Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: ZJFwlRG9eb7/dDqA599Wndvh9Dq+ZXQoAC5OAu3GAbg=
Subject key identifier: 7A:7F:3B:54:6E:96:65:4C:AE:CE:65:D0:3B:0C:90:CA:62:E5:FE:EC
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 019683916C60958D3D12B62EB53575111E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 06FA
Signing time: Tue 29 Apr 2025 22:01:07 +0000
Manifest this update: Tue 29 Apr 2025 22:01:07 +0000
Manifest next update: Wed 30 Apr 2025 22:01:07 +0000
Files and hashes: 1: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: CNt1PjkJWbmDe0qyHwkUsZo6LV53tsP1vtWJLFVwock=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:6c:60:95:8d:3d:12:b6:2e:b5:35:75:11:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Apr 29 22:01:07 2025 GMT
Not After : Apr 30 22:01:07 2025 GMT
Subject: CN=7a7f3b546e96654caece65d03b0c90ca62e5feec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:24:e9:df:d1:7e:79:dd:f5:ae:f7:08:87:bb:
11:75:c8:c3:94:31:20:d0:04:96:a9:7d:ee:48:60:
ed:cc:03:e3:44:b8:6c:a7:26:e2:95:75:58:c5:70:
79:29:fd:32:a1:e8:ca:a8:68:ac:1b:b5:e1:20:35:
a0:ce:75:a9:a7:c0:3d:f3:e6:30:a0:f7:89:1e:36:
21:81:af:f9:05:6b:f1:65:f8:4e:bc:42:83:64:db:
5b:76:25:a6:11:11:32:09:5a:c2:3f:67:50:ef:bb:
80:c2:fe:65:5f:39:e7:22:5a:00:60:8b:4b:64:69:
83:ab:56:b6:0f:17:27:5a:d2:34:64:38:7b:21:27:
82:17:ab:ad:42:a9:7b:73:c1:42:68:d4:bc:4a:2e:
30:ab:e1:66:bf:b0:23:49:8e:d4:cf:55:67:0c:73:
fa:7a:1b:4f:73:99:ef:a3:47:a6:27:cd:63:5f:d2:
1b:c0:95:b5:30:38:dc:35:6f:d9:c8:c9:b8:f6:30:
48:48:89:9c:cf:41:c8:bd:3a:f8:8d:31:1f:6e:9f:
68:46:4f:a0:d1:21:96:7a:4c:a2:6e:4c:c7:73:9b:
0c:48:e8:86:36:11:3c:79:44:d8:e3:30:d0:6a:52:
0a:9f:f6:db:2c:7e:d5:e8:5e:42:1b:6f:2d:c1:36:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:3B:54:6E:96:65:4C:AE:CE:65:D0:3B:0C:90:CA:62:E5:FE:EC
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:43:43:3c:ae:31:36:83:c3:66:e3:b3:c8:76:aa:da:99:67:
73:c9:d6:13:d5:76:5e:a9:9d:3f:1c:9e:56:29:55:e7:51:5a:
59:f8:63:9f:d0:43:1e:09:e9:b8:be:33:33:78:d3:b5:fd:2b:
ce:7e:8e:0e:2b:8e:9b:2c:b1:9f:db:96:62:e1:20:3e:12:e2:
b0:6b:56:a3:60:0a:1e:0d:91:8c:20:1a:e0:bf:56:66:d4:cf:
1f:70:1c:81:ae:bc:00:44:15:22:80:7a:e2:1d:ab:03:df:8b:
12:62:3c:7d:db:15:8d:cd:c6:ca:82:f5:c9:0d:e4:22:2b:e0:
3c:8c:8b:ad:a5:a0:4a:10:8e:16:78:5a:e9:40:44:86:34:f1:
1d:ae:dc:1c:97:1e:89:2c:8b:50:0a:43:38:38:fb:6a:3a:4c:
69:bc:65:46:a7:14:e0:bf:ab:ba:2c:fa:ae:48:4c:98:b5:27:
34:cc:41:ef:f2:77:7a:8b:10:10:a6:ae:fe:3f:4c:9c:2a:a5:
2e:8b:86:7e:4a:31:8b:f9:5e:cc:bf:16:f9:98:19:78:25:82:
c2:38:37:73:7c:34:f5:bf:89:8d:6d:ef:26:21:94:60:21:bd:
92:1f:25:5c:44:06:b8:c4:7e:42:37:be:93:52:da:c7:0d:93:
bd:c6:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:28:17 2025 by rpki-client