Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
File: GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json)
Hash identifier: Op06W+fg3pFyiaqSsxIWDwbBrKwlQjKR9H5v4j3pAvs=
Subject key identifier: 28:33:BD:40:09:C4:84:E0:2C:CB:4F:DC:F3:27:DB:0A:FC:AD:03:8E
Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Certificate issuer: /CN=18021459300d15fac550705cf6e258999d3d86ba
Certificate serial: 0196B8FE9185EEE076CED11BDE6A57F7ADC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
Manifest number: 0A14
Signing time: Sat 10 May 2025 07:00:13 +0000
Manifest this update: Sat 10 May 2025 07:00:13 +0000
Manifest next update: Sun 11 May 2025 07:00:13 +0000
Files and hashes: 1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: ANDnF/BilvroTI6U3TSPmXes1Csgl8T16LMnKPhYbXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:91:85:ee:e0:76:ce:d1:1b:de:6a:57:f7:ad:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba
Validity
Not Before: May 10 07:00:13 2025 GMT
Not After : May 11 07:00:13 2025 GMT
Subject: CN=2833bd4009c484e02ccb4fdcf327db0afcad038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:83:c0:cd:5e:07:6b:13:31:20:4f:a2:6d:
d6:9a:20:96:05:9f:0d:09:73:ed:68:61:c1:31:3b:
91:eb:a9:5a:01:96:0f:c1:60:43:24:67:11:b2:3f:
89:45:9f:82:97:5e:95:64:8e:41:17:36:7b:cf:9d:
24:45:ed:f4:82:06:4e:93:47:df:b3:20:00:37:dc:
52:81:3a:38:67:0c:93:e0:3b:a8:fd:f0:e5:48:cf:
ba:92:6e:2c:76:fc:3c:d7:dc:6d:51:66:17:ba:b8:
5c:a4:9b:5d:3f:ab:74:7c:b9:24:b1:c9:42:d1:25:
f1:32:49:b7:1d:33:a7:9d:a0:9d:b3:4f:01:1a:af:
dd:e0:dc:2b:85:4a:8a:a0:09:64:9a:41:74:c1:73:
39:a5:ac:84:36:0c:e8:88:8d:68:f1:81:a0:05:c0:
02:43:7b:0b:74:5a:b7:15:5d:42:db:bc:55:ba:bf:
ec:34:04:3a:c6:a1:d6:11:fd:7a:3b:cd:4e:89:9f:
97:7c:fe:cb:5e:28:84:e5:12:02:ac:9c:66:ab:1b:
42:f9:8f:f6:b8:79:35:47:52:4d:b6:f6:b5:0c:75:
16:ee:57:35:58:dd:5a:a0:cc:ed:b6:19:67:f7:41:
11:91:da:88:e8:7c:7a:bd:59:42:a3:f4:39:ae:5f:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:33:BD:40:09:C4:84:E0:2C:CB:4F:DC:F3:27:DB:0A:FC:AD:03:8E
X509v3 Authority Key Identifier:
keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:83:1f:74:3f:da:a7:e2:ea:20:e0:97:65:33:92:48:f9:
c1:d0:31:56:a2:8d:68:bc:4d:18:53:91:25:11:d2:5c:58:c8:
dd:62:86:4f:17:9e:19:8f:c6:43:ca:6c:ed:70:34:29:a5:98:
3f:d6:5e:2f:ec:de:e6:8f:10:4a:01:97:65:e4:b3:72:74:41:
9f:d1:c5:d9:43:3b:f5:04:6b:40:10:59:40:77:ef:f8:81:4c:
19:a0:fd:0c:03:5e:e7:6c:e8:04:01:89:7f:87:1c:96:08:ab:
04:2c:d5:1c:0f:3b:01:4d:e9:03:61:41:39:31:e4:1f:3d:69:
6e:dd:f7:10:d1:df:b8:67:d2:1b:55:d9:26:53:a0:9a:0c:e0:
51:48:14:a1:a7:aa:96:c2:2e:1d:12:27:0c:68:98:6d:41:8e:
88:16:a9:4b:87:69:a1:2d:62:bd:be:ca:d8:ef:60:a2:55:fc:
84:30:1a:d7:0c:bb:db:e1:46:e1:6c:f4:25:8f:db:99:e5:c5:
c6:60:07:db:3f:3f:9c:f4:f7:74:20:ff:14:a8:60:8a:b4:fa:
ca:65:d3:2f:4c:d5:24:28:b2:2b:ff:10:4e:56:ae:4b:10:ce:
22:38:e5:87:94:2e:14:f1:42:62:e8:4f:03:0d:60:2f:c5:77:
f8:15:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:37:47 2025 by rpki-client