Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: 5JloC2E5tjfrWDE50G/9kYQ+ODQmBUgdYx9pvZ4ifns=
Subject key identifier: BB:63:F4:3F:8E:95:12:9A:2D:4A:F7:D9:CC:21:E9:B0:0B:71:58:D1
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 01969E9A34D40F27F5A202B01F00D614C020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 1520
Signing time: Mon 05 May 2025 04:00:28 +0000
Manifest this update: Mon 05 May 2025 04:00:28 +0000
Manifest next update: Tue 06 May 2025 04:00:28 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: GbhuxdiJeefRph4zikhpCV0Vv7sKy2POuB/BTMsx648=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:34:d4:0f:27:f5:a2:02:b0:1f:00:d6:14:c0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: May 5 04:00:28 2025 GMT
Not After : May 6 04:00:28 2025 GMT
Subject: CN=bb63f43f8e95129a2d4af7d9cc21e9b00b7158d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:74:a9:91:2d:7f:d9:48:77:ee:98:50:6e:
9c:14:8f:40:b1:d8:a0:b1:bd:b3:a3:f1:0c:ec:8d:
8f:68:02:f8:f0:13:43:32:6b:df:08:12:ed:1c:7d:
9c:30:9d:e9:29:43:dc:8d:e6:b5:30:7e:ca:b9:e3:
3f:e8:d7:ae:38:f2:ab:31:8a:a3:44:50:63:f6:2e:
74:c6:6e:ac:63:5d:a4:e4:ee:fd:79:69:e9:59:f6:
a9:07:d9:38:01:76:fe:7d:84:36:44:05:6c:e9:bf:
42:52:dc:dc:92:65:cd:f2:ac:4a:95:75:97:54:cd:
dd:3c:4d:9b:f3:07:6b:a2:cb:1b:18:31:f5:b7:db:
3b:aa:60:f4:96:3e:e4:d0:ef:50:c2:17:43:18:16:
90:f7:3e:26:0e:1f:6d:1e:d2:58:2d:d4:f3:f5:0e:
42:07:0a:d0:df:e0:c6:62:84:f0:b4:b1:03:82:4b:
4d:4c:d7:b7:31:7d:5b:79:ad:a9:7b:39:a5:b1:72:
cb:6a:15:72:e8:9b:c9:88:b1:77:e8:50:65:f0:e8:
8c:2f:22:6e:04:cf:ae:76:c9:15:2c:15:89:2e:f1:
35:33:7f:a1:a8:e9:41:df:bf:78:b9:f6:8d:35:59:
69:47:c5:d6:95:a4:74:4c:e6:45:95:54:eb:54:d3:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:F4:3F:8E:95:12:9A:2D:4A:F7:D9:CC:21:E9:B0:0B:71:58:D1
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:8d:bb:c7:1a:00:a5:f7:25:aa:77:56:0c:9e:f1:33:3b:
71:47:44:5a:16:44:23:7f:4d:97:1b:bb:7b:40:7b:bf:26:5a:
8e:ee:f2:c4:f2:39:68:ff:eb:2d:cc:8c:a6:2c:bc:bd:72:83:
6a:63:3c:10:af:1c:92:17:20:e9:4f:c8:67:c8:b3:76:7e:cc:
6a:95:1e:3c:28:c8:f5:c0:0e:b0:15:93:ad:72:21:2f:62:4c:
fc:c1:03:d2:75:b1:01:e5:18:90:94:36:40:f8:a6:7e:2e:2f:
3c:f1:39:6e:e9:ad:f1:82:37:57:00:02:a3:64:a0:12:e9:92:
49:20:44:9c:de:18:97:21:cb:ce:70:de:52:a7:ae:b2:1b:25:
d2:ef:60:5d:2c:be:ee:3b:c1:38:89:9b:e2:a7:7b:9d:b2:c6:
6c:21:4d:13:bd:e5:97:4c:f6:40:a3:28:6e:89:0f:21:1e:21:
e3:7c:f0:21:07:2d:21:8b:8c:44:6f:ed:cd:8e:bf:8f:76:18:
13:a1:cd:0f:2a:ad:9c:50:6b:5c:dd:8e:52:5e:20:59:75:8c:
0f:ba:4f:fe:3b:91:96:38:bd:c5:c6:36:de:7f:b0:81:36:8f:
bb:e0:f7:5b:e8:80:d7:a6:e7:e4:16:08:9e:78:b1:02:09:d1:
1d:ed:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:18:49 2025 by rpki-client