Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: 2rHsO3hcjlcACosU7YT0t2o3VqIyQ+L3xZd8vClH4t4=
Subject key identifier: 27:16:FA:67:6F:6D:2B:A9:6D:FB:95:D1:22:E5:11:74:94:E2:73:B7
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019680C730E406BD2533FF3DC3A845E7AF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 20
Signing time: Tue 29 Apr 2025 09:00:59 +0000
Manifest this update: Tue 29 Apr 2025 09:00:59 +0000
Manifest next update: Wed 30 Apr 2025 09:00:59 +0000
Files and hashes: 1: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: VJT6d6SEmmcq7Jj+rQ4YHRXC0a2uz3FJhygDnJuyM8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:30:e4:06:bd:25:33:ff:3d:c3:a8:45:e7:af:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Apr 29 09:00:59 2025 GMT
Not After : Apr 30 09:00:59 2025 GMT
Subject: CN=2716fa676f6d2ba96dfb95d122e5117494e273b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:6e:25:be:13:d9:67:0e:e8:a3:b4:7f:ab:
59:10:ce:4c:2a:7d:0b:37:59:e6:ef:7c:04:ec:9a:
72:ed:18:ba:8b:c6:04:4d:ff:eb:54:d5:0b:9c:d8:
d7:4d:a3:df:a6:77:11:ac:11:84:1b:85:f0:35:df:
57:4e:b8:4c:92:19:38:77:a4:af:52:56:c1:3e:4e:
6d:3c:d9:9e:85:21:35:b7:9d:63:d3:69:77:6a:fc:
9e:09:9a:3d:95:7f:55:2c:46:ab:0f:87:92:9d:0c:
cd:01:3a:d2:b2:82:54:97:d0:fa:7d:bf:07:87:4a:
1a:a5:72:5a:4b:79:11:fa:4c:6c:7e:d8:a0:3b:72:
70:7d:cd:37:f7:d2:4a:2c:84:81:86:49:cf:fc:97:
a2:85:34:67:e3:3b:87:d7:08:5f:44:8d:ac:e9:e7:
c7:27:63:1b:52:38:e4:99:77:c5:9b:1c:0d:2b:bf:
95:5d:58:db:1f:9a:5e:59:24:cd:5f:60:65:3d:a3:
a3:19:51:74:ab:06:dd:03:51:a0:9c:50:b5:81:bc:
8f:36:62:42:a7:25:68:21:63:f3:56:0b:c8:49:35:
fb:47:5e:3a:c3:57:58:a8:34:5f:ab:f8:92:ca:9c:
7e:63:3e:da:a2:4f:c3:d4:ff:fc:c8:57:9a:41:73:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:16:FA:67:6F:6D:2B:A9:6D:FB:95:D1:22:E5:11:74:94:E2:73:B7
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6a:b4:09:eb:b6:c9:2a:65:a1:1f:58:41:ee:c7:65:d3:3f:
51:93:ee:f3:5f:de:d7:e0:56:87:be:8f:f4:72:2b:e3:40:c5:
f0:a7:96:c3:1c:15:92:96:0d:83:75:81:e2:a5:2e:09:36:ca:
76:0b:f7:78:40:bd:2c:d6:f9:e5:8a:71:83:33:d6:6c:b4:3d:
bc:70:72:44:e4:57:64:e4:6a:f9:38:de:a6:87:7e:61:84:1d:
c3:cc:9b:8c:24:a4:74:5e:90:eb:f0:27:47:f0:84:ed:cc:60:
ad:b7:7a:16:48:e1:f9:5f:88:27:00:ae:9e:6b:c9:41:d8:40:
9f:6b:cd:18:0a:12:8d:35:f0:8d:5a:d9:34:d4:b9:84:4e:9f:
5d:3a:2c:9d:b8:0c:7c:5a:ea:e8:2b:68:85:29:6a:e4:9c:8e:
16:56:9a:17:b4:dd:8d:7c:a6:79:8f:9c:87:c9:03:83:40:f8:
25:28:30:95:28:f1:c1:ba:d1:e9:bf:0f:fc:45:cb:80:80:95:
69:84:c8:8f:60:69:b7:97:87:df:e9:d0:0e:3d:86:4a:d3:b2:
b0:9c:92:29:eb:3e:4c:49:9e:af:72:93:8a:4c:1b:0d:68:5b:
1e:0f:8f:78:03:f6:80:5f:67:df:9c:8d:a8:3c:2f:ad:dc:9b:
aa:d0:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:36:13 2025 by rpki-client