Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: ESFJLJKS2Ffz7RdVNay3XC19yd70idtvwKsnnywzuzM=
Subject key identifier: 13:4E:EB:8D:CB:5A:D3:06:F5:C7:BC:2A:57:84:D5:D0:0A:DE:08:82
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 0196BB92C3A7FF9A890C27B9C629C638BB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 14C3
Signing time: Sat 10 May 2025 19:01:19 +0000
Manifest this update: Sat 10 May 2025 19:01:19 +0000
Manifest next update: Sun 11 May 2025 19:01:19 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: g7Bf3MQrkg7ilT4GdiDlDFkeWNgxSiCAs3rnXIolV6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:c3:a7:ff:9a:89:0c:27:b9:c6:29:c6:38:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: May 10 19:01:19 2025 GMT
Not After : May 11 19:01:19 2025 GMT
Subject: CN=134eeb8dcb5ad306f5c7bc2a5784d5d00ade0882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:67:fb:8d:c5:8a:c1:86:3f:93:51:26:e3:
b1:f2:ee:fe:72:b8:32:e8:03:88:c6:0f:b0:05:a8:
fa:65:8d:83:05:0b:c1:d0:0b:fd:2f:fc:cf:12:a3:
9d:0b:b8:34:4f:9d:a0:0c:64:b6:7e:57:c3:c7:48:
40:65:9a:4b:8a:8f:cd:fe:5a:b8:0b:18:fd:0e:2b:
29:4c:f2:10:3a:56:61:f8:5b:17:17:1e:3c:7d:e7:
dd:2b:1d:ba:f3:f8:21:7f:9b:dc:00:b2:25:fc:7a:
fb:49:cd:d3:a8:92:b5:4b:59:d9:ac:38:fe:01:81:
c3:56:ed:46:3f:82:55:f3:89:4c:aa:5d:62:e8:bc:
39:8d:bf:87:95:2d:9b:7b:be:2c:e1:53:80:ce:9b:
49:5d:84:8b:4e:0a:85:3b:52:85:03:26:78:73:57:
a0:bd:ca:ea:7a:bb:67:92:29:51:2d:8d:cf:1c:19:
20:d1:9e:e9:98:55:01:41:2e:19:bb:5a:69:df:b1:
dc:c9:6b:3a:89:e7:db:4d:8d:fc:7e:24:50:fe:d9:
0f:0b:b4:5d:14:86:9f:75:6d:a8:f9:0a:45:16:b7:
60:75:d6:47:92:0e:e0:fd:e0:5a:c0:da:7d:1d:d3:
a3:65:eb:2d:18:1d:23:1c:13:0e:b2:3b:c1:e2:5b:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:EB:8D:CB:5A:D3:06:F5:C7:BC:2A:57:84:D5:D0:0A:DE:08:82
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:82:7e:7e:71:ae:4b:67:4d:0e:b3:88:3a:ba:dd:7e:05:6a:
6d:08:32:be:3a:50:9b:5b:45:cd:44:29:31:9b:a9:c7:ad:53:
c8:0f:0e:a3:7b:e7:66:2d:cd:32:57:ce:13:40:44:24:f8:30:
3e:bd:a6:7c:3b:a2:71:7e:c6:79:bc:ca:4d:16:2d:e1:d9:0e:
48:de:6b:fc:01:5e:bf:cc:da:84:9e:d2:64:e2:8d:cd:82:cd:
b9:52:56:71:5f:0e:69:2f:6c:2a:7a:89:b1:f2:8d:26:97:3c:
0f:b8:f9:c5:24:cb:4c:ce:49:a6:21:e2:a8:2e:93:ca:07:ce:
71:e9:da:09:4d:7a:51:42:f6:6a:ba:23:99:4f:ff:98:2e:f6:
5d:42:28:6c:19:87:91:bc:f3:b9:0b:35:8b:02:7a:09:41:4b:
e9:50:5d:5a:4d:1f:15:4c:99:83:8a:5e:00:64:68:d2:f7:0a:
2a:90:60:48:fb:57:0a:9f:d5:e4:e6:47:73:45:fd:b2:8f:0a:
d6:9b:ed:77:71:13:16:13:b4:21:aa:4f:3a:76:8a:fe:fc:c3:
b7:aa:3c:d9:d0:b3:93:d0:d4:19:cd:74:9c:9d:d8:0c:f7:78:
a3:de:e5:76:5a:26:0f:91:fa:d2:20:eb:1f:30:ed:88:70:16:
70:ad:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:19 2025 by rpki-client