Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier: KgPasAKxVZMEbuiGTbmK8EeG/B5qCXL3lqspFmY2vlI=
Subject key identifier: 18:DB:6F:1C:69:38:1F:3A:9D:74:4A:96:FE:09:C2:8C:28:44:7F:13
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial: 019684DACA9EA11F34D760DA24D22980101D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number: 1066
Signing time: Wed 30 Apr 2025 04:00:53 +0000
Manifest this update: Wed 30 Apr 2025 04:00:53 +0000
Manifest next update: Thu 01 May 2025 04:00:53 +0000
Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: 8RO9nK0IP0JX96KDgLtQkM2qvAP+HJhg++Qjv/h7ia4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:ca:9e:a1:1f:34:d7:60:da:24:d2:29:80:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
Validity
Not Before: Apr 30 04:00:53 2025 GMT
Not After : May 1 04:00:53 2025 GMT
Subject: CN=18db6f1c69381f3a9d744a96fe09c28c28447f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:09:9a:98:0e:c1:f5:a9:ba:77:69:9f:af:
c3:16:f1:af:6b:e9:5d:12:b4:b2:c7:19:3c:51:b5:
cd:78:cb:b2:b6:99:e0:54:a0:74:65:9a:dc:34:3f:
7d:3f:d9:18:0c:6a:d7:23:5e:46:e1:a4:7d:04:1d:
1a:ee:3e:98:1a:6b:79:8a:4a:ae:92:24:7a:e0:7a:
66:e4:f3:3f:fb:dc:76:e2:a4:ac:dd:79:0b:00:dd:
73:6b:f5:d9:35:ca:c3:17:8d:51:61:4e:39:fe:e4:
9e:7f:fd:3d:1a:6a:dc:4e:15:15:65:59:93:9b:54:
01:c2:50:c1:2f:74:9a:08:19:fe:45:12:0c:1c:1e:
69:64:af:3a:48:9c:26:60:40:d1:57:4d:e8:ca:a1:
4f:0e:75:6d:2c:bb:13:ba:67:a2:c7:71:82:34:b7:
7b:30:27:3f:f2:b4:17:97:8a:cd:85:de:8b:bf:b7:
7f:b7:c6:1a:b0:3d:bd:98:4c:3a:8b:80:ab:11:13:
e4:b6:cc:1f:b6:3c:ef:b7:07:52:d3:06:0f:07:70:
d1:16:b1:f5:25:42:fd:f1:00:ce:76:f3:77:24:3d:
dd:d1:6d:62:f9:17:76:4a:3c:14:52:30:7c:5f:b2:
e4:ca:f1:ea:13:32:d5:1b:04:c4:81:4b:d6:8c:e8:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DB:6F:1C:69:38:1F:3A:9D:74:4A:96:FE:09:C2:8C:28:44:7F:13
X509v3 Authority Key Identifier:
keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:77:ae:12:8e:b9:80:4c:21:d1:d2:0c:ea:8d:86:19:de:2f:
6a:ec:92:9d:cc:c4:fa:73:dd:a8:fe:71:fe:9c:d1:72:f0:de:
de:05:60:bd:8d:7e:40:20:48:ed:34:76:82:13:d1:73:be:c7:
d7:f9:78:9d:5b:a3:91:60:ef:6b:77:4c:cc:b3:aa:e5:d6:6e:
4a:42:cf:82:a6:97:90:9b:68:6a:20:0e:53:5c:07:63:02:0a:
72:66:5b:8f:b9:d9:4f:56:55:1f:43:c4:71:41:ff:c4:ca:98:
7a:77:bb:b1:55:ac:f8:b7:3e:42:db:a2:b0:c6:2c:0b:a7:6b:
e5:64:f8:85:76:49:6d:30:14:c8:a8:06:0d:74:14:55:6b:83:
aa:f9:b0:fc:f4:6b:bd:9f:eb:4c:82:d3:38:e9:40:52:82:e6:
df:e3:90:73:d7:91:14:77:ff:61:a1:54:d0:60:72:b9:91:e9:
dc:26:3b:c6:9c:fa:7c:ae:13:1a:f2:9e:4d:b9:fe:16:c4:79:
d0:28:9e:e3:4f:8e:85:05:67:6f:d9:52:9f:33:63:c5:1d:c0:
ca:37:e8:b5:34:c9:08:3a:dc:ad:0f:59:00:de:97:4a:d2:19:
ec:f6:f1:e8:3a:1c:22:02:ad:fa:b9:8c:91:2b:75:ed:fc:e6:
4d:b4:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:46:50 2025 by rpki-client