Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: dPH85WtjpH6+DZ7I/JGpl9XN9e+bGmmzYZn7W37EtR0=
Subject key identifier: 5B:9B:50:F4:A3:4F:6E:67:4C:32:70:DD:C2:6E:19:5E:AB:A4:D6:B7
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 01967679CC9D27AADE51096EBD133B11A0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 14A0
Signing time: Sun 27 Apr 2025 09:00:15 +0000
Manifest this update: Sun 27 Apr 2025 09:00:15 +0000
Manifest next update: Mon 28 Apr 2025 09:00:15 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: kipG7XR5t3/sToGRYqKk7ukgzGtG1nsGWU0jousLZz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:cc:9d:27:aa:de:51:09:6e:bd:13:3b:11:a0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Apr 27 09:00:15 2025 GMT
Not After : Apr 28 09:00:15 2025 GMT
Subject: CN=5b9b50f4a34f6e674c3270ddc26e195eaba4d6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:59:97:10:45:bb:98:b4:37:b6:d3:59:89:
b8:75:11:d0:a6:9c:cd:95:58:d8:50:5e:21:92:1b:
21:12:ed:9d:99:f6:bb:c3:40:89:24:b2:c1:53:bb:
4c:a8:3f:45:36:18:8d:f6:cb:38:5f:4d:53:a6:bb:
f0:cf:f0:5e:eb:d6:6a:f3:59:24:c4:d2:6e:c2:27:
87:71:4d:ee:b6:d8:68:53:65:eb:5c:0b:ed:a0:63:
63:a8:24:a9:9b:64:e2:70:d3:89:71:58:d1:c7:af:
31:5d:40:4f:0d:5c:b6:0a:81:b5:f7:c4:99:6f:22:
e4:1b:d6:f2:b4:db:c6:00:14:b8:70:49:c2:e7:a2:
56:c9:71:95:09:26:dd:54:6f:54:f8:9f:93:e0:a2:
c8:31:2d:2a:f8:af:f7:0e:ad:da:24:9e:30:2c:97:
eb:1a:53:c3:92:49:5e:3f:6a:7c:dd:9e:2e:c0:c8:
a6:ee:15:83:62:1c:a2:19:14:09:b7:48:9d:76:73:
0e:c6:e4:aa:bb:03:6b:9a:79:01:7f:47:f1:cd:23:
9c:da:e7:09:fc:44:cf:22:85:91:fc:ae:46:c2:ed:
c4:45:41:eb:91:63:3b:7c:97:47:13:88:2b:78:06:
55:dc:b7:95:7d:6b:3a:37:2a:1b:38:fb:b6:14:10:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9B:50:F4:A3:4F:6E:67:4C:32:70:DD:C2:6E:19:5E:AB:A4:D6:B7
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:16:39:75:f0:16:4b:07:98:2d:fc:e5:91:b0:5a:2e:66:62:
eb:2a:45:d9:29:2d:63:99:b6:68:47:8c:4d:f0:39:44:07:20:
4c:d8:53:08:0e:6d:a6:69:80:3a:e0:75:ae:38:10:b0:54:a2:
95:50:75:f4:e8:71:e3:60:c6:48:2a:58:99:c4:27:82:2d:99:
50:ae:06:3e:37:ab:58:6a:03:6c:de:9a:d3:49:63:cb:81:0f:
8e:8e:2c:96:7b:1d:50:2b:1e:6c:bc:1b:31:ed:b8:e1:70:8a:
65:27:91:2f:c5:fd:0e:80:a1:d1:12:80:12:05:bd:a3:b2:c0:
81:3a:c8:78:ae:ab:34:1b:ac:bc:08:ff:d8:f0:c5:25:b9:af:
49:75:3d:65:e7:5c:79:f0:1a:28:f9:f9:79:1c:f2:fb:42:d5:
7e:24:03:e0:c8:48:3f:70:e1:ed:69:76:f6:3b:27:d7:5d:a3:
99:c5:68:fb:94:c0:bd:a3:c4:73:50:b0:ad:e4:11:0d:14:26:
df:a7:00:ff:98:be:04:1e:a4:4d:5b:6e:fe:02:c2:e2:7a:3f:
f1:2c:d7:0c:79:c6:4e:b0:eb:bd:43:ba:33:92:b5:f3:4d:8b:
e0:dd:a0:aa:86:b3:18:c5:ea:74:bc:d9:77:0e:4b:c4:6c:2f:
fc:2e:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:46:45 2025 by rpki-client