Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: eROY5JfnAOKWpkE8ArlbAQ2+TSYlDMxUrM65INddZI0=
Subject key identifier: 0D:D8:20:A4:5A:74:85:B2:32:FC:D7:7A:34:31:DB:18:84:8F:C8:30
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 0196BF6FA277DBF9E7E9E99FE0685B0A10F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 13:01:26 +0000
Manifest this update: Sun 11 May 2025 13:01:26 +0000
Manifest next update: Mon 12 May 2025 13:01:26 +0000
Files and hashes: 1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: JE7buxX9QYaiByrKnV8XHUwvvWPSX56fJW8pGTJBRqM=)
2: HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (hash: TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:a2:77:db:f9:e7:e9:e9:9f:e0:68:5b:0a:10:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: May 11 13:01:26 2025 GMT
Not After : May 12 13:01:26 2025 GMT
Subject: CN=0dd820a45a7485b232fcd77a3431db18848fc830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:2b:60:dc:ac:dd:07:29:67:f4:30:fe:f4:
eb:b9:ca:3c:b7:2e:60:a9:97:e9:72:68:03:2f:33:
c0:27:a3:85:25:32:28:82:06:36:97:54:26:35:5b:
45:68:41:48:82:4f:ce:16:48:bc:9b:c3:2f:1e:32:
ed:97:91:15:a5:11:8b:5b:cf:83:f9:1f:58:c5:b1:
d3:e0:f8:96:de:d5:b4:74:8c:40:83:ef:94:75:f8:
97:36:88:86:73:7a:cb:5a:b1:74:65:dc:77:47:98:
d5:ff:ba:41:d4:57:cf:bf:45:99:68:8f:8d:01:33:
06:ea:12:83:e2:cd:69:96:b5:f0:03:0c:91:a6:64:
b4:d8:82:30:aa:af:0d:80:62:5e:66:ae:2f:cf:20:
77:34:77:f5:b6:ce:5d:6e:8f:69:e5:70:1a:be:60:
98:4e:62:dc:5b:de:c5:75:29:af:19:08:0a:a8:45:
a4:bc:de:c7:39:11:27:50:04:28:03:b5:75:78:7d:
9a:02:44:f7:6e:fd:19:29:00:69:62:27:34:e1:3d:
31:6d:44:e0:22:21:79:13:bf:87:05:8d:ee:6c:d3:
06:b6:8c:83:2c:27:ef:a4:3f:19:2c:03:d0:fb:d5:
6a:3a:3b:de:81:cd:0f:bf:1e:0f:ac:68:89:80:5d:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D8:20:A4:5A:74:85:B2:32:FC:D7:7A:34:31:DB:18:84:8F:C8:30
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:da:6d:8e:b5:59:34:67:d7:2f:73:06:bb:39:f2:f3:5f:91:
46:f4:30:9a:8b:f0:84:0b:5f:bf:d3:74:dd:ec:47:04:e2:b9:
2d:14:8e:cb:22:9f:28:ec:96:cd:1a:4b:45:db:85:4c:17:a2:
d2:b7:7e:78:72:5a:fe:a9:e1:f6:ea:6d:c6:99:cb:20:18:3d:
b4:6a:e5:33:18:b6:83:cc:2b:1e:05:9a:ed:e3:74:d3:0b:42:
3b:fc:b5:5c:35:a0:3b:b9:df:86:f1:6d:77:93:a6:aa:bf:f9:
ee:eb:e3:d4:ef:a7:29:a0:e9:1c:61:9e:83:f0:bb:3a:cb:d1:
c6:df:3a:67:17:5a:13:f2:50:a5:75:46:38:64:ab:0d:89:07:
3d:6a:a8:98:db:98:0f:a8:32:a4:27:a1:4d:d2:8a:e4:af:03:
b0:fc:da:35:f3:22:6f:72:db:22:ea:22:34:d6:f0:e1:58:a5:
bd:c5:e3:40:fe:a5:b3:0d:d3:b0:88:3f:22:c7:8f:4a:2e:54:
7f:14:56:24:31:c0:2f:2e:33:7a:2c:76:ee:21:8b:5a:56:44:
63:d6:ff:22:5e:de:22:29:0f:5e:98:f8:af:7b:0e:68:c9:7f:
6c:f4:fb:cb:33:a8:77:d8:75:d0:ec:74:bb:df:82:e6:04:80:
ed:6f:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:22:49 2025 by rpki-client