Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
File: gSdW6ySj41K9bonR9aoISIlhpnQ.mft (raw, json)
Hash identifier: i32LDks3CYe1WFAw5pZUZWuhYKNQrRCw9GlsiiaMBjo=
Subject key identifier: 3F:2B:A1:C0:9C:B4:40:F5:E8:98:52:E4:0A:40:37:C5:E9:E4:DE:61
Authority key identifier: 81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
Certificate issuer: /CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Certificate serial: 0196AA317E46ECA40B94606FF4F2E93FC467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
Manifest number: 0841
Signing time: Wed 07 May 2025 10:01:32 +0000
Manifest this update: Wed 07 May 2025 10:01:32 +0000
Manifest next update: Thu 08 May 2025 10:01:32 +0000
Files and hashes: 1: gSdW6ySj41K9bonR9aoISIlhpnQ.crl (hash: +BBee7BZw3PgvI3RAMguiu8CIG/sAudXKgQkZFKUvmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:7e:46:ec:a4:0b:94:60:6f:f4:f2:e9:3f:c4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=812756eb24a3e352bd6e89d1f5aa08488961a674
Validity
Not Before: May 7 10:01:32 2025 GMT
Not After : May 8 10:01:32 2025 GMT
Subject: CN=3f2ba1c09cb440f5e89852e40a4037c5e9e4de61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1c:dc:38:2a:37:24:0b:31:54:c9:a5:d9:5d:
9a:dd:eb:71:2c:2d:83:fe:90:8d:40:5b:ad:df:06:
a6:68:c6:c0:6f:f8:b9:7a:e5:40:02:c7:9a:2c:5e:
37:26:d7:84:da:d4:4f:cc:bf:19:f6:9c:63:01:c4:
6c:99:8d:90:4f:77:ba:7f:55:00:98:ae:ce:a5:b9:
32:7d:bf:91:b3:25:b0:19:f5:e6:ff:8c:30:ea:a6:
17:60:11:7d:af:ff:7b:d3:49:dc:02:63:f5:68:3a:
41:b2:6f:7f:53:56:8c:64:f8:95:60:40:28:7d:81:
78:6d:bf:60:62:ca:bb:72:8e:f2:45:d2:8e:0b:53:
0f:21:87:9f:07:98:05:1d:dc:ec:0c:b1:67:c1:5e:
59:cc:24:db:8e:32:92:17:ed:9f:17:8a:6b:cb:12:
cf:b8:6e:fb:37:df:6b:dd:60:14:04:ad:61:0e:d8:
ce:8e:fc:48:45:6c:e1:e1:d1:28:a8:a4:74:6d:8b:
0b:e2:c5:03:ae:4f:d4:e4:af:75:43:ea:10:77:ae:
cb:4d:f0:e6:cb:92:d8:06:d1:31:b1:09:1d:c1:91:
31:09:0c:22:ab:68:e5:f4:b5:a3:d5:ee:aa:de:ab:
f0:99:95:59:00:55:89:0b:61:fa:6f:03:18:33:d3:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:A1:C0:9C:B4:40:F5:E8:98:52:E4:0A:40:37:C5:E9:E4:DE:61
X509v3 Authority Key Identifier:
keyid:81:27:56:EB:24:A3:E3:52:BD:6E:89:D1:F5:AA:08:48:89:61:A6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSdW6ySj41K9bonR9aoISIlhpnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/ba6634-e915-4036-a997-6d521bc474f4/1/gSdW6ySj41K9bonR9aoISIlhpnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:49:11:c9:90:97:a5:bd:d6:8f:30:f4:f4:07:4b:8c:8a:e9:
a6:7b:8f:5a:b3:07:3f:a5:99:10:ea:77:1b:22:58:e5:5c:66:
a3:ab:0d:5b:5f:9e:a2:41:6e:63:7f:84:57:8b:23:82:f2:d7:
e3:71:16:44:af:dd:31:aa:93:98:9b:7d:70:6f:1e:01:3b:ab:
0f:f1:9a:b7:46:3f:cf:03:6e:29:c8:9e:1c:08:9b:f6:80:ac:
61:ab:55:bd:c2:f5:5a:7f:b5:b3:b1:25:bc:86:d3:ad:0a:52:
a1:7a:6b:f5:fc:a6:8a:bf:19:44:1f:e5:5d:44:ec:05:5f:ac:
ec:03:33:82:b2:0f:e1:cf:22:6b:df:a9:83:79:91:bf:bd:08:
78:34:62:00:b7:d6:45:2b:76:c8:87:02:df:d6:70:59:71:38:
8e:d3:6e:14:d0:13:33:ea:9a:eb:e5:66:26:2a:e9:c8:31:d4:
14:36:fd:72:38:c4:7f:b3:e6:8a:0c:07:aa:87:36:41:0c:7a:
21:16:78:da:03:85:41:aa:62:35:d7:dc:b2:9f:da:4c:7a:ca:
09:f1:da:cb:ab:7c:8f:2c:02:2a:a4:c2:18:6a:35:49:b5:7a:
97:1b:2b:2f:05:e1:bc:b3:80:3b:ff:b6:f0:94:23:ef:b0:0b:
5e:97:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:12:31 2025 by rpki-client