Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: jZdl+OGxt1Crtd8bzf8XDr1Mf5mSTi9eiU6yDI0V2jE=
Subject key identifier: 74:3B:DB:E8:0E:40:85:44:6B:F9:A2:77:EE:CA:B8:F5:21:79:37:4D
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 0196748B7F213734F3FD5D0BF8A61DD8564C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 14A1
Signing time: Sun 27 Apr 2025 00:00:21 +0000
Manifest this update: Sun 27 Apr 2025 00:00:21 +0000
Manifest next update: Mon 28 Apr 2025 00:00:21 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: VYiQ3Qpi+1Vqm/BhYNeGtRiD2M1BGbWTJqOv+rrudfI=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:7f:21:37:34:f3:fd:5d:0b:f8:a6:1d:d8:56:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Apr 27 00:00:21 2025 GMT
Not After : Apr 28 00:00:21 2025 GMT
Subject: CN=743bdbe80e4085446bf9a277eecab8f52179374d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:7b:ba:81:ab:ae:f5:8b:bd:67:3b:9d:b2:
0a:57:4f:41:8f:8b:98:53:dd:41:1d:93:bf:ee:f5:
e6:ab:1f:dd:46:f3:94:f9:84:b9:dd:13:43:bf:4a:
75:d7:01:f7:fe:d9:5e:03:8c:01:1e:0a:c3:b8:a6:
76:11:85:02:c2:73:04:70:d3:ee:64:4e:8a:96:cd:
1a:16:bb:82:f1:49:5e:ff:b2:97:78:27:f2:73:b3:
86:4f:77:07:77:d2:e5:61:82:73:29:73:9f:9b:cf:
a4:cb:21:69:03:7f:76:12:93:19:4a:d6:b4:dd:34:
d5:ed:8c:4a:de:58:18:ec:d8:92:b4:d2:93:ed:8b:
21:bb:d5:d4:ca:ba:35:4f:66:19:5b:8c:64:10:0c:
00:8a:4e:08:de:ca:cf:ab:a1:06:66:04:40:4d:cc:
25:87:90:2c:c7:ec:83:8a:a3:1f:4e:4e:b6:5b:ce:
d5:57:e4:78:57:96:43:14:e1:f9:e0:08:3d:16:6b:
5d:30:a7:c4:84:16:5a:d3:61:c3:59:60:b3:4f:73:
58:e4:84:07:e5:69:1f:43:90:0b:35:43:9a:c6:b7:
dc:66:79:98:20:6d:d2:06:33:ba:c8:8c:cc:c2:f5:
e0:58:42:85:34:9a:30:cd:47:06:d5:75:73:c9:d5:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:DB:E8:0E:40:85:44:6B:F9:A2:77:EE:CA:B8:F5:21:79:37:4D
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:72:bf:c6:4a:c8:51:64:2f:4c:9f:5a:1a:ee:ab:b6:98:8c:
33:48:41:43:bb:b0:e1:35:10:a3:15:72:7d:90:e2:8d:9a:4f:
9d:52:62:56:e6:cb:26:b5:3b:cb:95:35:b8:9b:91:98:bc:1a:
c9:df:21:38:cd:bf:01:3b:d3:cb:7e:31:b8:f7:a7:07:01:70:
42:c1:7a:54:72:9a:7f:3a:ab:08:95:12:b9:78:ca:07:e5:aa:
32:30:52:8e:1a:a0:bf:8e:5c:4d:e6:6b:11:b5:48:15:27:8a:
02:90:36:c9:bb:63:ca:82:2d:3c:6c:e7:6b:56:a7:f3:27:96:
c9:83:af:ab:21:13:09:05:60:c6:7f:38:e8:04:cd:d9:58:49:
98:5e:e4:7c:5d:13:dc:24:39:32:19:c3:65:f1:aa:8b:b0:e8:
5e:dc:d5:b0:45:2b:c5:04:6d:fc:78:c4:1b:de:b4:98:7c:14:
b3:f8:02:21:91:d8:cb:87:14:bf:1a:ec:b9:50:bb:a2:cf:c3:
99:f9:bc:83:e5:a5:04:ce:13:9c:7d:1b:72:18:02:2f:6e:d0:
5c:01:79:97:98:2d:d2:37:bd:b3:b2:bf:5d:14:d0:27:4d:85:
d0:b6:84:13:79:b5:6c:f6:61:b5:66:cb:59:4f:0a:4c:47:dd:
a4:a7:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:19 2025 by rpki-client