Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: yQ66toXF0v/KwXTOzS23JRbnUoGHVLjdwHfpHL9/+kU=
Subject key identifier: D4:14:78:46:33:FE:F3:A7:CD:81:B4:DB:9A:F2:13:0E:77:00:7D:C7
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 0196B7B5475BC2DA03B79A30566D06343AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 01:00:32 +0000
Manifest this update: Sat 10 May 2025 01:00:32 +0000
Manifest next update: Sun 11 May 2025 01:00:32 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: 9l4W14TKrhZs6EDBhJmPgyRFruoKurdP5xsgOTc1muE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:47:5b:c2:da:03:b7:9a:30:56:6d:06:34:3a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: May 10 01:00:32 2025 GMT
Not After : May 11 01:00:32 2025 GMT
Subject: CN=d414784633fef3a7cd81b4db9af2130e77007dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:61:d7:3d:1c:8f:bd:cc:c1:a0:94:44:af:03:
a0:51:a3:0c:38:10:80:8a:77:1a:0b:18:eb:2a:3b:
1a:0a:75:4d:28:f2:5b:b3:6f:49:a4:b5:52:9f:98:
96:e9:91:1e:da:44:71:77:a2:57:f8:e6:61:41:e1:
f9:ff:d2:06:54:5d:34:12:61:e4:15:17:44:55:aa:
17:1f:3c:7d:c0:90:6b:79:69:51:58:07:d9:bf:ad:
31:ba:df:b1:9c:e7:8f:a5:98:d2:f1:62:6b:5d:45:
2c:5f:ea:2c:ef:21:e3:e1:47:7e:8b:82:05:1b:4b:
2b:39:c3:9d:31:64:02:a6:ba:3f:7c:9b:b9:4e:d9:
d5:f0:0a:e8:ba:de:7a:3e:6c:d5:bf:27:f3:63:2f:
0d:65:70:a6:d1:80:9c:35:d8:39:29:f5:63:c4:48:
90:3f:f3:c9:fd:f2:29:1d:11:3b:d2:c0:51:cb:a6:
3c:72:c0:77:f7:63:dd:d4:05:23:5b:ea:05:c4:14:
82:62:ae:62:2a:c1:20:8b:df:eb:e0:eb:cf:75:f8:
6c:31:62:6e:1b:17:19:78:13:7c:8f:e9:86:a6:7f:
3d:6e:6f:91:3c:6e:7d:c5:92:39:96:27:d6:61:dd:
59:cb:6c:ce:23:dd:a8:1f:13:74:4c:9d:63:2b:6b:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:78:46:33:FE:F3:A7:CD:81:B4:DB:9A:F2:13:0E:77:00:7D:C7
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:c8:38:0a:3f:f0:f9:4e:81:39:ad:a1:1a:61:d9:79:d3:
dd:17:5c:71:00:9f:a9:bb:73:73:5d:35:55:59:6b:c6:4d:a1:
90:61:3b:88:56:da:27:74:c9:be:8d:a1:6d:16:01:73:b5:65:
15:02:ce:f6:87:eb:35:34:4f:34:b2:0b:eb:6c:fd:9d:44:22:
cb:2d:fa:56:eb:37:c0:6f:ba:6c:89:ac:8d:bf:1c:e1:27:a2:
cf:a0:b6:b6:15:1a:0f:2d:d8:3f:15:21:19:a4:b7:ee:37:2b:
eb:ba:aa:10:88:87:73:41:4f:fe:fb:f0:d3:22:a0:ae:b3:32:
c1:ab:92:a0:a0:99:19:cf:5c:37:ee:28:b4:d2:33:3f:7f:7a:
81:a0:24:bb:7a:76:b9:5d:73:23:27:05:25:ec:5f:e3:2d:f4:
90:cd:ac:24:1f:0d:39:bb:84:53:be:30:8d:b6:dd:3f:7b:b1:
f1:35:c1:3b:01:0e:bd:bc:90:ee:08:f4:3c:08:bd:8c:5a:f0:
07:0a:c2:ac:15:95:79:d7:52:4b:c0:fd:f4:5c:4b:93:ae:10:
d4:85:e2:e2:68:d3:ff:dd:c1:46:07:d1:a6:7e:9f:7e:42:5d:
29:aa:15:81:1b:03:a2:07:78:83:f7:a6:ed:1b:a5:da:15:08:
5d:cf:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:53:58 2025 by rpki-client