Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File: G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier: rz7rQfL7LpM6hb4gfTpcMXVkCKRlGI5bUme7Ps3VvQI=
Subject key identifier: 68:E9:59:72:3F:36:BD:09:2B:ED:74:B0:67:84:A3:FA:F7:6E:BB:68
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer: /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial: 01967567D7C7670F9881BE197C40ECF6C97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 04:01:01 +0000
Manifest this update: Sun 27 Apr 2025 04:01:01 +0000
Manifest next update: Mon 28 Apr 2025 04:01:01 +0000
Files and hashes: 1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: dj5vlLcRg45uV8eWS1xf+1RpB5UCeuyJ+CRH8EEN6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:d7:c7:67:0f:98:81:be:19:7c:40:ec:f6:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Validity
Not Before: Apr 27 04:01:01 2025 GMT
Not After : Apr 28 04:01:01 2025 GMT
Subject: CN=68e959723f36bd092bed74b06784a3faf76ebb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:68:70:e5:f4:df:87:32:4e:9a:54:43:06:
92:e3:6a:20:f4:ce:e9:bd:9e:e7:a9:54:6d:5b:e5:
38:de:89:95:0c:a7:de:1a:cd:de:b1:7d:62:ab:03:
4a:53:b0:dd:3e:52:00:7c:72:b2:e1:01:d2:cc:47:
18:f8:87:69:df:9c:76:dd:e7:8b:c5:e0:f4:0a:69:
5e:55:9f:6a:91:d9:72:64:56:40:07:44:3e:35:86:
d7:40:31:fd:41:08:1a:c3:ef:8d:ab:29:c6:5a:a0:
6a:b9:5c:d1:7b:84:c7:15:26:5e:6d:6a:36:06:37:
01:61:e8:18:16:c0:8b:69:b5:1f:04:fe:3f:b0:65:
e2:3e:91:1c:d2:03:16:f0:5a:48:ed:82:94:1f:09:
6f:b0:48:93:94:ab:db:aa:6b:83:1b:82:10:d5:e7:
a2:01:18:83:1e:7e:6a:7e:06:02:ac:55:84:39:19:
5f:a7:ee:2c:5b:16:fc:7d:e9:d3:f5:41:c5:f8:77:
86:65:0f:6c:fe:18:0a:d9:71:c2:cb:54:7f:5d:ec:
eb:83:aa:7f:90:b1:c4:b1:f7:20:ee:73:21:de:5e:
78:f1:6a:a8:82:60:73:f1:4a:8a:33:36:16:73:d0:
7e:d0:96:b5:68:4a:67:22:32:c9:0b:04:fd:f9:ef:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:59:72:3F:36:BD:09:2B:ED:74:B0:67:84:A3:FA:F7:6E:BB:68
X509v3 Authority Key Identifier:
keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:d8:24:8f:55:4a:81:b3:5c:de:fc:18:79:cc:d5:15:be:
f7:83:7a:f3:46:08:63:f9:9f:94:6f:d5:7b:26:dc:f0:4c:02:
99:fd:cb:58:4a:d7:2b:d0:05:76:20:8a:d4:3a:86:e9:7b:dd:
fb:84:68:88:a1:73:8c:e6:08:d0:d0:c2:69:eb:06:46:d8:49:
21:07:f8:79:50:68:6a:af:a8:55:2a:36:82:63:8a:84:b9:51:
eb:b3:e5:d0:3c:4e:81:55:41:fa:1d:3a:10:9a:bd:45:80:2d:
f5:38:8a:7a:03:8c:83:d8:ba:c3:52:3d:33:0a:e3:df:30:9b:
5f:6c:f0:b3:be:ce:a5:e2:3b:a5:14:f1:71:07:e4:48:30:2e:
e7:43:fa:d9:e2:9d:35:68:84:f6:d9:c5:57:30:bb:d4:52:ba:
c5:62:76:ea:f7:0d:92:e4:7c:a2:23:ac:86:d4:1e:1a:13:b0:
86:2a:1f:df:18:26:de:08:a0:21:5a:d5:ed:63:0f:5e:60:ec:
20:51:34:a7:a8:da:ab:40:04:0b:ab:82:a7:94:5f:ec:d6:53:
04:bd:0a:f6:c9:95:e5:bc:f7:33:17:a4:94:14:a5:51:48:9c:
91:13:4f:c1:ed:dc:0a:6e:f5:30:98:de:4c:e8:ff:fe:cf:74:
22:a5:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:18:35 2025 by rpki-client