Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: WUMqGhGyHdRt2D/lhS3+Oxn7igKxVQS4BuIlPDlOIyc=
Subject key identifier: F8:7A:3E:3B:3B:68:22:0D:F3:91:C0:CF:48:7D:1F:80:7F:40:FF:A4
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 0196C15D7D2B01C46074FFD73DA395657AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 11C7
Signing time: Sun 11 May 2025 22:00:51 +0000
Manifest this update: Sun 11 May 2025 22:00:51 +0000
Manifest next update: Mon 12 May 2025 22:00:51 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: nwB7cUfobSzO7BMN+IaRaod0OIfmMa9fIbGkhiJOUSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:7d:2b:01:c4:60:74:ff:d7:3d:a3:95:65:7a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: May 11 22:00:51 2025 GMT
Not After : May 12 22:00:51 2025 GMT
Subject: CN=f87a3e3b3b68220df391c0cf487d1f807f40ffa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:9d:bc:4d:93:42:ac:55:18:11:af:80:13:
6b:8a:47:1c:c5:69:f7:f2:04:7f:2e:1e:36:f5:88:
6e:96:44:61:c1:a4:49:be:7e:7a:0f:00:9b:8a:29:
7d:94:a8:34:b2:cf:c1:6c:41:e6:17:47:1f:9a:a5:
8b:9b:f0:54:88:0b:a1:5d:18:24:39:55:1e:d4:17:
36:57:cf:bf:56:f0:9d:b3:c0:84:28:2a:aa:86:a7:
6d:0a:4d:3d:27:85:9e:05:47:04:22:7a:12:ef:20:
ce:a0:0d:f0:43:23:e5:9c:53:f4:11:aa:de:c8:0f:
32:c4:68:5d:57:5a:45:fb:dc:f7:a8:97:b1:22:d2:
82:1b:28:4f:de:ee:b8:7e:ee:b7:e5:2a:b2:4a:40:
84:1a:9e:d8:e2:11:88:f1:80:45:5d:73:a3:85:ea:
a8:68:1c:9a:3b:bb:3b:b6:64:44:62:7e:2e:35:6e:
d0:5d:ef:1a:6b:a8:82:2c:89:9f:fb:81:d9:dd:ec:
c2:71:d2:43:29:1f:88:58:49:26:cc:26:fa:c7:d8:
7e:34:5d:43:7a:39:a3:da:16:20:23:91:2c:45:4a:
2c:ee:1d:01:4f:a1:c0:2f:b5:da:9c:f3:7e:17:b7:
b1:98:e7:21:c0:58:87:79:d4:62:9b:e7:22:32:88:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7A:3E:3B:3B:68:22:0D:F3:91:C0:CF:48:7D:1F:80:7F:40:FF:A4
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f0:4f:cf:43:5b:13:31:52:a8:99:c8:51:70:a6:a1:dd:15:
2f:2f:e9:9a:97:1a:87:67:0c:3e:33:79:de:e0:11:ca:08:5d:
71:95:e3:d9:25:e8:96:2f:c0:81:86:e2:b8:6a:20:ed:eb:ca:
ab:89:9e:39:ad:00:92:23:a3:3c:f5:9d:50:36:0c:91:7c:5b:
37:6a:80:b4:91:64:46:e1:c6:7d:87:d4:89:ee:79:94:9f:32:
e3:42:54:32:27:00:eb:f9:99:e9:ac:29:96:65:f3:33:5b:35:
13:89:3c:ab:25:22:5f:43:20:e4:84:d9:a6:8b:a4:79:57:87:
d7:34:ce:e5:57:a1:1a:cd:3a:db:d0:f4:23:58:d4:a2:7b:c3:
89:62:35:d1:f0:7b:43:79:c9:91:4c:e8:15:21:6b:40:a6:00:
8f:b4:5f:d2:97:df:93:3f:22:16:5d:bd:ff:e6:df:7e:5c:e0:
2a:41:71:24:6b:3b:a0:cd:f8:ea:a1:0e:0a:ee:ac:f6:1d:71:
52:ba:7d:c4:80:fc:65:d9:0d:4e:f0:7e:23:c7:6f:bc:34:16:
6a:e4:68:b4:0f:38:81:40:b1:9a:f0:4e:25:14:45:da:9c:1a:
99:aa:c4:b2:ec:55:d0:88:82:da:ce:ce:1b:63:fc:ac:ba:bb:
7e:f7:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:25:16 2025 by rpki-client