Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: nF+MUY8sePlSfC0zOIfgNQf7/xUQF2LFfTlFFGwemBU=
Subject key identifier: 2F:B5:D5:8D:30:B4:0A:76:28:71:45:FC:4B:7A:06:EC:B3:4D:60:B5
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 0196AA3055FCF54012E520C915CAFB6ED5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 1525
Signing time: Wed 07 May 2025 10:00:16 +0000
Manifest this update: Wed 07 May 2025 10:00:16 +0000
Manifest next update: Thu 08 May 2025 10:00:16 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: hR0oFWbwggCw/qc2f5e07V5dVGaqiJOPIiouXZxiN1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:55:fc:f5:40:12:e5:20:c9:15:ca:fb:6e:d5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: May 7 10:00:16 2025 GMT
Not After : May 8 10:00:16 2025 GMT
Subject: CN=2fb5d58d30b40a76287145fc4b7a06ecb34d60b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8a:08:f6:b4:5e:8f:41:36:36:6e:aa:fa:5f:
26:3d:6e:82:ab:b8:12:0e:d1:c4:77:d3:9c:ad:fb:
19:7a:73:53:f7:50:24:a3:0b:5b:b0:38:b4:cb:7b:
55:39:af:3f:86:48:56:5d:a0:3b:8b:ad:8c:ef:bc:
a3:45:bb:b5:84:3a:20:1c:12:90:de:cb:d5:c7:3d:
ed:67:19:33:30:4f:a8:89:d9:d1:be:f8:a9:12:94:
91:c3:c4:d0:2a:0a:b5:e9:06:ed:fa:30:a5:34:f2:
7e:0b:7f:7b:14:b6:9e:fa:3f:a5:90:44:9c:82:ee:
e5:68:c7:55:16:22:35:b8:41:32:9b:31:99:c2:00:
8c:e9:4e:27:30:82:9e:e0:69:03:5a:5c:7f:32:29:
25:53:a1:83:a1:a6:42:b1:d9:39:7f:02:fa:5c:92:
41:af:7e:34:19:70:aa:9f:18:2f:8e:49:ec:ab:33:
b2:f2:1a:a3:37:ce:b2:19:95:03:b7:42:eb:5d:43:
d0:0c:64:ec:cf:fb:ef:81:0c:bb:27:9b:64:b5:ba:
d5:78:13:c7:75:5e:94:18:41:2c:91:d2:d9:be:4b:
9e:d6:7e:c0:45:e2:5a:f5:f5:00:fe:60:8a:7b:63:
c9:c2:ba:d8:61:ab:38:67:cc:16:82:65:54:8b:b7:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:D5:8D:30:B4:0A:76:28:71:45:FC:4B:7A:06:EC:B3:4D:60:B5
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:16:9b:be:18:26:0e:24:3d:13:e2:0a:06:d1:e2:10:15:
28:4e:96:78:e6:21:d8:0d:83:15:15:14:53:4e:48:08:6a:5c:
75:85:07:83:1d:31:64:3d:36:96:f9:d9:89:3f:31:f5:fa:d9:
ed:68:76:1c:6d:43:c3:9d:60:a6:52:fb:26:30:19:45:5f:1f:
fd:fe:b2:46:2a:7d:f1:43:57:59:4b:fa:ac:2e:19:d0:9e:ab:
e8:71:c3:ec:59:85:33:60:bc:42:16:34:5b:91:ec:25:71:c6:
dc:00:22:3e:c3:fd:11:6f:bc:fd:5c:ce:3b:27:34:e6:53:d3:
f2:73:ee:b0:e7:4a:a2:c7:9f:da:8c:b0:56:39:94:4d:47:14:
89:62:49:3d:53:c9:ad:dd:f0:ff:81:cf:5d:db:26:d3:54:f2:
40:2c:73:6c:64:04:34:15:7c:32:7e:1f:5f:9b:f4:48:03:18:
a8:fd:e5:53:d5:3d:a5:ba:96:ef:7e:03:75:8e:af:73:79:53:
aa:1e:cb:fb:aa:c4:c2:42:fe:61:d2:d8:59:24:a7:91:16:c7:
d5:52:ef:4f:a8:c3:9c:51:4d:d5:83:c2:4e:ba:31:9d:93:da:
55:d0:61:73:57:1b:d0:56:19:27:28:a5:24:19:59:b8:68:04:
0c:9e:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:25:39 2025 by rpki-client