Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier: tVcuGNRH2/D2oea1AoQ5QZSBd4octdJTq6kKogQJ6SY=
Subject key identifier: 52:D3:37:1B:08:91:F8:16:6C:5C:C0:78:BD:B6:D2:C8:83:82:05:04
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial: 0196C427C672FDBAC43E67D5073F8B70E320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number: 071E
Signing time: Mon 12 May 2025 11:01:03 +0000
Manifest this update: Mon 12 May 2025 11:01:03 +0000
Manifest next update: Tue 13 May 2025 11:01:03 +0000
Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: P6m3QJo33j46V0asOxEnTHCKmUxXo/aCMa2XB/Bmcvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:c6:72:fd:ba:c4:3e:67:d5:07:3f:8b:70:e3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
Validity
Not Before: May 12 11:01:03 2025 GMT
Not After : May 13 11:01:03 2025 GMT
Subject: CN=52d3371b0891f8166c5cc078bdb6d2c883820504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:41:5d:b1:21:4f:6d:f3:93:2c:a4:41:c2:
58:33:b1:2d:f0:22:70:30:c6:b3:9f:10:ce:bb:a4:
88:37:00:d1:6f:a9:15:cb:b9:27:d5:7f:bc:80:b2:
73:58:d6:f3:db:de:f2:b1:d1:c2:b1:f3:79:c7:60:
8f:e8:6b:2c:c5:bb:4e:cc:c1:b6:6f:c9:48:68:09:
eb:1a:0d:ce:1e:8b:88:a6:55:3d:df:a8:ea:51:2e:
66:ea:f1:ec:4b:30:e3:3a:4a:f2:34:5e:30:fa:09:
39:a6:c4:5d:1a:8c:6d:b4:88:dc:49:12:b8:59:ba:
8e:06:54:bc:d3:eb:e4:02:0d:f5:7a:9b:ae:2d:2f:
08:b2:6e:fa:91:77:f5:5d:da:34:0f:ae:7d:46:aa:
aa:8d:82:01:96:0f:b6:bd:ed:57:6f:fb:36:77:52:
f9:af:5f:70:2b:13:70:6c:24:66:03:d0:58:4d:b2:
b6:03:1c:e2:36:51:4e:90:3a:d4:6c:1e:1e:db:e8:
fa:a9:fb:d7:0d:43:eb:df:f8:a9:c3:67:09:a8:5d:
ea:e0:0d:9b:36:2b:28:ed:d8:b0:be:57:77:a6:fa:
32:cb:f0:c5:5c:aa:8a:d0:5a:62:c7:92:4d:ac:a8:
92:5b:c7:69:e9:a3:f1:c8:cd:b7:15:c3:8a:e7:51:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D3:37:1B:08:91:F8:16:6C:5C:C0:78:BD:B6:D2:C8:83:82:05:04
X509v3 Authority Key Identifier:
keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:c7:56:08:6c:d6:0a:7e:86:50:02:fb:04:30:97:c2:ec:
55:e4:5e:ce:ae:da:35:53:f5:c0:a4:bf:c5:ad:65:60:ee:71:
0a:30:dd:b4:ed:07:1f:87:f2:da:81:a9:94:05:70:51:ad:c0:
fd:8b:d4:2c:0e:51:c8:9a:f5:42:59:f0:e9:8d:60:4b:5d:a7:
4d:46:95:a8:d0:88:0c:92:cd:b2:ff:a5:f1:69:e5:86:24:f7:
bb:36:83:ae:ce:03:ba:00:ff:de:da:32:34:f4:43:0e:22:f1:
ec:57:8d:fc:48:4b:d4:18:aa:ae:df:7c:9a:3b:46:16:18:19:
c9:17:18:e8:72:ca:23:3b:70:7a:2c:ee:41:94:b2:6d:f3:f2:
ea:d1:09:a6:e7:f5:61:77:3e:57:e6:08:b9:70:ea:e4:5d:f3:
b3:03:8f:9b:86:c9:d9:02:9f:95:43:17:9b:8f:4f:72:11:a8:
74:50:40:47:d0:36:d7:0e:fe:bc:a8:ed:02:57:03:c7:2b:ae:
a0:b3:05:77:91:dd:fd:63:8a:38:d1:7f:6f:b2:f7:93:fc:e1:
aa:98:fb:6f:da:e2:53:8a:32:84:72:07:48:a2:75:00:e2:40:
9f:56:e7:14:7e:f0:14:3f:83:23:19:69:81:e9:4b:38:4a:f1:
65:78:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:48:41 2025 by rpki-client