Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: B4v8iouph+zakMpSCcSz24lNmcDYaj+YD1sIWGMo0CU=
Subject key identifier: 15:06:22:B8:20:6C:6C:AD:9B:D7:23:FA:95:42:36:12:EB:83:1B:06
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 0196760D178A83BFFE92A5416A3400B9CAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 07:01:31 +0000
Manifest this update: Sun 27 Apr 2025 07:01:31 +0000
Manifest next update: Mon 28 Apr 2025 07:01:31 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: mgXL31Lv34IkG8WV1fSwS7w2Hl9JSyMVNrwt2pK2+EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:17:8a:83:bf:fe:92:a5:41:6a:34:00:b9:ca:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Apr 27 07:01:31 2025 GMT
Not After : Apr 28 07:01:31 2025 GMT
Subject: CN=150622b8206c6cad9bd723fa95423612eb831b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:a8:22:5b:5c:f1:75:98:4b:04:6c:ec:4a:
3c:71:c0:f2:d8:33:dd:8e:79:97:9c:e9:25:c6:93:
63:a7:02:53:a8:bc:6d:34:1a:1f:3c:fc:2b:d6:4c:
f1:cb:42:44:b5:89:ee:86:d3:b1:b8:a4:cb:bc:13:
9a:bb:53:89:d9:65:fe:6c:91:a3:9a:8b:83:ca:83:
ec:65:4c:ce:c9:c2:5f:ad:30:3e:dc:dc:93:a0:69:
a4:3b:2f:b1:a1:56:2a:13:95:67:38:be:f2:11:bc:
bb:5b:a7:05:27:5a:8b:a8:84:fc:db:d7:22:98:d9:
39:68:6b:37:8e:8c:3a:d1:7c:30:73:b0:6f:b7:6a:
de:e4:7c:e7:c0:c0:45:e2:77:54:5d:a9:b4:b8:2b:
0f:ec:8c:a7:69:f3:6c:33:af:73:5f:48:79:ef:00:
34:6b:20:46:ba:c5:cb:fe:43:74:3d:13:f0:37:78:
6d:42:e0:ed:a5:b0:5f:8b:7d:2f:b9:be:5e:06:a8:
52:68:49:7e:d3:45:b6:94:f0:f9:ca:31:c9:33:cc:
a6:cc:5f:23:90:a0:5c:50:0e:88:73:be:98:7e:ac:
d3:aa:1d:49:c6:84:a3:b4:71:e1:49:f9:e0:13:72:
52:ef:10:a0:f8:6f:ce:bf:8a:6e:0f:53:2a:46:ab:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:06:22:B8:20:6C:6C:AD:9B:D7:23:FA:95:42:36:12:EB:83:1B:06
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:40:55:61:28:d3:e9:74:a9:4c:91:8c:dd:09:4e:6a:55:
5f:5c:46:81:fb:1a:6f:ef:0c:3b:39:90:c3:21:0d:48:52:45:
a2:fa:00:ec:06:ed:ab:3b:d6:c7:03:89:05:27:fd:82:ae:07:
b0:2f:fc:df:9d:3d:29:d2:71:82:dd:08:3d:d3:57:03:9e:18:
33:e0:58:d8:af:f2:f8:98:d7:a4:ab:64:b0:b9:a5:df:11:2b:
f9:9f:11:dd:ab:9f:77:d2:d8:28:dd:79:31:49:1e:b7:1c:11:
68:2b:b0:e2:db:9c:08:9a:84:9b:b8:d6:fb:b6:b7:8f:2a:50:
7f:44:74:03:a0:77:3d:57:09:ef:00:82:91:87:86:f8:3d:71:
cc:2d:d3:38:6b:a9:09:1a:a2:d8:8e:60:0d:5d:54:52:5c:0a:
a5:0d:ab:12:5b:cd:5a:fa:37:59:21:f6:0a:87:3c:8c:4a:8b:
15:c6:93:d2:57:fa:e1:4b:84:bf:27:43:d2:5f:a3:85:d2:99:
2c:8a:9b:08:50:cc:22:3f:56:4d:de:19:e0:96:41:f4:7f:bb:
bb:bc:75:3d:91:94:fd:3c:13:64:b1:6a:1c:f3:1b:6f:28:68:
8c:99:c6:9d:88:38:79:38:10:18:12:8c:05:ad:11:67:22:ac:
b5:7f:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:31 2025 by rpki-client