Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json)
Hash identifier: TTn8vxwPc3/fTVfnv9JdsXKM7/H1/yNFglQeGxoIVpo=
Subject key identifier: 68:9E:CC:AD:13:EC:6E:A8:52:9E:70:52:6D:B8:18:FF:1D:58:9A:A6
Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Certificate serial: 0196760D13FB3D6A2F0097017E5B53FBF1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 07:01:30 +0000
Manifest this update: Sun 27 Apr 2025 07:01:30 +0000
Manifest next update: Mon 28 Apr 2025 07:01:30 +0000
Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: Op0Z+CpkwFSq5cUsERWIDFv5UU37DXs5yQFIS9lthc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:13:fb:3d:6a:2f:00:97:01:7e:5b:53:fb:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Validity
Not Before: Apr 27 07:01:30 2025 GMT
Not After : Apr 28 07:01:30 2025 GMT
Subject: CN=689eccad13ec6ea8529e70526db818ff1d589aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:4e:0d:cb:c2:6f:d9:fc:b7:a7:71:78:32:
4d:73:09:61:59:b4:66:a0:d3:c4:44:5c:34:4f:2c:
01:5d:fe:fe:52:94:af:42:bd:77:45:d4:d1:4f:47:
d5:1b:8b:14:f7:55:a2:07:09:a4:02:d1:c8:a6:bb:
35:dc:ce:b0:c9:4e:f2:65:d4:f4:b2:bf:32:62:13:
cb:e3:65:41:11:45:f5:0d:1f:fc:a5:48:e8:59:2c:
d8:6d:83:0e:a6:40:f2:8f:8d:09:e3:83:1d:3d:4d:
09:ff:60:e2:a4:71:01:8b:09:73:e3:fe:0c:ab:92:
9a:a1:04:d8:bf:be:3a:01:d8:8c:d5:fd:58:9e:19:
6f:b1:44:cc:cc:32:6a:5f:8c:cb:bf:37:d7:6a:5c:
b2:e5:25:99:34:0d:76:d5:dd:9f:b1:20:20:84:f5:
09:e7:44:06:56:0a:b6:af:35:ed:0d:df:88:75:a7:
a3:89:eb:4f:cf:f0:4d:7e:ea:1a:fc:a5:7d:34:98:
d9:f3:9d:00:fb:7b:0c:d7:09:9a:15:d7:f1:62:56:
7f:b7:8e:81:24:80:2f:9b:65:12:18:52:fd:fa:8e:
db:aa:f3:37:ca:1c:32:48:ee:73:85:49:7b:2a:36:
b5:31:da:85:e4:e5:08:1f:5d:7c:ae:fa:c6:7e:af:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:CC:AD:13:EC:6E:A8:52:9E:70:52:6D:B8:18:FF:1D:58:9A:A6
X509v3 Authority Key Identifier:
keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b4:55:76:9d:a6:cf:b5:57:4e:34:d3:d5:be:a2:8c:88:1b:
9b:46:64:01:89:14:8a:99:eb:2b:be:a5:79:a2:14:bd:47:2a:
d3:6f:af:c6:c3:bf:15:16:f5:df:d0:3c:2d:1b:4e:6a:cd:25:
ba:36:63:97:a9:a0:bd:70:3d:a5:60:c4:2e:f2:80:90:35:3c:
5c:ba:10:9d:0b:90:b3:b6:15:77:fe:ab:36:6f:5e:d1:9c:05:
12:9b:a7:8e:ae:5c:c1:61:9f:8f:8e:4b:98:32:18:85:ea:47:
9c:36:7e:cd:44:85:dd:4d:72:f1:d8:c5:c6:d0:ff:98:50:f7:
ac:df:79:e1:ad:a0:d8:4a:5b:a7:9b:70:5a:14:37:65:55:4a:
fa:18:ea:c8:bb:a9:4e:22:70:68:c6:32:aa:ef:49:fd:19:d2:
e6:25:17:b3:63:f4:16:11:13:86:8c:1f:0e:91:63:59:18:ee:
f6:13:1b:1c:20:56:b0:3c:3e:8d:e5:8a:52:44:30:8f:2c:17:
76:c6:9c:ac:7f:aa:5a:e1:b9:91:81:45:ae:82:ba:fa:20:1a:
c5:6d:bd:26:20:c4:3b:8b:86:61:74:e8:c4:17:ff:ec:d0:66:
d0:47:1b:4d:a0:eb:11:34:0e:5e:b3:cc:bd:1f:8f:dc:25:8d:
dd:82:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:54 2025 by rpki-client