Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File: GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier: L7FiT9NvEyuoHzeSUDIm4qxZO0sSTUnXxkQ8qSiJtvg=
Subject key identifier: 21:3F:B6:24:9A:10:D6:13:35:30:BA:5D:50:A8:D0:FD:08:54:BE:24
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer: /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial: 019679E970B7D6032D3159AF9EFBEB125D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number: 0DD6
Signing time: Mon 28 Apr 2025 01:01:03 +0000
Manifest this update: Mon 28 Apr 2025 01:01:03 +0000
Manifest next update: Tue 29 Apr 2025 01:01:03 +0000
Files and hashes: 1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: M9Cozto3BKM0E4gomWOFBwW0qITW2VqQly0FqLwbO40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:70:b7:d6:03:2d:31:59:af:9e:fb:eb:12:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
Validity
Not Before: Apr 28 01:01:03 2025 GMT
Not After : Apr 29 01:01:03 2025 GMT
Subject: CN=213fb6249a10d6133530ba5d50a8d0fd0854be24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:8d:2d:55:f6:83:1a:78:7d:9e:32:0d:0f:
f9:01:ae:c2:9f:05:4e:58:1a:32:63:da:5b:f9:cf:
f4:16:ad:6d:30:92:32:51:3a:db:54:5d:fd:7c:58:
91:ae:cf:4d:0f:14:b7:52:67:50:6d:6e:ef:cf:70:
94:69:85:00:f8:4b:88:f9:9d:95:06:6d:a3:03:76:
66:bc:40:cf:50:bc:9b:1e:6e:1b:d8:c1:f3:9e:76:
63:c7:be:f0:14:39:ca:fc:2d:04:83:1f:2a:ec:d9:
73:df:57:ea:cb:8a:72:13:57:84:c7:2b:0d:e6:86:
fb:a6:e8:c2:d0:5e:23:12:17:24:eb:f2:a4:20:cb:
7f:4e:56:f6:7f:6c:29:67:59:00:65:19:83:07:e4:
7a:d6:96:f5:1c:2d:d2:e7:d0:1a:73:37:db:a3:27:
43:59:01:22:48:30:42:d7:03:bf:c5:86:30:b3:20:
0c:cc:be:9c:19:02:ee:65:93:77:32:27:bd:7c:03:
98:b3:9e:17:d6:0f:73:69:54:a7:f9:55:4f:d8:c6:
8f:80:60:a5:db:94:06:95:53:0c:2f:65:f3:e5:d1:
d6:be:58:d0:12:e6:87:86:66:95:43:c5:37:94:b8:
e5:e7:53:7f:5d:b4:2b:22:4f:a7:45:dc:d2:47:65:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:B6:24:9A:10:D6:13:35:30:BA:5D:50:A8:D0:FD:08:54:BE:24
X509v3 Authority Key Identifier:
keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:77:dd:0d:21:a9:b5:e2:fd:cc:95:f0:6d:63:a8:f1:0b:
f6:00:ee:5e:bb:b1:bf:ae:4a:f5:d9:83:93:fa:ae:4b:a8:5a:
e3:3d:dc:a7:71:14:a5:5b:71:c8:73:95:1a:28:38:19:7f:d4:
c1:43:d9:03:84:57:d9:63:99:e9:ab:c9:fe:a9:ad:9e:4b:bc:
67:15:a1:f0:0b:8f:02:3a:90:12:37:7c:bd:87:ae:60:35:9e:
5f:da:ea:98:94:25:f1:f7:72:f1:fa:a7:66:7b:0a:53:4e:bf:
d5:78:cf:ca:52:03:78:92:0a:f7:c1:62:3a:d6:49:35:5a:f6:
43:af:4c:63:f1:41:71:8f:7a:dd:71:b9:ac:13:99:37:8a:c0:
96:14:50:5d:87:be:21:6a:ba:40:cb:b1:c8:5f:29:2e:65:cf:
3d:ae:6c:f3:06:12:f9:44:6e:8b:53:32:a8:7c:0c:1d:23:b7:
20:37:0b:ff:9c:04:a5:b9:fd:ee:9e:fe:f6:35:8f:58:ee:67:
89:8e:7d:81:f8:b0:52:fe:a9:07:ce:2b:43:2e:75:2d:71:fe:
fe:99:5e:0b:7b:56:f5:47:3b:93:fc:99:6f:cd:25:e2:92:43:
db:16:3c:51:00:2a:8f:21:cd:ae:20:42:40:fb:75:9c:05:40:
16:c2:37:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:26:03 2025 by rpki-client