Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
File: G9Id-yT32M4jEbpAdndUdL1QvmQ.mft (raw, json)
Hash identifier: YUxB7JIzVvoLHRzkFAjuyolA6277F5C/46P3LODCrDA=
Subject key identifier: 88:7B:3F:36:DD:5A:2D:43:DB:D8:3D:D1:EB:B1:DD:29:FA:7D:08:08
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 0196BFDCC0F09181EF91C5E7010CDFA698DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
Manifest number: 1540
Signing time: Sun 11 May 2025 15:00:37 +0000
Manifest this update: Sun 11 May 2025 15:00:37 +0000
Manifest next update: Mon 12 May 2025 15:00:37 +0000
Files and hashes: 1: G9Id-yT32M4jEbpAdndUdL1QvmQ.crl (hash: PHGxjb8tn6Xd2QQHeWb1VlvF101JvJ2593Q+ruuPmsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:c0:f0:91:81:ef:91:c5:e7:01:0c:df:a6:98:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: May 11 15:00:37 2025 GMT
Not After : May 12 15:00:37 2025 GMT
Subject: CN=887b3f36dd5a2d43dbd83dd1ebb1dd29fa7d0808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:46:0e:60:92:56:36:d1:96:66:7d:29:97:
a3:20:38:29:49:2f:39:fa:4d:23:ab:f9:be:eb:1e:
70:71:98:69:b3:ec:31:ae:c4:ea:2f:bc:4a:2b:db:
3e:a9:10:2f:a0:50:19:b1:6f:d1:90:39:d3:d6:fe:
0d:1c:05:0d:f6:b8:6b:fa:7f:c1:14:32:fa:b0:eb:
40:a4:ca:62:b5:55:99:fb:2f:9a:01:1b:34:0c:7e:
42:61:b6:25:53:93:ea:eb:bf:a9:4a:57:60:1e:0d:
06:52:f5:62:34:b5:8c:64:18:9e:09:c4:91:ed:e0:
67:f2:99:60:5b:e0:b1:a3:07:32:73:c7:1e:1e:15:
c7:ff:4d:66:90:f4:dc:af:a4:71:04:f8:39:dc:db:
fc:3e:66:a1:d6:27:b2:dd:6b:9d:0b:bb:c4:47:6a:
9d:87:4b:6f:d4:96:f7:09:cf:bc:06:cf:c0:a8:75:
4e:64:07:8e:a6:10:e6:9e:00:67:d7:7a:bd:f2:90:
59:e6:98:65:fd:e7:56:77:9f:92:81:59:b5:29:53:
7a:95:15:5a:9c:03:1d:d0:e7:c5:af:e0:1e:94:cd:
a7:1b:16:a6:32:30:e2:bd:29:b4:f5:43:ea:97:1a:
0a:ef:28:e3:8e:e7:66:c7:e4:02:7e:89:0a:35:f3:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:3F:36:DD:5A:2D:43:DB:D8:3D:D1:EB:B1:DD:29:FA:7D:08:08
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c3:c2:52:ae:ef:ea:55:08:5d:32:75:b1:19:63:eb:64:82:
bd:e7:04:42:8c:11:9a:4d:90:7e:70:53:dd:a4:9c:99:31:ce:
86:e3:4f:4d:b1:01:78:56:01:82:cf:a4:1c:df:be:45:46:d9:
5d:ca:90:11:b8:ca:fc:2f:d0:3c:a6:3f:3b:8f:36:ae:76:ff:
70:fd:97:25:f0:aa:5c:a1:76:ee:44:f6:13:41:b6:a4:9b:d5:
ba:71:7a:37:4e:c9:0a:c0:f2:8e:a4:4e:ae:d9:89:73:5d:42:
4e:f6:25:e0:0f:91:2e:7e:9b:55:5a:58:9e:b3:4b:18:2e:a6:
04:c7:77:93:af:a8:08:ce:e4:2b:64:41:42:ae:a7:e1:d2:99:
01:76:db:62:41:4b:87:63:73:23:a1:e3:e5:f8:69:35:83:be:
3b:9c:60:2b:28:aa:53:65:7b:58:e6:f9:39:6d:50:4d:76:0a:
4f:ab:94:5d:69:2c:b7:c4:2b:3e:fe:94:6f:8e:67:3b:13:c8:
e1:af:3c:85:a4:ab:98:91:bf:de:27:c9:c7:1b:ef:8f:f4:19:
2c:66:7a:cc:9e:c5:9c:7b:e6:1b:23:e6:2b:81:a1:a8:6e:c4:
bf:d8:9a:18:68:64:48:e1:d2:70:cf:2d:28:14:47:f2:1b:16:
29:4b:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:30:14 2025 by rpki-client