:d1:cd:ee:eb:c7:2f:ab:5d:f2:e9:1f:41:e0:ef:40:ef:4d:
32:a1:19:e0:43:e8:b1:9d:02:7f:19:28:80:bb:8f:90:63:bf:
cb:18:f2:4f:9f:34:1b:5c:46:55:cb:31:7f:5f:de:04:8f:a0:
d6:1c:91:71:55:57:3f:4d:8b:d4:32:6d:2a:cd:fd:f8:df:46:
a6:6f:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:57:56 2025 by rpki-client