
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier: wsMmlOQ222MqeJUJaCa4FVhzx8XyeXn5Jxz5BGa/YAc=
Subject key identifier: C2:F9:EA:59:26:87:9D:BF:D8:5F:83:AD:BE:8F:F1:FF:75:AB:E6:EE
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial: 01968FCC073DAAD27027A2B5934D6CD656BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number: 06C7
Signing time: Fri 02 May 2025 07:00:35 +0000
Manifest this update: Fri 02 May 2025 07:00:35 +0000
Manifest next update: Sat 03 May 2025 07:00:35 +0000
Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: Qpy9NtU2t7E+CbNxxG8tQlrptt3yRlKJeMMsj+A4OhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:07:3d:aa:d2:70:27:a2:b5:93:4d:6c:d6:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
Validity
Not Before: May 2 07:00:35 2025 GMT
Not After : May 3 07:00:35 2025 GMT
Subject: CN=c2f9ea5926879dbfd85f83adbe8ff1ff75abe6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:da:15:9f:0f:ce:2c:b2:ea:56:cf:3a:53:
bb:d0:c6:15:8f:e1:75:a7:22:bf:eb:4f:3e:36:1f:
99:8b:17:be:cb:01:b5:b9:d5:f8:c7:8a:e0:16:df:
9c:b2:cf:dd:db:e5:e4:71:20:28:87:a4:2a:3e:51:
4a:70:6a:57:92:06:5b:f8:dc:d0:7b:0c:5a:d0:4a:
6b:3c:bf:ab:7f:ee:4b:1d:97:79:75:6a:99:22:d7:
3d:03:b8:88:c3:3c:a1:ab:cc:fa:7c:c4:d1:fe:9d:
18:ce:21:bf:dc:51:63:93:e4:c9:ff:2c:65:64:fa:
f9:a2:ee:d0:85:f9:1e:71:2a:16:ad:d8:c0:73:fb:
5b:29:36:0d:39:86:85:45:03:a7:6e:62:67:3c:93:
46:07:47:b4:95:64:40:e3:3c:19:e2:3f:01:20:56:
a6:db:72:f2:dd:b4:be:b1:6a:3a:d2:d0:88:85:6a:
f5:53:f7:87:93:e9:db:68:f2:f9:83:01:c9:06:73:
ce:ba:3a:26:ca:09:84:0f:5d:12:48:72:2d:3a:b0:
f2:5a:71:04:64:f7:66:47:4a:75:15:a8:77:15:0f:
89:e5:83:8f:ae:b0:59:97:01:10:24:6a:f8:5b:36:
ab:e8:ba:2d:fe:50:ea:5a:7d:32:d6:c6:83:6c:74:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:EA:59:26:87:9D:BF:D8:5F:83:AD:BE:8F:F1:FF:75:AB:E6:EE
X509v3 Authority Key Identifier:
keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:cb:da:2c:e9:91:61:a6:84:58:50:f9:fa:18:b1:28:3a:dd:
54:3f:d2:96:68:d9:fb:45:bc:b0:14:60:7b:fc:b1:2e:70:f4:
60:4e:ab:95:62:b9:bd:ea:d9:6a:5f:33:06:03:45:3a:a7:89:
d2:02:9f:05:af:a3:04:0a:0d:8c:2a:c1:ec:eb:55:2c:9e:e4:
29:55:45:ff:b3:1c:cb:c9:5a:68:be:89:ed:54:55:78:fd:e1:
9f:dc:e7:10:cc:fe:b9:a2:ea:34:1e:36:82:b3:ca:95:d4:da:
d7:de:01:67:5f:75:a3:78:76:0c:ca:be:57:ec:0b:c9:95:ad:
fc:9f:21:00:f1:95:83:0f:fd:fc:27:a5:60:7c:dc:4a:4e:ed:
53:8e:82:f5:0c:c0:93:93:7e:93:51:42:d1:6a:be:ee:24:fc:
b0:38:18:39:4b:eb:b0:c3:9d:e4:9a:fc:b5:65:d0:32:80:8e:
c1:d4:bb:99:e1:ae:93:b3:7d:b2:28:26:7d:cf:85:b9:b8:06:
d1:75:a1:96:19:12:96:72:97:68:71:21:d8:60:d7:31:1d:19:
12:d3:84:73:d7:78:87:60:00:63:81:8c:ea:c5:d0:2b:f0:66:
c9:d8:13:4e:3c:cb:25:48:59:6b:2c:ce:c8:a0:15:55:03:35:
6d:15:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:53:30 2025 by rpki-client