Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: QKFe3wl7TsEa4v2ZeX2K/b2R5KAsr1BDNDkk2zQl2/k=
Subject key identifier: 84:08:EA:79:3B:0A:C0:45:2C:3B:57:13:84:75:04:71:F1:DA:9B:B0
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 0196AEB2684E47A33A5243B0D5AC26954B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 0443
Signing time: Thu 08 May 2025 07:00:49 +0000
Manifest this update: Thu 08 May 2025 07:00:49 +0000
Manifest next update: Fri 09 May 2025 07:00:49 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: pPik5hNbbcqbHDsp9J/F6aQyB6P2O7W0rnmTEDP4fAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:68:4e:47:a3:3a:52:43:b0:d5:ac:26:95:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: May 8 07:00:49 2025 GMT
Not After : May 9 07:00:49 2025 GMT
Subject: CN=8408ea793b0ac0452c3b571384750471f1da9bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:df:c6:8b:58:34:b5:63:97:9f:81:2b:7d:
d8:d5:6c:53:77:10:43:bb:c2:e9:18:da:14:df:6b:
a8:bb:5f:03:34:33:9e:bb:69:67:1f:a3:99:db:a6:
34:d0:29:89:a4:5b:70:e7:b7:b2:68:13:6d:a5:40:
43:44:75:1a:13:a2:b9:fe:25:91:f7:42:31:50:1b:
11:5f:42:3b:2d:9e:9b:30:18:6b:a0:ca:92:c9:5a:
ff:55:39:27:06:59:45:e4:89:15:0f:b5:0e:3d:aa:
79:64:a4:8d:bd:71:82:5d:ec:08:da:0f:59:64:23:
ed:77:ad:2c:3d:99:2b:90:18:2b:ca:19:4e:7c:d6:
dd:ab:5d:8f:46:90:ad:72:8a:d7:75:f0:c8:8c:64:
f4:b0:70:21:b7:54:a7:06:81:d1:8a:21:66:d5:96:
dc:6b:a7:43:21:fc:99:dd:21:ca:8c:7d:c3:08:bd:
17:58:eb:7a:dd:7b:4e:19:88:26:b5:ea:56:81:53:
10:76:88:5d:87:cc:5b:9a:49:11:86:5a:80:46:d5:
e2:f6:43:e3:be:6d:5f:20:3b:69:ae:f7:3c:e9:9d:
88:2f:78:4d:ac:4f:68:6d:7a:88:41:1d:1d:b1:dd:
5d:ca:a2:68:31:77:b4:33:de:ac:bc:d2:2b:40:89:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:08:EA:79:3B:0A:C0:45:2C:3B:57:13:84:75:04:71:F1:DA:9B:B0
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:56:68:93:4b:b1:6c:1d:bd:1d:6f:97:68:f7:33:b3:59:8b:
e8:b5:fa:1c:27:9d:78:97:75:91:52:1f:56:30:8e:e2:1b:03:
55:b8:00:c2:0f:c9:47:60:06:98:18:04:4f:1b:70:b2:a6:cf:
cd:e1:e4:aa:db:63:c2:d7:b3:f3:a6:57:cf:82:7e:a2:94:eb:
a9:37:27:91:34:c1:96:ce:cd:55:4d:ee:3c:3a:20:1e:fe:5a:
3b:86:32:5f:aa:23:64:e1:81:31:72:f7:7f:1e:a6:7f:12:40:
9f:cf:d8:00:c7:6b:d7:17:58:c6:22:4b:0f:be:1c:19:f2:d8:
cd:f4:a3:8e:87:de:65:5a:ae:ab:14:97:8f:dd:2f:cf:ec:d5:
52:8c:aa:05:27:08:0b:99:9f:1f:23:6f:44:52:33:08:24:b4:
6f:80:c6:21:b8:57:d9:d1:3d:04:57:c9:d1:fb:26:50:e7:33:
95:45:30:9b:7d:72:e6:e9:37:8f:47:1d:58:27:76:ec:30:ab:
7e:ab:54:d4:fb:69:4a:8c:06:62:4e:cd:40:77:6e:fb:15:74:
41:33:91:16:6c:ed:f7:51:32:0e:e8:da:9e:a2:8c:37:f7:36:
f8:ac:8a:51:4d:49:c1:2e:40:17:2a:d1:bc:62:52:6f:66:a2:
bc:64:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:59:21 2025 by rpki-client