Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier: GI2REVM7tHzPOppvnJQlvd4K2fCqbWX8C0vxUt1uH7g=
Subject key identifier: 89:6A:81:8A:47:26:B6:A7:12:5C:8F:25:25:85:D7:25:38:CF:CE:94
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial: 0196C5DEB50D241A49F104AAE15317C38CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 19:00:28 +0000
Manifest this update: Mon 12 May 2025 19:00:28 +0000
Manifest next update: Tue 13 May 2025 19:00:28 +0000
Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: R8iw050QTgjOwSspCWxmXyViWLxI+kfv2tTKDGgkcyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:b5:0d:24:1a:49:f1:04:aa:e1:53:17:c3:8c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Validity
Not Before: May 12 19:00:28 2025 GMT
Not After : May 13 19:00:28 2025 GMT
Subject: CN=896a818a4726b6a7125c8f252585d72538cfce94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:35:58:20:9c:59:00:05:85:db:c8:c5:28:
77:ea:cb:51:25:8f:df:fe:dd:eb:36:35:7c:02:bd:
b6:5a:a4:93:84:0d:bd:b9:7a:fa:00:6a:77:9c:9f:
63:36:da:b8:15:08:82:40:cc:2b:22:e7:f7:38:ea:
31:c9:30:b0:83:95:6e:1e:13:21:95:e4:8d:8f:4f:
e5:44:4e:8d:b6:23:4b:81:bb:ba:7c:53:ad:3d:23:
1f:ed:2b:a7:6f:d5:60:db:dc:68:23:45:1a:10:76:
58:5f:9a:ee:f5:a4:75:30:48:b5:9c:32:43:b1:e7:
49:4a:d1:f8:c1:41:3c:c7:38:10:de:60:8d:8c:27:
44:12:30:dc:c2:5c:88:fa:6b:8b:6f:43:cc:e9:c1:
41:d6:60:43:98:0a:92:f8:c5:29:1e:cd:38:aa:5c:
4e:55:75:d6:bc:c6:c0:66:80:e7:19:a5:bf:97:6f:
64:d5:97:53:84:00:20:3f:d6:c5:ca:8c:ea:8c:03:
de:73:8a:0d:20:22:41:3a:49:b3:ce:20:7e:16:4d:
93:6a:34:1d:d8:68:6a:ba:df:6e:0a:ba:b1:33:9e:
32:be:86:c6:c2:8d:f8:cb:1b:de:4b:64:93:0e:d6:
a0:a6:87:81:42:60:6b:43:ba:cb:b9:7f:b8:2b:dc:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6A:81:8A:47:26:B6:A7:12:5C:8F:25:25:85:D7:25:38:CF:CE:94
X509v3 Authority Key Identifier:
keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b5:11:3d:f5:06:8c:91:16:a9:a5:fe:09:02:31:ba:ae:15:
0e:04:ef:67:8a:c8:40:4c:de:9f:45:aa:bb:c7:ed:70:93:11:
76:3d:12:33:d3:0e:3e:33:9c:70:ef:52:20:f9:3c:e1:33:33:
bb:65:79:37:b4:7a:10:58:03:e1:96:99:97:74:c6:4e:3f:43:
9a:f8:44:5b:31:30:39:c2:f4:b4:47:6d:ad:8e:47:33:df:1b:
d4:a9:ef:41:32:ff:d9:7d:31:94:36:27:e8:b5:cc:d3:92:f2:
98:e2:46:d5:96:28:ef:05:9f:7c:6e:d3:93:b7:2c:bd:3f:fd:
ac:0e:ce:1b:13:ef:31:ce:25:63:74:13:5d:db:2f:0f:08:42:
e6:cd:e5:37:c0:e4:73:9a:b5:47:7c:18:a7:b6:77:04:bc:5a:
ef:aa:ac:ac:76:33:19:b5:93:f6:36:cd:16:e0:83:17:0e:a9:
f7:51:4d:da:2f:14:35:89:7c:aa:f1:42:f4:85:b9:f6:10:f5:
d5:44:d4:c0:3c:37:ac:d9:ec:17:8d:17:a4:d9:ff:1f:42:cf:
f9:8c:ad:84:8e:10:62:46:27:7a:c3:e2:ff:3f:7a:6d:ee:fe:
d4:51:95:9e:f6:72:6c:3d:32:69:0e:37:b0:e3:e9:c4:c5:16:
5c:35:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:46:40 2025 by rpki-client