Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: 2c4I1u6XaJCtCx9NfOE+FuH1F816Nkt4GFHOtIl8DFo=
Subject key identifier: 04:EC:6B:C2:19:1B:68:0C:B8:9E:E0:31:C9:79:03:75:01:BE:42:A2
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 0196767A056D757B37AECB2CE5AE428FD0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 047C
Signing time: Sun 27 Apr 2025 09:00:30 +0000
Manifest this update: Sun 27 Apr 2025 09:00:30 +0000
Manifest next update: Mon 28 Apr 2025 09:00:30 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: 7nFdqVVGvc4zp25+yyGfYSLBign/XB1/3dSeBZ58C+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:05:6d:75:7b:37:ae:cb:2c:e5:ae:42:8f:d0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Apr 27 09:00:30 2025 GMT
Not After : Apr 28 09:00:30 2025 GMT
Subject: CN=04ec6bc2191b680cb89ee031c979037501be42a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:f8:a9:f1:e3:cc:80:06:fd:67:e2:c4:7e:
16:9d:7d:09:95:ac:c5:e1:c7:17:44:e8:b2:b9:6e:
9f:e2:5b:a3:1d:6b:4f:ac:6f:61:b8:e3:36:b1:98:
ed:7f:72:db:56:ed:be:30:0a:0d:85:89:d5:6a:4d:
b4:d4:26:6a:e7:db:19:19:fd:95:16:35:52:d1:1c:
0a:0c:e5:37:99:a1:9d:32:06:d1:2b:b7:58:d2:e8:
a5:4e:2a:51:be:47:72:42:c6:01:55:b4:28:5b:91:
12:24:96:00:5f:da:59:73:08:90:2e:72:61:ed:21:
0c:9e:37:0e:a2:cd:73:e3:e0:c7:22:dd:f0:c9:3c:
f3:27:2e:34:6f:1e:44:dc:97:eb:be:f3:ad:c2:b2:
67:26:f2:77:0d:9d:dc:79:6c:42:18:c5:9a:ea:13:
63:1d:84:db:3a:8d:90:e2:48:92:ac:74:d5:15:cb:
1a:22:91:bf:2c:dc:85:58:7d:79:16:18:92:72:eb:
b8:c2:17:b6:9e:c2:75:53:fa:5a:9e:b7:7a:85:16:
fb:72:b2:27:9e:81:32:77:95:fa:0c:ff:1b:f9:f0:
6c:ca:d5:75:ab:86:de:84:6f:86:6c:a6:c9:0e:fc:
2f:9e:a4:15:6e:4b:c5:5d:6b:b3:11:43:69:11:36:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:6B:C2:19:1B:68:0C:B8:9E:E0:31:C9:79:03:75:01:BE:42:A2
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:29:8e:62:1f:d4:20:3d:db:03:07:d7:c6:4e:27:e6:4d:67:
33:5c:91:cf:3e:ea:09:f2:40:ee:01:d5:8a:5d:6c:7e:e9:d8:
2b:cb:20:ca:11:c6:c8:89:27:c5:cd:f6:27:32:25:e8:d4:86:
6b:5c:fc:1d:1b:87:66:12:cd:3c:0d:99:25:3a:26:d0:98:7b:
5c:f8:db:12:ea:29:ac:ab:4f:fd:38:9c:82:cc:46:9a:b1:13:
2e:38:da:c6:3e:d9:65:d4:e4:d9:34:88:c4:06:a2:9d:9d:8f:
69:30:09:09:b1:2a:8f:3d:c2:92:b6:6c:66:6b:97:1b:e9:9c:
af:7c:54:36:9f:7a:5a:95:e2:b0:2a:16:64:8e:96:f1:67:34:
45:48:22:e4:20:6e:0c:b8:38:db:8f:14:39:c6:e7:fa:ee:3a:
0a:6c:d2:fd:c0:e0:c4:7f:5f:e8:4b:98:46:7d:36:a4:cd:49:
80:83:0e:8e:86:4c:e4:07:55:2d:ba:46:27:ea:e2:7f:00:8e:
7c:85:d0:94:e3:d4:4d:a0:73:a7:61:4a:ae:8d:93:8a:9e:93:
13:86:3d:b4:05:6f:84:7d:3f:69:08:6e:08:54:ae:d1:27:c3:
7c:49:64:fe:a8:d1:a3:d9:b6:0e:56:93:68:c9:f0:cf:64:27:
7d:3d:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:01:25 2025 by rpki-client