Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: 5txdUG0zlza+BmY7Fh0hZlvSK6CrArswt2dn6l2SMrM=
Subject key identifier: 63:11:57:12:CD:33:5F:A3:42:9D:CB:BD:7E:0F:FC:15:1E:AD:9A:D7
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 019685ED0BEFF389AA77052BA685D9149DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 05C5
Signing time: Wed 30 Apr 2025 09:00:26 +0000
Manifest this update: Wed 30 Apr 2025 09:00:26 +0000
Manifest next update: Thu 01 May 2025 09:00:26 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: txu89M2fLiJ7iJa2EubJinI4h0MdVuIA1OWnEGcLeCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:0b:ef:f3:89:aa:77:05:2b:a6:85:d9:14:9d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Apr 30 09:00:26 2025 GMT
Not After : May 1 09:00:26 2025 GMT
Subject: CN=63115712cd335fa3429dcbbd7e0ffc151ead9ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:0f:d9:f1:f1:09:f2:76:8c:02:04:60:47:
6f:21:f0:34:b9:f4:e2:45:f0:ae:01:80:72:ed:b4:
92:29:43:a7:06:cc:74:6a:59:5f:2b:49:27:0c:48:
04:48:bf:45:3f:f9:37:cf:18:24:3a:d3:4a:61:e5:
ce:69:17:f6:fd:b3:a0:36:be:0f:24:8d:9b:69:63:
e6:3c:90:e2:30:26:b9:05:15:97:9b:c9:3d:2a:6e:
cb:f6:ea:bf:65:dd:97:54:28:b4:59:8c:99:38:a6:
06:8c:e0:30:a0:fa:60:fa:84:e3:ca:df:1e:d3:14:
fa:55:16:77:f6:f3:b6:cc:e2:fb:b6:17:ce:a0:5e:
4d:b1:fc:9b:dd:c4:b3:fc:93:9f:b2:f5:f2:06:47:
1a:a1:3d:cc:03:85:3e:88:2f:58:e9:12:ef:98:1b:
f3:59:69:fd:a2:4b:51:5c:74:b1:dc:95:d1:19:47:
b9:9b:8a:79:a2:5f:0c:36:c3:ac:61:7b:42:e0:bd:
42:7c:3c:df:21:63:d6:45:ec:88:2c:d6:b4:9c:24:
e6:d3:ee:82:45:5b:8e:ed:aa:b3:0a:5e:70:6e:ff:
76:4a:d8:94:be:d4:f0:41:72:ee:de:a5:10:6d:88:
55:10:09:a6:8a:0c:6e:9a:03:96:8d:f5:bb:21:7c:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:57:12:CD:33:5F:A3:42:9D:CB:BD:7E:0F:FC:15:1E:AD:9A:D7
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:64:29:c4:21:f5:0e:74:2d:b8:00:38:f4:db:97:b3:63:f9:
8a:5b:d1:bb:50:23:bc:c5:65:b2:07:39:12:74:4f:5a:2f:6d:
17:a3:d4:08:03:99:99:fe:5f:c3:31:d5:99:e6:5f:e7:70:e7:
34:fa:34:a7:b1:ed:db:d9:b1:65:98:eb:ff:c8:a3:db:29:55:
9e:a4:4b:bc:71:c9:d4:05:ca:cb:e3:49:0b:82:13:e6:5d:c1:
b0:56:b8:8e:0c:bb:51:97:0d:a3:eb:89:09:e1:d7:06:a0:ba:
5b:5f:32:09:d3:82:f2:7e:c8:0b:26:55:f4:8c:8e:6c:19:6a:
d8:28:e8:5e:b6:66:2b:1d:e9:3d:dd:65:78:8f:22:b2:53:1a:
3c:d6:51:07:f1:94:1d:09:a5:2a:e9:fb:80:14:ac:89:45:b7:
cc:b4:f9:6a:9f:29:fc:91:f5:66:cb:59:bf:d7:bd:f5:72:2e:
fa:c3:92:d8:e2:ea:ad:f0:13:8e:8d:30:43:42:86:8d:1c:97:
d4:e7:62:c7:61:c2:4d:19:76:e6:d0:ed:9e:d6:d6:03:95:9b:
1f:11:84:18:55:e8:d3:1b:76:e8:6d:92:35:31:4e:3f:2b:d4:
56:e4:28:cc:f0:1c:1f:f3:66:fb:6e:39:90:40:66:5b:86:5a:
65:47:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:25:19 2025 by rpki-client