
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: cfQw87tE+MbG2c5X0uAkYua8cqIlEvukw1GGVlvO5/w=
Subject key identifier: 1D:0C:FA:8D:A4:AC:A4:A4:FB:1F:84:C4:44:7C:71:98:51:AE:67:93
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 01969DF6291C3CF1A93D14FAD1E0A53767C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 1520
Signing time: Mon 05 May 2025 01:01:17 +0000
Manifest this update: Mon 05 May 2025 01:01:17 +0000
Manifest next update: Tue 06 May 2025 01:01:17 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: 9h41w9yzgqIoBeKEsbVeFgunKAhwFcVNMoEwPpywl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:29:1c:3c:f1:a9:3d:14:fa:d1:e0:a5:37:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: May 5 01:01:17 2025 GMT
Not After : May 6 01:01:17 2025 GMT
Subject: CN=1d0cfa8da4aca4a4fb1f84c4447c719851ae6793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:74:16:ee:a0:7c:35:2a:17:8e:d1:a6:95:
66:bb:bb:a4:2e:1d:f9:4b:3f:49:80:f6:4e:75:32:
35:db:33:2e:3c:ef:11:f6:fa:1d:f1:1c:df:70:19:
0a:1b:6b:c2:77:f1:fc:7e:bc:4f:28:a9:d6:bd:28:
ec:43:d5:42:4a:99:0e:07:64:36:22:69:0d:ca:b8:
be:76:9f:0f:c3:da:34:e0:9c:3f:c7:56:b8:3d:75:
2c:10:59:d2:fa:62:58:6f:e1:bb:13:de:91:e9:47:
49:cd:9c:9b:de:3d:d9:ff:b6:ea:cb:87:1b:ba:35:
69:cb:78:fa:8b:3d:c7:9e:c5:7b:a7:e1:91:c9:9b:
0b:9d:1b:6a:f2:df:67:ec:0d:18:1f:22:5e:b3:67:
ca:5e:22:96:68:bf:98:ee:6c:54:aa:56:d7:8c:ee:
87:03:3a:1c:35:5f:c6:a6:bc:3c:d7:fb:21:28:13:
d5:3b:33:d3:08:7a:63:fa:9f:ae:05:a1:3c:61:e0:
73:aa:61:23:32:d8:52:2c:1c:70:c8:28:b4:bd:9b:
d7:36:8b:df:b9:6f:e0:66:9a:be:27:4c:2e:a8:f9:
f7:36:7a:ea:3c:80:e1:09:5d:3b:86:c7:c2:6d:68:
b2:b3:cd:26:69:ba:d8:84:6b:a9:bc:25:0f:86:18:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:FA:8D:A4:AC:A4:A4:FB:1F:84:C4:44:7C:71:98:51:AE:67:93
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8c:fe:f2:bc:54:01:1c:8e:8b:4b:b9:e5:b2:90:e9:18:5a:
d7:a5:00:7d:56:f0:fe:17:49:1b:ca:a0:3b:ba:0b:3d:38:67:
8b:c3:ab:c2:f4:04:4d:b3:a5:ac:c0:a2:40:07:49:e6:60:75:
aa:1f:9a:9a:84:b8:df:ce:27:88:a4:a9:71:77:de:74:b4:dd:
df:a9:3c:53:1d:85:0a:a2:6b:a5:24:b1:59:68:65:ed:5d:4b:
9b:b1:dd:35:af:cb:5d:b0:f6:18:ad:3a:f4:78:a6:7e:ed:3c:
66:54:d6:76:13:15:20:a7:be:78:81:1f:c4:9c:50:d5:21:e3:
69:23:c4:e1:75:5d:ba:33:26:86:11:5b:5a:8e:ac:90:fc:b2:
3e:2e:1f:2b:4d:eb:0a:f0:00:e8:59:0b:00:1b:2d:49:39:48:
1d:11:ec:9a:92:21:37:01:e0:c0:74:98:41:67:7b:2e:d8:bb:
b7:74:e0:29:38:76:29:a6:0d:e2:40:20:bd:e6:95:8e:83:07:
f6:56:b2:9a:4f:9c:3a:49:dd:a1:c8:2c:24:da:cc:71:df:b5:
f3:32:c5:d9:95:43:fd:86:8d:96:19:89:dd:13:88:33:16:b2:
ae:e6:71:06:a0:54:84:4d:6d:25:02:cb:81:2a:2a:cb:81:0d:
27:29:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:00:38 2025 by rpki-client